Hi all,
I’m almost beginner in Mikrotik (not in network world) and I try to make a conf on RB960PGS (and then when succed apply it to a RB2011uias, I hope it will be the same conf). I thought it would be simple to do but not so much…
I have to create on the LAN part two DHCP servers : one on an untagged vlan 1 (network 10.250.0.0/16 and created an IP address ) and the second on a tagged vlan 10 network 10.10.10.0/24) on ether2 to connnect to the switch and on ether3 to have access to vlan1 with a PC. Ether 1 is the Wan access in DHCP Client.
Ether2 is connected to a 24 Ports Switch with all ports conf : vlan 1 as PVID and Vlan 10 as tagged
Result : PC on Ether2 or Ether3 I don’t get any DHCP, if I put my PC on an access Vlan10 port on switch no dhcp again…
I follow mainly this wiki : https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#VLAN_Example_.232_.28Trunk_and_Hybrid_Ports.29
Thank you very much in advance for help,
Here is the config I’ve made :
oct/03/2018 09:39:21 by RouterOS 6.43.2
software id = YJZ4-WZEC
model = 960PGS
serial number = 725306064F8A
/interface bridge
add admin-mac=6C:3B:6B:AD:3B:35 auto-mac=no comment=defconf name=bridge
add admin-mac=6C:3B:6B:AD:3B:35 auto-mac=no name=bridge1
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] name=ether2-master speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps
set [ find default-name=sfp1 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface vlan
add interface=bridge1 name=vlan1 vlan-id=1
add interface=bridge1 name=vlan10 vlan-id=10
/interface ethernet switch port
set 1 default-vlan-id=1 vlan-mode=secure
set 2 default-vlan-id=1 vlan-mode=secure
/interface list
add exclude=dynamic name=discover
add name=mactel
add name=mac-winbox
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip dhcp-client option
add code=12 name=hostname value=“$(HOSTNAME)”
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool1 ranges=10.250.10.1-10.250.10.250
add name=dhcp_pool2 ranges=10.10.10.10-10.10.10.250
add name=dhcp_pool3 ranges=10.250.0.6-10.250.0.200
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge name=defconf
add address-pool=dhcp_pool2 disabled=no interface=vlan10 name=dhcp2
add address-pool=dhcp_pool3 disabled=no interface=vlan1 name=dhcp1
/interface bridge port
add bridge=bridge1 comment=defconf interface=ether2-master
add bridge=bridge comment=defconf hw=no interface=sfp1
add bridge=bridge1 interface=ether3
add bridge=bridge interface=ether4
add bridge=bridge interface=ether5
/ip neighbor discovery-settings
set discover-interface-list=discover
/interface ethernet switch vlan
add independent-learning=yes ports=ether2-master,ether3 switch=switch1 vlan-id=1
add independent-learning=yes ports=ether2-master,ether3 switch=switch1 vlan-id=10
/interface list member
add interface=ether2-master list=discover
add interface=ether3 list=discover
add interface=ether4 list=discover
add interface=ether5 list=discover
add interface=sfp1 list=discover
add interface=bridge list=discover
add interface=bridge list=mactel
add interface=bridge list=mac-winbox
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
add address=10.10.10.1/24 interface=vlan10 network=10.10.10.0
add address=10.250.0.1/16 interface=vlan1 network=10.250.0.0
/ip dhcp-client
add comment=defconf dhcp-options=*FFFFFFF6,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=10.10.10.0/24 gateway=10.10.10.1
add address=10.250.0.0/16 gateway=10.250.0.5
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add action=accept chain=input comment=“defconf: accept ICMP” protocol=icmp
add action=accept chain=input comment=“defconf: accept established,related” connection-state=established,related
add action=drop chain=input comment=“defconf: drop all from WAN” in-interface=ether1
add action=fasttrack-connection chain=forward comment=“defconf: fasttrack” connection-state=established,related
add action=accept chain=forward comment=“defconf: accept established,related” connection-state=established,related
add action=drop chain=forward comment=“defconf: drop invalid” connection-state=invalid
add action=drop chain=forward comment=“defconf: drop all from WAN not DSTNATed” connection-nat-state=!dstnat connection-state=new in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat comment=“defconf: masquerade” out-interface=ether1
/system clock
set time-zone-name=Europe/Paris
/system routerboard settings
set silent-boot=no
/tool mac-server
set allowed-interface-list=mactel
/tool mac-server mac-winbox
set allowed-interface-list=mac-winbox
