help needed IP phone VLAN

Hello all,

It is not that I’m new to Mikrotik but I’m really not a specialist. Can someone help me on this?

I have a RB201 1UiAS-2HND-IN router on which I want to create a hybrid port that I would connect an IP phone and PC. I would have a PC connected to the phone switch and the Phone connected on router port Ether5 (let’s say). My WAN is Ether1. The PC and phone would be on different LAN (PC on default 192.168.88.xxx and phone on 192.168.89.xxx) and ultimately I would like to prioritize the LAN for the phone ( I would add more phone later). The router is pretty much configured as it was out of the box so if you know this router you pretty much know my setup.

Can anyone help me?

Marc.

Hi,
I think that the better way to do it is setting your ether5 port as hybrid port.

Assign an IP to ether5:

/ip address add address=192.168.88.254/24 interface=ether5

and after create a VLAN (eg: VLAN101)

/interface vlan add name=ETH5-101 vlan-id =101 interface=ether5



/ip address add address=192.168.89.254/24 interface=ETH5-V101

For prioritize traffic on VLAN 101, you have to use mangle + queue.

I wouldn’t assign the 192.168.88.x address to port 5 directly, as there is a desire to connect more phones (possibly laptops) in the future.
I would just configure the VLAN as described and create a new bridge and add the newly create VLAN as member.
Put the 192.168.89.x address to the VLAN bridge, this makes it again easier to add more ports in the future.
Make sure your phone is using the same VLAN as you have created on the ether port.

Hello,

Many thanks for your responses. I have read carefully and understood I need to do this:

/interface vlan add name=ETH5-V101 vlan-id=101 interface=ether5
/interface bridge add name=bridgetel disabled=no
/interface bridge port add interface=ETH5-V101 bridge=bridgetel
/ip address add address=192.168.89.254/24 interface=bridgetel

Here’s the results:

When I don’t change the 802.1Q/VLAN setting and connect the phone to ETH5, it works and get IP 192.168.88.225
When I change the 802.1Q/VLAN setting to 101, restart and connect the phone to ETH5, it doesn’t works and gets no IP.

I have provided screen capture to show you.

Any idea of what is wrong?

Thanks,
Marc.
cap23.jpg
cap22.jpg
cap21.jpg

Hello again,

I have changed the last line from:
/ip address add address=192.168.89.254/24 interface=bridgetel
to
/ip address add address=192.168.89.1/24 interface=bridgetel

and I went into DHCP server and pool as you can see in the new screen captures.

Now the phone gets an IP 192.168.89.247 but it is not able to communicate with the outside world.

Any idea of what is missing?
cap27.jpg
cap25.jpg
cap26.jpg

Any help for why my phone is not able to get to the Internet?

Anyone able to help on this?

Any help would be greatly appreciated.

If anyone read this post, please give a hand. Thanks.

Have You srcnatted bridgetel? It is separate interface, check firewall rules for it. In general they should be the same as for bridge-local.

Hello karlisi,

Many thanks for your response. I don’t see any natting specific to any bridge. But I think I have done it although it may not be done perfectly right. Please see attached pictures…

You may notice I have added a rule (12) for being able to communicate from my PC to the phone. But since the phone only gets an IP and remains unable to communicate, it is useless.

Can you see something wrong somewhere? Any other ideas?

You have no idea how much time I have spent trying to do this. All my attempts failed. :frowning:

Regards,
Marc
cap42.png
cap43.png

Hello again,

I have made this change without any success…
cap45.png

Is your DHCP server supplying a router address
Go into DHCP-Server → Network and check
There is probably the default entry for 192.168.88.0/24 with the corresponding router address (probably called gateway).
Add a new network entry for the 192.168.89.0/24 network with the correct gateway.

Hello all who helped on this,

Many many many many many thanks. The last comment from Rudios made the difference. I will come back later with a topic summary on how to do this in the hope of helping others.

Thanks again,
Marc.