CRS309 with 2 VLANs and one trunk

RouterOS Beginner Basics
1

Good morning (o;

Coming from IOS I just read through this tutorial on how to add VLANs, access and trunk ports: http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
What is unclear in this tutorial is regarding the management IP as it says to use an own VLAN ID of 99…

# LAN facing Switch's IP address on a BASE_VLAN
/interface vlan add interface=BR1 name=BASE_VLAN vlan-id=99
/ip address add address=192.168.0.2/24 interface=BASE_VLAN

Basically I need just two VLANs (10 and 62) and one trunk port:

sfp1: VLAN10 (coming from RB router)
sfp2: VLAN62 (coming from ISP modem)
sfp3-sfp7: VLAN10
sfp8: Trunk

So I guess this should do it (VLAN security left out)?

# create one bridge, set VLAN mode off while we configure
/interface bridge add name=BR1 protocol-mode=none vlan-filtering=no

# Access ports
# ingress behavior
/interface bridge port

add bridge=BR1 interface=sfp-sfpplus1 pvid=10
add bridge=BR1 interface=sfp-sfpplus2 pvid=62
add bridge=BR1 interface=sfp-sfpplus3 pvid=10
add bridge=BR1 interface=sfp-sfpplus4 pvid=10
add bridge=BR1 interface=sfp-sfpplus5 pvid=10
add bridge=BR1 interface=sfp-sfpplus6 pvid=10
add bridge=BR1 interface=sfp-sfpplus7 pvid=10

# egress behavior
/interface bridge vlan

add bridge=BR1 untagged=sfp-sfpplus1,sfp-sfpplus3,sfp-sfpplus4,sfp-sfpplus5,sfp-sfpplus6,sfp-sfpplus7 vlan-ids=10
add bridge=BR1 untagged=sfp-sfpplus2 vlan-ids=62

# Trunk
# ingress behavior
/interface bridge port

# Purple Trunk. Leave pvid set to default of 1
add bridge=BR1 interface=sfp-sfpplus8

/interface bridge set BR1 vlan-filtering=yes

How do I now achieve that the existing Switch IP is in the VLAN10?


thanks in advance
richard

2

Okay…had to use “set bridge=BR1” as a bridge is already assigned…

But now I get following erro:

[admin@Switch] /interface bridge vlan> set bridge=BR1 tagged=sfp-sfpplus8 [find vlan-ids=62]
failure: can not change dynamic
3

This is the output from ports:

[admin@Office_2] /interface bridge port> print
Flags: X - disabled, I - inactive, D - dynamic, H - hw-offload 
 #     INTERFACE                  BRIDGE                 HW  PVID PRIORITY  PATH-COST INTERNAL-PATH-COST    HORIZON
 0 I H ;;; defconf
       ether1                     UPC                    yes    1     0x80         10                 10       none
 1   H ;;; defconf
       sfp-sfpplus1               UPC                    yes    1     0x80         10                 10       none
 2   H ;;; defconf
       sfp-sfpplus2               UPC                    yes   10     0x80         10                 10       none
 3 I H ;;; defconf
       sfp-sfpplus3               UPC                    yes   10     0x80         10                 10       none
 4 I H ;;; defconf
       sfp-sfpplus4               UPC                    yes   10     0x80         10                 10       none
 5 I H ;;; defconf
       sfp-sfpplus5               UPC                    yes   10     0x80         10                 10       none
 6 I H ;;; defconf
       sfp-sfpplus6               UPC                    yes   10     0x80         10                 10       none
 7 I H sfp-sfpplus7               UPC                    yes   62     0x80         10                 10       none
 8   H sfp-sfpplus8               UPC                    yes   62     0x80         10                 10       none

and this from VLANs:

[admin@Office_2] /interface bridge vlan> print
Flags: X - disabled, D - dynamic 
 #   BRIDGE                       VLAN-IDS  CURRENT-TAGGED                     CURRENT-UNTAGGED                    
 0 D UPC                          1                                            UPC                                 
 1 D UPC                          62                                           sfp-sfpplus8                        
                                                                               sfp-sfpplus7                        
 2 D UPC                          10                                           sfp-sfpplus2                        
                                                                               sfp-sfpplus3                        
                                                                               sfp-sfpplus4                        
                                                                               sfp-sfpplus5                        
                                                                               sfp-sfpplus6

Dunno why I can’t set the trunk port…

4

If you want to add sfp8 as a tagged (Trunk) port, use below

“/interface bridge vlan add bridge=BR1 tagged=sfp-sfpplus8 vlan-ids=62”

For management of device, you must set the bridge also as a tagged port

5

Hmm..somehow it went a little further…with a mix of CLI and WebGUI…somehow it always complained about dynamic ports…but when setting the VLAN ID afterwards in the GUI it works…so got now one VLAN through 2 * CRS309 (o;

Now comes the LAN VLAN…and to not interrupt all users here at home (o;

Yes..this one worked:

/ip address add address=10.0.2.1/16 interface=bridge

6

Good morning

Hmm…how would I achieve this to have access to management via VLAN10?

Tried to set BR1 as tagged in /interface bridge vlan…but then the trunk goes down…

And from the tutorial mentioned above this also didn’t work:

/interface vlan add interface=BR1 name=BASE_VLAN vlan-id=10
/ip address add address=10.0.2.1/16 interface=BASE_VLAN