Hi Guys!
I’m getting pushed into the deep here! (our sysop is hospitalized…) I’m a noob on RouterOS, but hey! ![]()
I need to configure a MikroTik Routerboard RB2011UiAS-RM as a router for a new ISP (ZIggo) in our network.
Similar to the topic here: http://forum.mikrotik.com/t/binding-multiple-wan-ips-via-one-wan-cable-to-vlans/84910/1
“I have a range of 8 static wan IP’s to my disposal. One is a gateway address, one is deginated to a routerport and one is the broadcast address, so there 5 of them free for me to use. At the moment I’m using only one (x.x.x.242) as Wan IP that is srcnatted to internal networks for setting up my MT the last few weeks. Only one physical cable is used between the ISP-router and my MT router. More physical connections are not possible because the ISP controls the router and only allows one cable-connection out to my network.”
I’ve started with this setup, but i can’t bind the ip pools/dhcp/adresses to the vlans and their respective ethernet ports…
For now, just for testing, i did put dhcp on the gateway (first things first..)
exportfile:
[admin@MikroTik] > export
jul/23/2015 08:54:07 by RouterOS 6.30.1
software id = FVPB-IX09
/interface bridge
add name=br-vlan1
add name=br-vlan2
add name=br-vlan3
add name=br-vlan4
add admin-mac=4C:5E:0C:DD:19:52 auto-mac=no name=bridge-local
/interface ethernet
set [ find default-name=ether1 ] name=ether1-master-local
set [ find default-name=ether2 ] master-port=ether1-master-local name=
ether2-slave-local
set [ find default-name=ether3 ] master-port=ether1-master-local name=
ether3-slave-local
set [ find default-name=ether4 ] master-port=ether1-master-local name=
ether4-slave-local
set [ find default-name=ether5 ] master-port=ether1-master-local name=
ether5-slave-local
set [ find default-name=ether6 ] name=ether6-gateway
set [ find default-name=ether7 ] name=ether7-master-local
set [ find default-name=ether8 ] master-port=ether7-master-local name=
ether8-slave-local
set [ find default-name=ether9 ] master-port=ether7-master-local name=
ether9-slave-local
set [ find default-name=ether10 ] master-port=ether7-master-local name=
ether10-slave-local
/ip neighbor discovery
set ether6-gateway discover=no
/interface vlan
add interface=ether2-slave-local l2mtu=1594 name=vlan1 vlan-id=1
add interface=ether3-slave-local l2mtu=1594 name=vlan2 vlan-id=2
add interface=ether4-slave-local l2mtu=1594 name=vlan3 vlan-id=3
add interface=ether5-slave-local l2mtu=1594 name=vlan4 vlan-id=4
/ip pool
add name=default-dhcp ranges=192.168.100.10-192.168.100.254
add name=dhcp_pool1 ranges=192.168.110.2-192.168.110.254
add name=dhcp_pool2 ranges=192.168.120.2-192.168.120.254
add name=dhcp_pool3 ranges=192.168.130.2-192.168.130.254
add name=dhcp_pool4 ranges=192.168.140.2-192.168.140.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge-local name=default
add address-pool=dhcp_pool1 disabled=no interface=br-vlan1 name=dhcp1
add address-pool=dhcp_pool2 disabled=no interface=br-vlan2 name=dhcp2
add address-pool=dhcp_pool3 disabled=no interface=br-vlan3 name=dhcp3
add address-pool=dhcp_pool4 disabled=no interface=br-vlan4 name=dhcp4
/interface bridge port
add bridge=bridge-local interface=ether1-master-local
add bridge=bridge-local interface=ether7-master-local
add bridge=bridge-local interface=sfp1
add bridge=br-vlan1 interface=vlan1
add bridge=br-vlan2 interface=vlan2
add bridge=br-vlan3 interface=vlan3
add bridge=br-vlan4 interface=vlan4
/ip address
add address=192.168.100.1/24 comment=“default configuration” interface=
bridge-local network=192.168.100.0
add address=192.168.110.1/24 interface=br-vlan1 network=192.168.110.0
add address=192.168.120.1/24 interface=br-vlan2 network=192.168.120.0
add address=192.168.130.1/24 interface=br-vlan3 network=192.168.130.0
add address=192.168.140.1/24 interface=br-vlan4 network=192.168.140.0
/ip dhcp-client
add comment=“default configuration” dhcp-options=hostname,clientid disabled=no
interface=ether6-gateway
/ip dhcp-server network
add address=192.168.100.0/24 comment=“default configuration” gateway=
192.168.100.1
add address=192.168.110.0/24 gateway=192.168.110.1
add address=192.168.120.0/24 gateway=192.168.120.1
add address=192.168.130.0/24 gateway=192.168.130.1
add address=192.168.140.0/24 gateway=192.168.140.1
/ip dns
set allow-remote-requests=yes cache-max-ttl=1d servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.100.1 name=router
/ip firewall filter
add chain=input comment=“default configuration” protocol=icmp
add chain=input comment=“default configuration” connection-state=
established,related
add action=drop chain=input comment=“default configuration” in-interface=
ether6-gateway
add action=fasttrack-connection chain=forward comment=“default configuration”
connection-state=established,related
add chain=forward comment=“default configuration” connection-state=
established,related
add action=drop chain=forward comment=“default configuration” connection-state=
invalid
add action=drop chain=forward comment=“default configuration”
connection-nat-state=!dstnat connection-state=new in-interface=
ether6-gateway
/ip firewall nat
add action=masquerade chain=srcnat comment=“default configuration”
out-interface=ether6-gateway
/ip service
set www-ssl disabled=no
/system clock
set time-zone-name=Europe/Amsterdam
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether1-master-local
add interface=ether2-slave-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
add interface=ether7-master-local
add interface=ether8-slave-local
add interface=ether9-slave-local
add interface=ether10-slave-local
add interface=sfp1
add interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether1-master-local
add interface=ether2-slave-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
add interface=ether7-master-local
add interface=ether8-slave-local
add interface=ether9-slave-local
add interface=ether10-slave-local
add interface=sfp1
add interface=bridge-local
/tool romon port
add
[admin@MikroTik] >
The gateway on port 6 is chosen, because i want the 1gb ports free for feeding individual switches.
The ISP is 25/25 up/down, so…no worries there?
What am i doing wrong? Or is it something i forgot tot do?
The adressing of the multiple ip’s to the respective vlans is not implemented…for now.
Help! ![]()