Hi!
I could not find solution in other topics so I will post this new one.
I have hEX that is connected to my main router.
On my main router i have configured trunk that includes, beside default vlan1, vlan10 for Unify SSID for guests.
Here is situation:
Cyberoam CR100iNG <> ether1 - MikroTik hEX - ether2 <> Cisco SG200-26 <> Unify AP-LR
I need to setup ether1 and ether2 as trunks.
Thanks for help!
You can configure “vlan” interfaces with a parent of ether1 and ether2.
But what is the hEX supposed to do? Routing? Switching?
Currently it’s used to route traffic from one network to the other, providing DHCP on ether2. Now I need to put into story VLANS for access points…
Ok so add VLAN interfaces and configure the IP address for them, and they will be routed.
I have created VLAN interfaces but I'm not sure which address range to use for them. Here is config, maybe you'll get better picture than me:
_/interface vlan
add interface=ether1 name=vlan1_ether1 vlan-id=1
add interface=ether2 name=vlan1_ether2 vlan-id=1
add interface=ether1 name=vlan10_ether1 vlan-id=10
add interface=ether2 name=vlan10_ether2 vlan-id=10
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp_pool1 ranges=192.168.126.100-192.168.126.254
add name=dhcp_pool2 ranges=192.168.126.100-192.168.126.199
/ip dhcp-server
add address-pool=dhcp_pool2 disabled=no interface=ether2 lease-time=10h name=dhcp1
/interface bridge port
add bridge=vlan1_ether1 interface=ether1
add bridge=vlan1_ether1 interface=ether2
/ip address
add address=192.168.0.2/29 interface=ether1 network=192.168.0.0
add address=192.168.126.1/24 interface=ether2 network=192.168.126.0
/ip dhcp-server network
add address=192.168.126.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=192.168.126.1 wins-server=192.168.125.253
/ip route
add distance=1 gateway=192.168.0.1
add distance=1 dst-address=192.168.125.0/24 gateway=192.168.0.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Europe/Zagreb
/system identity
set name="MT_14 (192.168.126.0)"
/system routerboard settings
set memory-frequency=1200DDR_
No, it depends on your network layout which you (need to) know by yourself.
Maybe you do not want to route these VLAN’s but rather bridge them, in which case you want to
create a bridge with both VLAN interfaces in it (without address).
This is something you need to design before smacking a new device in your network.
The idea is to trunk one VLAN from Cyberoam UTM to Ubiquity Unify AP-LR. In the middle is MikroTik hEX.
Cyberoam CR100iNG <> ether1 - MikroTik hEX - ether2 <> Cisco SG200-26 <> Unify AP-LR
I’m not expert in MikroTik, would it make sense to use switch chip?
It is possible, but it requires quite some reconfiguration.
You would need to create two more VLANs for the routing you are now doing on the untagged VLAN,
and configure the switch to put one of those untagged on ether1, the other untagged on ether2, and
put the addreses you now have on ether1 and ether2 on those VLANs.
(strictly speaking it could be done with a single extra VLAN)
It is easiest to use a bridge between vlan10_ether1 and vlan10_ether2 in your config.
This worked perfectly!
Thank you very much!