So I have used zentyal and pfsense and now going to use mikrotik due to zentyal having gone down hill as a router.
My setup currently is with pfsense but, I need to move it to mikrotik as pfsense has issues with a few things.
vlan11 ip 192.168.11.67 gateway 192.168.11.254
vlan12 ip 192.168.12.67 gateway 192.168.12.254
vlan14 ip 192.168.14.67 gateway 192.168.14.254
vlan18 ip 192.168.18.67 gateway 192.168.18.254
vlan20 ip 192.168.20.67 gateway 192.168.20.254
vlan21 ip 192.168.21.67 gateway 192.168.21.254
Need to cap bandwidth at 2.5mbs down .200 mbs up
Also need routing on our ip address as static 192.168.70.0/24
Also each ip has to go out in a certain way
192.168.70.2 out vlan 11
192.168.70.3 out vlan 12
192.168.70.4 out vlan 14
192.168.70.5 out vlan 18
192.168.70.6 out vlan 20
192.168.70.7 out vlan 21
then back to 11
However i’m stuck just getting a pc online using vlans with this.
I can setup all the vlan and gateway Mikrotik sees them fine and they are up traceroute goes to 192.168.70.1 then fails at 192.168.11.67 as I was able to get to that point
I have setup dns
ip dns
servers
8.8.8.8
8.8.4.4
allow remote request
I tried some configs online i found
ip dns
servers
8.8.8.8
8.8.4.4
allow remote request
i
/ip firewall mangle hit enter
add chain=input in-interface=vlan11 action=mark-connection new-connection-mark=vlan11_conn
add chain=input in-interface=vlan12 action=mark-connection new-connection-mark=vlan12_conn
add chain=input in-interface=vlan14 action=mark-connection new-connection-mark=vlan14_conn
add chain=input in-interface=vlan18 action=mark-connection new-connection-mark=vlan18_conn
add chain=input in-interface=vlan20 action=mark-connection new-connection-mark=vlan20_conn
add chain=output connection-mark=vlan11_conn action=mark-routing new-routing-mark=to_vlan11
add chain=output connection-mark=vlan12_conn action=mark-routing new-routing-mark=to_vlan12
add chain=output connection-mark=vlan14_conn action=mark-routing new-routing-mark=to_vlan14
add chain=output connection-mark=vlan18_conn action=mark-routing new-routing-mark=to_vlan18
add chain=output connection-mark=vlan20_conn action=mark-routing new-routing-mark=to_vlan20
add chain=prerouting dst-address-type=!local in-interface=vlan11-OUT per-connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-connection-mark=vlan11_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=vlan12-OUT per-connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-connection-mark=vlan12_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=vlan14-OUT per-connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-connection-mark=vlan14_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=vlan18-OUT per-connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-connection-mark=vlan18_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=vlan20-OUT per-connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-connection-mark=vlan20_conn passthrough=yes
add chain=prerouting connection-mark=vlan11_conn in-interface=WAN-OUT action=mark-routing new-routing-mark=to_vlan11
add chain=prerouting connection-mark=vlan12_conn in-interface=WAN-OUT action=mark-routing new-routing-mark=to_vlan12
add chain=prerouting connection-mark=vlan14_conn in-interface=WAN-OUT action=mark-routing new-routing-mark=to_vlan14
add chain=prerouting connection-mark=vlan18_conn in-interface=WAN-OUT action=mark-routing new-routing-mark=to_vlan18
add chain=prerouting connection-mark=vlan20_conn in-interface=WAN-OUT action=mark-routing new-routing-mark=to_vlan20
/ip firewall nat
add chain=srcnat out-interface=vlan11 action=masquerade
add chain=srcnat out-interface=vlan12 action=masquerade
add chain=srcnat out-interface=vlan14 action=masquerade
add chain=srcnat out-interface=vlan18 action=masquerade
add chain=srcnat out-interface=vlan20 action=masquerade
/ip route
add dst-address=0.0.0.0/0 gateway=192.168.11.254 routing-mark=to_vlan11 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.12.254 routing-mark=to_vlan12 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.14.254 routing-mark=to_vlan14 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.18.254 routing-mark=to_vlan18 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.20.254 routing-mark=to_vlan20 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.11.254 distance=1 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.12.254 distance=2 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.14.254 distance=2 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.18.254 distance=2 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.20.254 distance=2 check-gateway=ping
But, I cannot get the data to pass. If someone can show me how to get data to pass throw vlan’s would help me move onto the specific routes. Bandwidth capping looks really easy in this but, cannot get past this half to already reimage the router due to being over 24 hours.