Help with this configuration with multiple VLAN/NAT

RouterOS General
1

Hello.
I have to ask if it possibile to realize this configuration.

I have a 951-2n with 6.14

I would like to achieve this:

RB addresses:
VLAN6: 100.64.8.104/24
VLAN100: 192.168.0.240/24
LAN: 192.168.0.254/24

the VLAN6 is the “wan” part
the VLAN100 is just a passthrough vlan (bridge mode)
The LAN is the LAN of the customer, and his external network is the VLAN6


eth1: VLAN 100 and 6 tagged.
eth2: LAN
eth3: LAN
eth4: LAN
eth5: VLAN100 untagged

wlan0: bridged to LAN (wpa2-aes key)
wlan1 (virtual AP): VLAN100 untagged (wi-fi with no security)


so:

the ETH1 ends in a HP1700-8 switch that can accept both VLAN 6 and 100
The VLAN100 is a vlan where my public hot-spot network is placed, with a central hot-spot and central dhcp.

The LAN part is 192.168.0.254/24, with DHCP service on it (lan part)
The VLAN6 100.64.6.104/24 is the WAN address (remote gw is 100.64.6.254/24)

How can I configure the vlan part of the network?

thank you

2

Hi Elia,

if you are referring to the Routerboard :
If i’m correct you should be doing something like this (don’t shoot me of i’m partially wrong, i’m doing this without a routerboard on my desk :slight_smile: )

create VLAN 6, bind it to ETH1 and give it the correct IP

then Create VLAN100 and bind it to ETH1 , then create a new bridge and bridge this VLAN to eth5.. AND give that the correct IP.

Let us know how you are proceeding!

Menno

3

Hello.
I would like to have eth1 as a trunk port, and the RB should answer on eth1 (via VLAN6 at 100.64.6.104/24).
Also incoming from eth1 should pass VLAN100 and a wifi shoot to VLAN100 untagged via wlan interface (virtual ap)

4

Hi Elia,

ok, so you should bridge it with the VirtualAP interface as well.

Not having that much experience with that, so someone correct me if i’m wrong?