After hours on this forum, changing and adding interfaces and bridges 50 times and configurations of interfaces even more I hope someone can give me a hand. Basically I’m trying to create this setup: http://forum.mikrotik.com/t/route-wan-network-to-vlan/152808/1 (unfortunately no working config was posted). I’ve got a configuration that does not work and I cannot figure out why not.
What I’ve done is create a separate bridge with two members, one being an interface from the upstream router, and the other being a vlan_interface that is used on the lan bridge. My expectations were all traffic would be allowed within that bridge and with that a DHCP request from the vlan_interface would be received and replied to by the upstream router. However, I only get an DHCP if I disable my wanBridge / wan. With that, I obviously loose Internet access on the bridge / LAN.
Important elements, I initially tried to solve it all via ether2 (which is used for the wanbridge) and adding a vlan_interface to ether2 and adding that to iptv_bridge. But there I got stuck. (It is still my preferred solution) Therefore I added ether4. Both ether2 and ether4 are connected to the same (unmanaged) upstream router. For a moment yesterday evening this worked, but after a reboot it changed (to my surprise after changing 80 things even blocking Internet entirely).
Does anybody have an explanation and suggestion how to remedy the situation where ether2 being part of wanBridge blocks my iptv_bridge from getting access?
[admin@MikroTik] /log> /interface bridge export
/interface bridge
add admin-mac=D4:01:C3:B4:0C:F9 auto-mac=no comment=defconf igmp-snooping=yes name=bridge vlan-filtering=yes
add fast-forward=no frame-types=admit-only-vlan-tagged name=iptv_bridge pvid=40 vlan-filtering=yes
add frame-types=admit-only-untagged-and-priority-tagged igmp-snooping=yes multicast-querier=yes name=wanBridge vlan-filtering=yes
/interface bridge port
add bridge=bridge comment=defconf interface=ether3 pvid=100
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=sfp-sfpplus1
add bridge=wanBridge interface=ether2
add bridge=iptv_bridge ingress-filtering=no interface=vTV pvid=40
add bridge=iptv_bridge ingress-filtering=no interface=ether4 pvid=40
/interface bridge vlan
add bridge=bridge comment=VLAN_MG tagged=ether5,ether6,ether7 vlan-ids=101
add bridge=bridge comment="VLAN_IPTV" tagged=ether7,ether5,ether6 vlan-ids=40
[admin@MikroTik] /log> /interface bridge vlan export
X
/interface bridge vlan
add bridge=bridge comment=VLAN_MG tagged=ether5,ether6,ether7 vlan-ids=101
add bridge=bridge comment="VLAN_vTV" tagged=ether7,ether5,ether6 vlan-ids=40
[admin@MikroTik] /log> /interface bridge port export
/interface bridge port
add bridge=bridge comment=defconf interface=ether3 pvid=100
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=sfp-sfpplus1
add bridge=wanBridge interface=ether2
add bridge=iptv_bridge ingress-filtering=no interface=vTV pvid=40
add bridge=iptv_bridge ingress-filtering=no interface=ether4 pvid=40
[admin@MikroTik] /log> /interface vlan export
/interface vlan
add interface=bridge name="v101 (MG)" vlan-id=101
add comment="vTV LAN" interface=bridge name=vTV vlan-id=40
[admin@MikroTik] /log>
