Hi everyone. I have a problem by configuring management VLAN. I’ve CRS125-24G-1S Mikrotik. I’ve made a config with using examples below, but it still doesn’t work, I can’t connect to the switch through management vlan.
https://wiki.mikrotik.com/wiki/Manual:CRS1xx/2xx_series_switches_examples#Port_Based_VLAN
https://wiki.mikrotik.com/wiki/Manual:Basic_VLAN_switching
Here is config list. Can someone help me.
/interface bridge
add name="bridge local"
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps
set [ find default-name=ether6 ] speed=100Mbps
set [ find default-name=ether7 ] speed=100Mbps
set [ find default-name=ether8 ] speed=100Mbps
set [ find default-name=ether9 ] speed=100Mbps
set [ find default-name=ether10 ] speed=100Mbps
set [ find default-name=ether11 ] speed=100Mbps
set [ find default-name=ether12 ] speed=100Mbps
set [ find default-name=ether13 ] speed=100Mbps
set [ find default-name=ether14 ] speed=100Mbps
set [ find default-name=ether15 ] speed=100Mbps
set [ find default-name=ether16 ] speed=100Mbps
set [ find default-name=ether17 ] speed=100Mbps
set [ find default-name=ether18 ] speed=100Mbps
set [ find default-name=ether19 ] speed=100Mbps
set [ find default-name=ether20 ] speed=100Mbps
set [ find default-name=ether21 ] speed=100Mbps
set [ find default-name=ether22 ] speed=100Mbps
set [ find default-name=ether23 ] speed=100Mbps
set [ find default-name=ether24 ] speed=100Mbps
set [ find default-name=sfp1 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface vlan
add interface="bridge local" name="manage vlan" vlan-id=255
/interface ethernet switch
set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports="ether1,ether2,eth\
er3,ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ethe\
r13,ether14,ether15,ether16,ether17,ether18,ether20,ether21,ether22,ether2\
3"
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge="bridge local" interface=ether1
add bridge="bridge local" interface=ether2
add bridge="bridge local" interface=ether3
add bridge="bridge local" interface=ether4
add bridge="bridge local" interface=ether5
add bridge="bridge local" interface=ether6
add bridge="bridge local" interface=ether7
add bridge="bridge local" interface=ether8
add bridge="bridge local" interface=ether9
add bridge="bridge local" interface=ether10
add bridge="bridge local" interface=ether11
add bridge="bridge local" interface=ether12
add bridge="bridge local" interface=ether13
add bridge="bridge local" interface=ether14
add bridge="bridge local" interface=ether15
add bridge="bridge local" interface=ether16
add bridge="bridge local" interface=ether17
add bridge="bridge local" interface=ether18
add bridge="bridge local" interface=ether19
add bridge="bridge local" interface=ether20
add bridge="bridge local" interface=ether21
add bridge="bridge local" interface=ether22
add bridge="bridge local" interface=ether23
/interface ethernet switch egress-vlan-tag
add tagged-ports=ether1 vlan-id=70
add tagged-ports=ether1 vlan-id=60
add tagged-ports=ether1 vlan-id=50
add tagged-ports=ether1 vlan-id=40
add tagged-ports=ether1 vlan-id=30
add tagged-ports=ether4,switch1-cpu vlan-id=255
add tagged-ports=ether1 vlan-id=20
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=20 ports="ether2,ether3,ether5,ether6,ethe\
r7,ether8,ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16,e\
ther17,ether18,ether19,ether20,ether21,ether22,ether23"
add customer-vid=0 new-customer-vid=50 ports=ether2
add customer-vid=0 new-customer-vid=60 ports=ether2
add customer-vid=0 new-customer-vid=70 ports=ether2
add customer-vid=0 new-customer-vid=30 ports=ether2
add customer-vid=0 new-customer-vid=40 ports=ether2
add customer-vid=0 new-customer-vid=80 ports=ether2
add customer-vid=0 new-customer-vid=90 ports=ether2
/interface ethernet switch vlan
add ports="ether1,ether2,ether3,ether5,ether6,ether7,ether8,ether9,ether10,eth\
er11,ether12,ether13,ether14,ether15,ether16,ether17,ether18,ether19,ether\
20,ether21,ether22,ether23" vlan-id=20
add ports=ether1,ether3 vlan-id=30
add ports=ether1,ether2 vlan-id=50
add ports=ether1,ether2 vlan-id=60
add ports=ether1,ether2 vlan-id=70
add ports=ether4,switch1-cpu vlan-id=255
add ports=ether1,ether2,ether3 vlan-id=80
add ports=ether1,ether3 vlan-id=90
/ip address
add address=192.168.255.1/24 interface="manage vlan" network=192.168.255.0
add address=192.168.254.1/24 interface=ether24 network=192.168.254.0
/ip dns
set servers=192.168.1.20
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Europe/Kiev