Hi,
I am trying to setup my Mikrotik router but it seems I don’t quite understand how to do this, so I hope someone can help me with it.
I have the following setup:
ether1 and ether 2 needs to be a trunk port with vlan 1-7
ether3, ether4, ether5 needs to be an access port on vlan 1.
The WiFi needs to be on vlan 1 as well and I have an management ip also on vlan 1.
I have created the following configuration:
/interface bridge
add name=br-vlan1
/interface vlan
add interface=br-vlan1 l2mtu=1594 name=vlan1 vlan-id=1
add interface=ether1 l2mtu=1594 name=vlan2 vlan-id=2
add interface=ether1 l2mtu=1594 name=vlan3 vlan-id=3
add interface=ether1 l2mtu=1594 name=vlan4 vlan-id=4
add interface=ether1 l2mtu=1594 name=vlan5 vlan-id=5
add interface=ether1 l2mtu=1594 name=vlan6 vlan-id=6
add interface=ether1 l2mtu=1594 name=vlan7 vlan-id=7
/interface ethernet switch port
set 0 default-vlan-id=1 vlan-header=add-if-missing vlan-mode=secure
set 1 default-vlan-id=1 vlan-header=add-if-missing vlan-mode=secure
set 2 default-vlan-id=1 vlan-header=always-strip vlan-mode=secure
set 3 default-vlan-id=1 vlan-header=always-strip vlan-mode=secure
set 4 default-vlan-id=1 vlan-header=always-strip vlan-mode=secure
set 5 default-vlan-id=1 vlan-header=always-strip vlan-mode=secure
/interface wireless security-profiles
add authentication-types=wpa2-psk eap-methods="" group-ciphers=tkip,aes-ccm management-protection=allowed mode=dynamic-keys name=profile1 supplicant-identity="" unicast-ciphers=tkip,aes-ccm wpa2-pre-shared-key="xxxxxxx"
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=20 band=2ghz-b/g/n country=netherlands disabled=no frequency=2417 l2mtu=1600 mode=ap-bridge security-profile=profile1 ssid=wijfei
/interface bridge port
add bridge=br-vlan1 interface=ether3
add bridge=br-vlan1 interface=ether2
add bridge=br-vlan1 interface=ether5
add bridge=br-vlan1 interface=ether4
add bridge=br-vlan1 interface=wlan1
add bridge=br-vlan1 interface=ether1
/interface ethernet switch vlan
add independent-learning=no ports=ether1,ether2,ether3,ether4,ether5,switch1-cpu switch=switch1 vlan-id=1
add independent-learning=no ports=ether1,ether2 switch=switch1 vlan-id=2
add independent-learning=no ports=ether1,ether2 switch=switch1 vlan-id=3
add independent-learning=no ports=ether1,ether2 switch=switch1 vlan-id=4
add independent-learning=no ports=ether1,ether2 switch=switch1 vlan-id=5
add independent-learning=no ports=ether1,ether2 switch=switch1 vlan-id=6
add independent-learning=no ports=ether1,ether2 switch=switch1 vlan-id=7
/ip address
add address=172.24.4.254/24 interface=br-vlan1 network=172.24.4.0
/ip dns
set servers=172.24.4.253
/ip route
add distance=1 gateway=172.24.4.253
/system clock
set time-zone-name=Europe/Amsterdam
/system leds
set 0 interface=wlan1
/tool romon port
add
Which seems to do what I want, except that whenever a machine connected to ether2 pings a device connected to ether1 I get duplicate packages. The problem seems to be in the bridge configured, but whenever i remove the bridge I don’t get my wireless working and I don’t get the management ip working on all interfaces anymore.
Anyone who can help me out here ?
Thanks in advance !