ESXI+Mikrotik+VLAN

Situation:
Config of Mikrotik (1.jpeg):
eth1=wan
eth2=vmware mng port (connected my computer)
eth3=vmware vm port with vlan’s (vlan1, vlan2).
eth4=vmware mng port (administration of esxi).


Конфиг ESXI:
2.jpeg, 3.jpeg

I want to configure, that all vm’s were in separate vlan’s, so they cannot see each other.
At this situation vms’s cannot access their gateways (192.168.1.254 and 192.168.2.254).
3.JPG
2.JPG
1.JPG

have you tried RouterOS 5.21 (or 5.22) we have reports that state this is working on that version of RouterOS.

After upgrade should I reset to defaults?

Right now upgraded to 5.22, but this did not resolved my problem.

You can’t use VLAN interfaces inside ESX - ESX strips the VLAN IDs.

You need to create the VLAN’ed interfaces as physical Ethernet nics connected to the switches inside ESX, and add physical ethernet NICs on the host connected to the virtual switch.

Problem solved. Strange that veterans did not helped with such simple problem.

By default all vlans on MT can see each other and it is normal. You must drop packet between them using firewall rules.

False. You can create vSwitch with VLAN#4095, then ESXi will not strip VLAN headers and you can set them as you wish inside VM.