Hello everyone!
I have tried multiple tutorials and voodoo magic to get this working but not working and not sure if this is even possible. For all my reading this is possible.
Yes.VLAN5 & VLAN10 are transporting the two internet connections to the router. Attaching VLAN interfaces with those IDs to the router P5 provides your ‘WAN’ interfaces.
Got the dhcp server working, I deleted and redid the config.
The ones in the image with V20 are now connected to Vlan1
Put I cannot get dhcp from the router on them, any ideas ?
# dec/06/2023 22:33:55 by RouterOS 6.49.10
# software id = 2WP2-ZSV3
/interface bridge
add name=lan
add name=liberty
add name=vlan-trunk
/interface vlan
add interface=ether1 name=vlan1 vlan-id=1
add interface=lan name=vlan1b vlan-id=1
add interface=ether1 name=vlan10 vlan-id=10
add interface=ether1 name=vlan100 vlan-id=100
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool1 ranges=10.10.10.2-10.10.10.254
add name=dhcp_pool2 ranges=10.10.10.2-10.10.10.254
add name=dhcp_pool3 ranges=10.10.0.2-10.10.0.200
/ip dhcp-server
add address-pool=dhcp_pool3 disabled=no interface=lan lease-time=1d name=dhcp1
/interface bridge port
add bridge=vlan-trunk comment=defconf interface=ether1
add bridge=lan comment=defconf hw=no interface=sfp-sfpplus1
add bridge=lan comment=defconf hw=no interface=sfp-sfpplus2
add bridge=lan comment=defconf frame-types=admit-only-vlan-tagged interface=sfp-sfpplus3
add bridge=lan comment=defconf hw=no interface=sfp-sfpplus4
/interface list member
add interface=ether1 list=WAN
add interface=sfp-sfpplus1 list=LAN
/ip address
add address=10.10.0.1/16 interface=lan network=10.10.0.0
/ip dhcp-client
add disabled=no interface=vlan100
add default-route-distance=10 disabled=no interface=vlan10
/ip dhcp-server config
set store-leases-disk=1d
/ip dhcp-server network
add address=10.10.0.0/16 dns-server=10.10.0.2,8.8.8.8 gateway=10.10.0.1 netmask=16
/ip firewall nat
add action=masquerade chain=srcnat
/system clock
set time-zone-name=America/Puerto_Rico
/system logging
add topics=dhcp,debug
/system routerboard settings
set boot-os=router-os
This configuration matches neither the router nor the switch in the diagram you showed. You created 3 switches, any reason?
I suspect you are missing vlan-filtering (Careful - potential for losing access to the device if you are not careful), which is required if you want to have untagged ports in anything else than VLAN 1.And warningI currently have no router lying around to test this. Review, adapt and correct before any copy-paste.
Starting from a blank configuration, the switch configuration statements should look like this. I am keeping port 4 in VLAN1 so you keep access to it. Review before using and you may have to change the IP address assigned to interface bridge so you don’t have a conflict with the one on the router.
/interface/bridge
set [find name=bridge] vlan-filtering=yes
/interface/bridge/vlan
add bridge=bridge vlan-id=5 tagged=bridge,ether5 untagged=ether1 comment="vlan5"
add bridge=bridge vlan-ids=10 tagged=bridge,ether5 untagged=ether2 comment="vlan10"
add bridge=bridge vlan-ids=20 tagged=bridge,ether5 untagged=ether3 comment="vlan20"
/interface/bridge/ports
add interface=ether1 pvid=5 edge=yes frame-types=admit-only-untagged-and-priority-tagged comment="Internet"
add interface=ether2 pvid=10 edge=yes frame-types=admit-only-untagged-and-priority-tagged comment="Internet2"
add interface=ether3 pvid=20 edge=yes frame-types=admit-only-untagged-and-priority-tagged comment="Whatever"
add interface=ether4 pvid=1 edge=yes frame-types=admit-only-untagged-and-priority-tagged comment="Do not cut access"
add interface=ether5 pvid=1 edge=no comment="Trunk to main router"
On the router, you will have a similar configuration, again do not use multiple switches!
Again, starting from a blank configuration, review the following.
/interface/bridge
set [find name=bridge] vlan-filtering=yes
/interface/bridge/vlan
add bridge=bridge vlan-id=5 tagged=bridge,ether5 comment="vlan5"
add bridge=bridge vlan-ids=10 tagged=bridge,ether5 comment="vlan10"
add bridge=bridge vlan-ids=20 tagged=bridge,ether5 comment="vlan20"
/interface/bridge/ports
add interface=ether5 pvid=1 edge=no comment="Trunk to switch"
/interface/vlan
add name="vlan.5" interface=bridge vlan-id=5 disabled=no comment="Internet 1"
add name="vlan.10" interface=bridge vlan-id=10 disabled=no comment="Internet 2"
add name="vlan.20" interface=bridge vlan-id=20 disabled=no comment="Whatever"
/interface/list/member
add list=WAN interface=vlan.5 comment="Internet is WAN"
add list=WAN interface=vlan.10 comment="Internet is WAN"
add list=LAN interface vlan.20 comment="Another internal network"
/ip/dhcp-client
add interface=vlan.5 add-default-route=yes default-route-distance=25 comment="WAN interface" disabled=no
add interface=vlan.10 add-default-route=yes default-route-distance=50 comment="WAN interface" disabled=no
/ip/address
add address=192.168.27.1/24 comment="VLAN 20 local addresses" disabled=no interface=vlan.20 network=192.168.27.0
/ip/pool
add name="vlan20Pool" ranges=192.168.27.5-192.168.27.254
/ip/dhcp-server/network
add address=192.168.27.0/24 dns-server=192.168.27.1 domain=whatever.local gateway=192.168.27.1 netmask=24
/ip/dhcp-server
add address-pool=vlan20Pool authoritative=yes bootp-support=none disabled=no interface=vlan.20 lease-script="" lease-time=10m name=\
dhcp-vlan20 use-radius=no
Thank you @vingjfg with your approach I was able to rebuild the configuration using a single bridge and vlan
Here is the completed working configuration. The next steps would be to implement load balancing to use both wans at once.
Thanks
~dices
router.rsc (2.57 KB)
# RouterOS 6.49.10
# software id = 2WP2-ZSV3
# model = CRS305-1G-4S+
# Set up the bridge with VLAN filtering enabled
/interface bridge
add name=bridge1 vlan-filtering=yes
# Create VLAN interfaces on the bridge
/interface vlan
# VLAN 1 - MGMT
add interface=bridge1 name=vlan.1 vlan-id=1
# VLAN 5 - WAN.1
add interface=bridge1 name=vlan.5 vlan-id=5
# VLAN 10 - WAN.2
add interface=bridge1 name=vlan.10 vlan-id=10
# VLAN 20 - LAN
add interface=bridge1 name=vlan.20 vlan-id=20
# Define Interface Lists for easier management and reference
/interface list
add name=WAN
add name=LAN
# Define an IP Pool for DHCP distribution on VLAN 20
/ip pool
add name=Pool-VLAN.20 ranges=10.10.0.10-10.10.0.253
# Set up DHCP Server for VLAN 20 with the defined IP Pool
/ip dhcp-server
add address-pool=Pool-VLAN.20 disabled=no interface=vlan.20 lease-time=23h10m name=DHCP-VLAN.20
# Configure bridge ports
/interface bridge port
# Set ether1 as a port for VLAN-tagged traffic (trunk port)
add bridge=bridge1 frame-types=admit-only-vlan-tagged interface=ether1
# Set SFP+ ports as members of VLAN 20, carrying untagged traffic
add bridge=bridge1 interface=sfp-sfpplus2 pvid=20
add bridge=bridge1 interface=sfp-sfpplus3 pvid=20
add bridge=bridge1 interface=sfp-sfpplus1 pvid=20
add bridge=bridge1 interface=sfp-sfpplus4 pvid=20
# Configure VLAN membership on the bridge
/interface bridge vlan
# Specifying tagged and untagged ports for each VLAN
add bridge=bridge1 tagged=bridge1,ether1 vlan-ids=1
add bridge=bridge1 tagged=bridge1,ether1 vlan-ids=5
add bridge=bridge1 tagged=bridge1,ether1 vlan-ids=10
add bridge=bridge1 tagged=bridge1,ether1 vlan-ids=20
# Add VLAN interfaces to interface lists for WAN and LAN
/interface list member
add interface=vlan.5 list=WAN
add interface=vlan.10 list=WAN
add interface=vlan.20 list=LAN
# Assign IP address to VLAN 20 interface for LAN
/ip address
add address=10.10.0.1/16 interface=vlan.20 network=10.10.0.0
# Configure DHCP clients for obtaining IP addresses for WAN VLANs
/ip dhcp-client
add default-route-distance=5 disabled=no interface=vlan.5
add default-route-distance=10 disabled=no interface=vlan.10
# Set up DHCP network for VLAN 20, specifying gateway and DNS server
/ip dhcp-server network
add address=10.10.0.0/16 dns-server=1.1.1.1 gateway=10.10.0.1 netmask=16
# NAT configuration to allow internet access for internal network
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
# Router boot settings
/system routerboard settings
set boot-os=router-os
Cool and you’re most welcome.
The reference in case you need it in future…
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1