Hello, i’m working on a small business network and i am thinking on getting the CRS125-24G-1S-2HnD-IN but i need to first clarify if it is capable of doing what i need. I will explain the final topology i have on mind.
VLAN example.PNG
I want the managment network to communicate with company 1 and company 2, check databases, manage backups, etc. Is this possible only with these equipment or do i need to get rid of the SOHO Routers? I know that some will suggest doing that for security porposes but please do as if i’m on a budget and the only thing i can acquire is the CRS125.
I can’t see why VLANs are necessary in this setup, seems that you will have to untag all traffic going to Company 1 router and Company 2 router anyway.
You have already planned 3 different subnets, I think simple routing with IP Firewall should be enough to achieve what you need.
The problem is that when i for example try to route to company 1 like this
Central router routing:
192.168.8.0/25 through 192.168.9.1/24
This would not work because 192.168.9.1 is the routers IP and isn’t directly reachable through any interface of the router doing the routing. The workaround i did for this was install an extra NIC intro my server and used windows routing service. But i would like a router doing the routing… I also don’t want the entire network fail if the central router fails(this should only affect the managment network).
I forgot to mention that each soho router has an ADSL modem attached and the central router will have an ADSL modem attached also, every network has it’s own internet so i don’t want the central router manage all connections.
VLANs will not help in this case. Please read about VPN tunnels like PPTP or SSTP in MikroTik wiki.