Eth1 is Vlan 246 - What my internet comes in on - this was untagged(add service dag=enabled/disabled)
They want it to be tagged, but when tagging is enabled it does not work anymore, they say it’s somthing to do with incompatibility between my equipment and theirs
So they want the tagging on the main-vlan#246 so that I can run another vlan on the same link to a site where I want to co-locate, and create a hotspot.
The new vlan id =1087
As soon as I enable add-service-tag internet goes down and original vlan246 becomes inoperable.
Remove the tagging and it’s working.
I enabled tagging and it stops functioning, so ISP ignores the tagging on their end, and it comes up again.
They are using cisco, I am using mikrotik on both ends of the link.
They have other clients that use mikrotik, apparently something needs to be done on my equipment to get it working, but they can’t say as they say they don’t have experience with mikrotik, I have asked them to ask their clients that use mikrotik, but doubt they will bother to ask.
So you have a bunch of issues with the way your VLANs are setup…
Remove ether1 from all of the bridges etc… add two vlans to ether1 with the appropriate settings. Make a bridge that contains ether2/ether3 and anything else from the “inside” network. Configure everything else… basically treat VLAN_A as your internet connection and VLAN_B as the other VLAN connection from your ISP.
If you post your config without verbose mode it is much easier to deal with… FYI.
The current config isn’t handling the tags correctly.
Thanks, I figured that it was something with the config, I hope that it will work once I have had a chance to modify, don’t want to do it during office hours as there will be quite an impact on clients.
Will let you know in about 12 hours, that will put us near midnight, and I’d be able to try the setup.
If the vlan id=246 and eth1 are not on the same bridge port, it’s not working.
Link only works if they are in the same bridge
The router only requires the internet incoming via vlan id 246, which then forwards on to another mikrotik at a remote site, which then transmits to clients in that area.
I also want to add the new vlan id 1087 which will extend my presence via fiber to my equipment at a highsite some 40km away.
Currently this is not able to be implemented as we can’t get the link up, due to vlan issue.
I am willing to reconfigure the entire router.
Ethernet 1 = incoming vlans 246 and vlan 1087
Ethernet 2 and wireless bridged - > ethernet is sent into our offices, wireless transmits another mikrotik distribution point…configured and working.
The only links I require from the config is ethernet2 and 5Ghz-AP to be bridged and route traffic through the vlan for internet access.
The other wireless are in-operable at present, as they are not in use.
But as soon as the ethernet and vlan246 are not on the same bridge I have no access at all, as soon as they are added back to the bridge vlan246 becomes usable again.
I also don’t understand it as all the vlan tutorials in the wiki show that it does not require bridging, but it’s the only way I can get that link up.
Right… it seems like the traffic they are sending you isn’t tagged… Can you give me access to the router… just want to look at the traffic numbers.. Or post a screenshot of the interfaces with traffic passing. Something seems off.