Need Help: Switching and Vlans

RouterOS Beginner Basics
1

Hello Everyone,

I need some help getting started here. I am installing a Mikrotik CR210-8G-2S+ and will be soon installing another one in about a month. However my home network has a few vlans that i need to setup.

Vlan 1 - Default VLAN - 192.168.1.0/24
Vlan 5 - Guest Vlan - 192.168.5.0/24
Vlan 10 - Camera Vlan - 192.168.10.0/24
Vlan 991 - Generic Traffic for AP Talk
Vlan 992 - Generic Traffic for AP Talk

Note these IP’s are not the real ones in use right now. Vlan 991 and 992 is just like a health check vlan, which is used from the AP’s i have from open-mesh.

Switch ports Ether1, sfpplus1 and sfpplus2 will be trunk vlans and need to trunk all of the vlans above back to another switch.

The switch itself will get a management IP on Vlan 1 which for our sakes can be 192.168.1.21, Default route 192.168.1.1

Ether2 and Ether3 will have all of the above vlans. The default untagged vlan on this port should be vlan 1.
Ether 4 should be just untagged for vlan 5.

Currently this Mikrotik will conenct to a TP-Link switch, which expects vlan 1 traffic to come over untagged over the trunk. Once the other Mikrotik switch comes in, that can be different. However the turnk line from the that Mikrotik to the firewall will need vlan 1 untagged, vlan 5 tagged. the other vlans are just layer 2 and will not have outside connectivity to the world.

Does anyone have a simple config? all the ones i could find wanted to use bridging

2

If you want tagged vlan traffic on more than one interface, you need to use bridging. Here’s an example for vlan 5

/ interface vlan add interface=Ether1 vlan-id=5 name="Guest VLAN [Ether1]"
/ interface vlan add interface=sfpplus1 vlan-id=5 name="Guest VLAN [sfpplus1]"
/ interface vlan add interface=sfpplus2 vlan-id=5 name="Guest VLAN [sfpplus2]"

/ interface bridge add name="Guest VLAN Bridge [5]"

 / interface bridge port add bridge="Guest VLAN Bridge [5]" interface="Guest VLAN [Ether1]"
 / interface bridge port add bridge="Guest VLAN Bridge [5]" interface="Guest VLAN [sfpplus1]"
 / interface bridge port add bridge="Guest VLAN Bridge [5]" interface="Guest VLAN [sfpplus2]"

/ ip address add address=192.168.5.0/24 interface="Guest VLAN Bridge [5]"