Hello,
Haven’t much experience on Mikrotik VLAN things. And yet have problems setting up my first VLANs on our crs125-24g-1s.
Have done sich things on HP procurves layer2 switches easily via web or command line.
You just specify per port his status (untaggedvlan1,taggedvlan2, taggedvlan3, taggedvlan4)
Did use examples from http://wiki.mikrotik.com/wiki/Manual:CRS_examples (Port Based VLAN)
By default CRS has one master and others slaves.
/interface ethernet
set [ find default-name=ether1 ] name=ether1-master-local
set [ find default-name=ether2 ] master-port=ether1-master-local name=ether2-slave-local
set [ find default-name=ether3 ] master-port=ether1-master-local name=ether3-slave-local
...
Regarding manual:
Note: Multiple master-port configuration is designed as fast and simple port isolation solution, but it limits part of VLAN functionality supported by CRS switch-chip. For advanced configurations use one master-port within CRS switch chip for all ports, configure VLANs and isolate port groups with port isolation profile configuration.
So in my setup for example i need:
Vlan1 (untagged) on ports 1,3.
Vlan2 (tagged) on ports 2,3.
Vlan3 (untagged) on port 4.
or we can describe it other way:
port1 (vlan1 - untag)
port2 (vlan2 - tag)
port3 (vlan1 - untag, vlan2 - tag)
port4 (vlan3 - untag)
(by vlan1 - customer-vid=1)
So i am connected to port 1 for example and using Winbox connection over MAC. And according mikrotik wiki (Port Based VLAN → Add initial VLAN assignments (PVID) to VLAN access ports.) instructions as soon as i add
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=1 ports=ether1-master-local sa-learning=yes
I immediately get disconnected from router and cannot access it using that port (port1). using other ports i still cannot until i add them also to some ingress-vlan-translation.
And also - how can i setup ip for managment on some specific vlan. So only using it i could manage my Mikrotik.