my plan is 1G with 3 Vlan
Vlan10 for internet
Vlan20 for IPTV
Vlan30 for VoIP
I replace Huawei HG8240T5 Gpon with LXT-010S-H from LEOX and I’m install it in to Mikrotik RB5009
from Mikrotik I setup Vlan10 and PPPoE for Internet and Its work and I got internet connection, but I couldn’t figure out how to configure Vlan30 for VoIP
Could you give more details about your setup - which will be your trunk port and which your access ports? Also, why do you have so few firewall rules?
this it
sfp gpon stick trunk port and grandstream ucm pbx on port 8
access ports bridge from port 1-7
If I understand correctly, ports 1-8 will be access ports and sfp port is trunk. So, you will add it to the bridge, after that you will assign pvid of 30 to the access ports, add a bridge VLAN entry for the trunk port and turn on VLAN filtering:
/interface bridge port
add interface=sfp-WAN bridge=bridge frame-types=admit-only-vlan tagged
set [find interface=ether1-LAN1] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether2-LAN2] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether3-LAN3] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether4-LAN4] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether5-LAN5] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether6-LAN6] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether7-LAN7] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether8-LAN8] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
/interface bridge vlan
add bridge=bridge tagged=sfp-WAN vlan-ids=30
/interface bridge set bridge vlan-filtering=yes
And I advise you to hide the pihole password from the export because it was visible
thank you bro
I try it but it’s not working and even I can’t login to mikrotik anymore to I reset it to default setting and restore backup
Okay, I saw a flaw in my plan - a management VLAN. The following configuration should do the trick:
/interface bridge port
add bridge=bridge interface=sfp-WAN frame-types=admit-only-vlan-tagged
set [find interface=ether1-LAN1] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether2-LAN2] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether3-LAN3] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether4-LAN4] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether5-LAN5] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether6-LAN6] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether7-LAN7] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether8-LAN8] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
/interface bridge vlan
add bridge=bridge tagged=sfp-WAN vlan-ids=30
add bridge=bridge tagged=bridge untagged=ether1-LAN1,ether2-LAN2,ether3-LAN3,ether4-LAN4,ether5-LAN5,ether6-LAN6,ether7-LAN7,ether8-LAN8 vlan-ids=99
/interface vlan
add interface=bridge name=MGMT vlan-id=99
/ip address
set [find interface=bridge] interface=MGMT
/interface bridge set bridge vlan-filtering=yes
Hopefully this time it’ll work, if not, I will suggest VLAN from another menu - the Switch menu, and will help you with configuring it
I try it but it’s not working and even I can’t login to mikrotik anymore, so I do reset it to default setting and restore backup.
why i have to add sfp wan interface to bridge? I think this is why i can’t login to MT
Then I’ll suggest a more easy approach: create a VLAN interface with vlan-id 30 and add it to the bridge which will consequently (hopefully) setup the desired VLAN
/interace vlan add name=VLAN30 vlan-id=30 interface=sfp-WAN
/interface bridge port add bridge=bridge interface=VLAN30