Hi,
could someone please help me setting up a working configuration?
What I would like to have is the following, on port ether1 is my router connected which one is of type FritzBox, I wish to have this port in VLAN 1201 which is my LAN. Except if someone thinks there would be a better way to do.
On ether3, ether4 and ether5 I will have Unifi access points with trunks to put 2 SSID's online with two different networks, one is equivalent to LAN (VLAN 1301) and the second one is Guest (VLAN 1302) which only has access to internet.
Then on ether2 I have connected my KNX IP router, which is in his own VLAN to avoid direct access from outside, LAN or WLAN. This VLAN 1401 is used in 2 trunk ports on ether6 and ether7 together with VLAN 1201. This is used to have a software running on a server accessible from LAN and WLAN which send KNX telegrams on VLAN 1401.
All other ports are LAN ports and should be access ports in VLAN 1201.
Up to now I have a setup which you can see below, but this is not working. I don't get DHCP assigned address on for example ether18 and I cannot ping the CRS125 when assigning a static address in the range 172.16.178.0/24.
I tried already to bring up a bridge with ether9, but without success. I am even not sure if the bridge configuration is the one to use?
I am sure there is something wrong with my config, but I am unable to find the fault cause there are too much snippets I tried already and I cannot glue them to a working config together. Below is my current configuration, I would be very happy if someone could help me.
Thanks!
jun/17/2014 10:06:21 by RouterOS 6.15
software id = QGE7-SZBM
/interface bridge
add name=br-Guest
add name=br-KNX
add name=br-LAN
add name=br-WLAN
/interface ethernet
set [ find default-name=ether3 ] master-port=ether1
set [ find default-name=ether4 ] master-port=ether1
set [ find default-name=ether5 ] master-port=ether1
set [ find default-name=ether8 ] master-port=ether1
set [ find default-name=ether10 ] master-port=ether1
set [ find default-name=ether11 ] master-port=ether1
set [ find default-name=ether12 ] master-port=ether1
set [ find default-name=ether13 ] master-port=ether1
set [ find default-name=ether14 ] master-port=ether1
set [ find default-name=ether15 ] master-port=ether1
set [ find default-name=ether16 ] master-port=ether1
set [ find default-name=ether17 ] master-port=ether1
set [ find default-name=ether18 ] master-port=ether1
set [ find default-name=ether19 ] master-port=ether1
set [ find default-name=ether20 ] master-port=ether1
set [ find default-name=ether21 ] master-port=ether1
set [ find default-name=ether22 ] master-port=ether1
set [ find default-name=ether23 ] master-port=ether1
set [ find default-name=ether24 ] master-port=ether1
/interface vlan
add interface=ether1 l2mtu=1584 name=Guest vlan-id=1302
add interface=ether2 l2mtu=1584 name=KNX vlan-id=1401
add interface=ether1 l2mtu=1584 name=LAN vlan-id=1201
add interface=ether1 l2mtu=1584 name=WLAN vlan-id=1301
/ip pool
add name=LAN ranges=172.16.178.100-172.16.178.200
add name=WLAN ranges=172.18.178.20-172.18.178.250
add name=Guest ranges=172.17.21.20-172.17.21.254
/ip dhcp-server
add address-pool=LAN disabled=no interface=LAN lease-time=1w name=LAN
add address-pool=WLAN disabled=no interface=WLAN lease-time=1w name=WLAN
add address-pool=Guest disabled=no interface=Guest lease-time=1w name=Guest
/interface bridge port
add bridge=br-KNX interface=KNX
add bridge=br-KNX interface=ether2
/interface ethernet switch egress-vlan-tag
add tagged-ports=ether3,ether4,ether5,switch1-cpu vlan-id=1301
add tagged-ports=ether3,ether4,ether5,switch1-cpu vlan-id=1302
add tagged-ports=ether6,ether7,ether8,ether9,ether10,switch1-cpu vlan-id=1201
add tagged-ports=ether6,ether7 vlan-id=1401
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=1201 ports=ether8 sa-learning=yes
add customer-vid=0 new-customer-vid=1201 ports=ether10 sa-learning=yes
add customer-vid=0 new-customer-vid=1201 ports=ether11 sa-learning=yes
add customer-vid=0 new-customer-vid=1201 ports=ether12 sa-learning=yes
add customer-vid=0 new-customer-vid=1201 ports=ether13 sa-learning=yes
add customer-vid=0 new-customer-vid=1201 ports=ether14 sa-learning=yes
add customer-vid=0 new-customer-vid=1201 ports=ether15 sa-learning=yes
add customer-vid=0 new-customer-vid=1201 ports=ether16 sa-learning=yes
add customer-vid=0 new-customer-vid=1201 ports=ether17 sa-learning=yes
add customer-vid=0 new-customer-vid=1201 ports=ether18 sa-learning=yes
add customer-vid=0 new-customer-vid=1201 ports=ether19 sa-learning=yes
add customer-vid=0 new-customer-vid=1201 ports=ether20 sa-learning=yes
add customer-vid=0 new-customer-vid=1201 ports=ether21 sa-learning=yes
add customer-vid=0 new-customer-vid=1201 ports=ether22 sa-learning=yes
add customer-vid=0 new-customer-vid=1201 ports=ether23 sa-learning=yes
add customer-vid=0 new-customer-vid=1201 ports=ether24 sa-learning=yes
/interface ethernet switch vlan
add ports=ether3,ether4,ether5 vlan-id=1301
add ports=ether3,ether4,ether5 vlan-id=1302
add ports="ether8,ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16,ether17,ether18,ether19,ether20,ether21,ether22,ether23,eth
er24,switch1-cpu" vlan-id=1201
/ip address
add address=192.168.178.10/24 interface=ether1 network=192.168.178.0
add address=172.16.178.1/24 interface=LAN network=172.16.178.0
add address=172.19.244.1/24 interface=KNX network=172.19.244.0
add address=172.18.178.1/24 interface=WLAN network=172.18.178.0
add address=172.17.21.1/24 interface=Guest network=172.17.21.0
/ip dhcp-server network
add address=172.16.178.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=172.16.178.1 netmask=24
add address=172.17.21.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=172.17.21.1 netmask=24
add address=172.18.178.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=172.18.178.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip route
add distance=1 gateway=192.168.178.1