How to configure a CCRXXXX as router with VLAN trunk ports ?

RouterOS General
1

hello,

I’ve got (quite urgent) need for help on setting up a CCRXXXX (currently a CCR2004 vith RouterOS 6.48.4) to act as a router between:

  • a DHCP-configured Ethernet uplink to the Internet with 1.2.3.4 address
  • a couple of trunk Ethernet interfaces to 3 other LAN switchs
  • on LAN switches, are connected 3 types of devices, each belonging to a single VLAN
  • Staff devices belongs to VLAN 20 and net 192.168.20.0/24
  • Guest devices belongs to VLAN 30 and net 192.168.30.0/24
  • the other devices belongs to untagged VLAN1 and net 192.168.1.0/24

My requirements are :

  • provide Internet access to each device
  • prevent device from one VLAN to communicate with devices from the other VLANs.

Refering to [1], I’m trying to configure the box labelled Router.
I’m allocating 192.168.1.254, 192.168.20.254 and 192.168.30.254 to the router to allow it to communicate with all devices.
192.168.1.254 is allocated to bridge1 and bridge1 belongs to LAN interface list.
Router’s firewall is crafted around LAN and WAN interface lists.

  1. Any pointer or reference ?
  2. Shall I create 2 bridge interfaces (lets call them bridge1_20 and bridge1_30) and assign 192.168.20.254 and 192.168.30.254 to them ?
  3. Should bridge1 or bridge1_20 be a tagged or untagged VLAN20 member ?

Best regards

[1]https://wiki.mikrotik.com/wiki/Manual:Bridge_VLAN_Table

2

Please create a network diagram.. it will help to understand your Network topology…

In general if you want to create a Trunk port on your CCR, you can create them directly to the Interface that connects to the Nework switch…

3

https://www.youtube.com/watch?v=Rj9aPoyZOPo

4

How to configure a CCRXXXX as router

You dont have to configure a router as a router. It will router, like a switch will switch :wink:
If it knows the routes (destination networks), it will work.


VLAN trunk ports ?

Do you refer “Trunk” as a Link Aggreagtion? Thats called “Bonding” in Mikrotik (Linux).
Or do you refer “Trunk” as multiple VLANs on a cable? Thats under Bridge → VLANs

You can combine this as well, a Bonding-Interface as a VLAN-Trunk.