I have the almost same problem. I user Procurve J9450A 1810G-24 L2 switch, web Managed.
I have 3 VLANs. Vlan id : 100, 101, 103. They must not communicate with each other.
I need to connect those VLANS to Application server, Admin PC, and Print Server. Also need those VLANs can connect to Internet via Mikrotik as gateway.
I think there are 2 options,
first option, connect trunked 3 VLANs from port 23 to ether 1 mikrotik and bridge them with ether 2 - Application Server, ether 3 - Admin PC and ether 4 - Print Server.
I have tried to make 3 VLANs at Procurve and trunking them via port 23 to ether1 Mikrotik and bridge with port for ether 4 mac address D4:CA:6D:20:6F:53.
Please see the attachment for my Procurve configuration :
I connect port 23 for trunking to ether 1 Mikrotik.
I bridged the ether 1 with ether 3.
This is the parts of the configuration in Mikrotik:
/interface bridge
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes
comment=“” disabled=no forward-delay=15s max-message-age=20s mtu=1500
name=Bridge_VLAN priority=0x8000 protocol-mode=none
transmit-hold-count=6
/interface ethernet
set 0 arp=enabled auto-negotiation=yes comment=
“VLAN Trunk to RB1100AHx2 - Port on Bridge_VLAN”
disabled=no full-duplex=yes mac-address=D4:CA:6D:20:6F:50 mtu=1500 name=
F0/0 speed=1G
set 1 arp=enabled auto-negotiation=yes comment=
Internet disabled=no full-duplex=no
mac-address=D4:CA:6D:20:6F:51 mtu=1500 name=F0/1 speed=100M
set 2 arp=enabled auto-negotiation=yes comment=
“To Maxial Server” disabled=no full-duplex=yes
mac-address=D4:CA:6D:20:6F:52 mtu=1500 name=F0/2 speed=1G
set 3 arp=enabled auto-negotiation=yes cable-settings=default comment=“To Mail Server and Proxy”
disable-running-check=yes disabled=no full-duplex=yes mac-address=
D4:CA:6D:20:6F:53 mtu=1500 name=F0/3 speed=1G
/interface vlan
add arp=enabled comment=“” disabled=no interface=Bridge_VLAN mtu=1500 name=
VLAN_Finance vlan-id=100
add arp=enabled comment=“” disabled=no interface=Bridge_VLAN mtu=1500 name=
VLAN_SM vlan-id=101
/interface bridge port
add bridge=Bridge_VLAN comment=Print_Server disabled=no edge=auto external-fdb=auto
horizon=none interface=F0/3 path-cost=10 point-to-point=auto priority=
0x80
add bridge=Bridge_VLAN comment=“” disabled=no edge=auto external-fdb=auto
horizon=none interface=F0/0 path-cost=10 point-to-point=auto priority=
0x80
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes
/ip address
add address=192.168.16.1/24 broadcast=192.168.16.255 comment=LAN disabled=no
interface=Bridge_VLAN network=192.168.16.0
add address=192.168.16.2/24 broadcast=192.168.16.255 comment=Server disabled=no interface=VLAN_Finance
network=192.168.16.0
But I wonder why they can’t communicate with Mikrotik ?
Maybe because of my lack knowledge. I just make adjustment for the setting from here:
http://forum.mikrotik.com/t/configuring-vlan-trunking-on-mt-router-to-cisco-c2924-switch/21509/1
second option, another VLAN 40 at Procurve that consist of Application server, Admin PC and Print Server and bridge by RB1100AHx2 to those 3 VLANs.
But not yet try this.
I don’t know what is the effective method, I ever red in forum that if we made more bridges it will slow down the connection
Please need advice and help.
Thanks in advance.