Problem with multible VLAN's on Interface

Centauri · February 24, 2015, 1:42pm

Hi h have a Cloud Core Router CCR-1036 RouterOS 6.27 where i have some problems vidt multiple VLAN’s and DHCP Assignment on each VLAN.

The configuration have 10 different VLAN’s one for each co location, almost each co location has public WAN IP Adresses ut at the moment i just test with the correnct IP Adresses and then just masquerade the WAN from an private address.

The problem i cant get it to deliver DHCP Addresses on any VLAN’s but when i dont uses VLAN’s it works ?

What do i do wrong her ?

I have created bridges for each co location.

/interface bridge
add mtu=1500 name=bridge-5 protocol-mode=none
add mtu=1500 name=bridge-6 protocol-mode=none
add mtu=1500 name=bridge-10 protocol-mode=none
add mtu=1500 name=bridge-102 protocol-mode=none
add mtu=1500 name=bridge-103 protocol-mode=none
add mtu=1500 name=bridge-104 protocol-mode=none
add mtu=1500 name=bridge-105 protocol-mode=none
add mtu=1500 name=bridge-106 protocol-mode=none
add mtu=1500 name=bridge-107 protocol-mode=none
add mtu=1500 name=bridge-108 protocol-mode=none
add mtu=1500 name=bridge_default protocol-mode=none

/interface ethernet
set [ find default-name=ether1 ] l2mtu=1590
set [ find default-name=ether2 ] l2mtu=1590
set [ find default-name=ether3 ] l2mtu=1590
set [ find default-name=ether4 ] l2mtu=1590
set [ find default-name=ether5 ] l2mtu=1590
set [ find default-name=ether6 ] l2mtu=1590
set [ find default-name=ether7 ] l2mtu=1590
set [ find default-name=ether8 ] l2mtu=1590
set [ find default-name=sfp-sfpplus1 ] l2mtu=1590 name=sfp-plus1-WAN
set [ find default-name=sfp-sfpplus2 ] l2mtu=1590 name=sfp-plus2-LAN

I have then created the VLAN’s and mapped them to the ether7 later it has to be the FTP port

/interface vlan
add interface=bridge-5 l2mtu=65531 name=vlan5 vlan-id=5
add interface=ether7 l2mtu=1586 name=vlan5-port7 vlan-id=5
add interface=bridge-6 l2mtu=65531 name=vlan6 vlan-id=6
add interface=ether7 l2mtu=1586 name=vlan6-port7 vlan-id=6
add interface=bridge-10 l2mtu=65531 name=vlan10 vlan-id=10
add interface=ether7 l2mtu=1586 name=vlan10-port7 vlan-id=10
add interface=bridge-102 l2mtu=65531 name=vlan102 vlan-id=102
add interface=ether7 l2mtu=1586 name=vlan102-port7 vlan-id=102
add interface=bridge-103 l2mtu=65531 name=vlan103 vlan-id=103
add interface=ether7 l2mtu=1586 name=vlan103-port7 vlan-id=103
add interface=bridge-104 l2mtu=65531 name=vlan104 vlan-id=104
add interface=ether7 l2mtu=1586 name=vlan104-port7 vlan-id=104
add interface=bridge-105 l2mtu=65531 name=vlan105 vlan-id=105
add interface=ether7 l2mtu=1586 name=vlan105-port7 vlan-id=105
add interface=bridge-106 l2mtu=65531 name=vlan106 vlan-id=106
add interface=ether7 l2mtu=1586 name=vlan106-port7 vlan-id=106
add interface=bridge-107 l2mtu=65531 name=vlan107 vlan-id=107
add interface=ether7 l2mtu=1586 name=vlan107-port7 vlan-id=107
add interface=bridge-108 l2mtu=65531 name=vlan108 vlan-id=108
add interface=ether7 l2mtu=1586 name=vlan108-port7 vlan-id=108

I then have DHCP pools witch assign IP adresses for each co locationen and connected them to a bridge. I have tested each bridge by assigning it to an interface ans seen that the DHCP Assignment works for each network and then can acces the internet

/ip pool
add name=DHCP-Pool-Default ranges=195.249.88.5-195.249.88.254
add name=DHCP-Pool-102 ranges=195.249.89.5-195.249.89.254
add name=DHCP-Pool-103 ranges=195.249.90.10-195.249.90.254
add name=DHCP-Pool-104 ranges=195.249.91.5-195.249.91.254
add name=DHCP-Pool-105 ranges=85.129.8.5-85.129.8.126
add name=DHCP-Pool-106 ranges=85.129.8.135-85.129.8.254
add name=DHCP-Pool-107 ranges=85.129.9.5-85.129.9.126
add name=DHCP-Pool-10 ranges=192.168.11.100-192.168.11.250
add name=DHCP-Pool-5 ranges=195.249.71.2-195.249.71.120
add name=DHCP-Pool-6 ranges=195.249.71.130-195.249.71.250
add name=DHCP-Pool-108 ranges=85.129.9.129-85.129.9.254
/ip dhcp-server
add address-pool=DHCP-Pool-Default disabled=no interface=bridge_default \
    lease-time=3d name=DHCP-Server-Default
add address-pool=DHCP-Pool-102 disabled=no interface=bridge-102 lease-time=3d \
    name=DHCP-Server-102
add address-pool=DHCP-Pool-103 disabled=no interface=bridge-103 lease-time=3d \
    name=DHCP-Server-103
add address-pool=DHCP-Pool-104 disabled=no interface=bridge-104 lease-time=3d \
    name=DHCP-Server-104
add address-pool=DHCP-Pool-105 disabled=no interface=bridge-105 lease-time=3d \
    name=DHCP-Server-105
add address-pool=DHCP-Pool-106 disabled=no interface=bridge-106 lease-time=3d \
    name=DHCP-Server-106
add address-pool=DHCP-Pool-107 disabled=no interface=bridge-107 lease-time=3d \
    name=DHCP-Server-107
add address-pool=DHCP-Pool-10 disabled=no interface=bridge-10 lease-time=3d \
    name=DHCP-Server-10
add address-pool=DHCP-Pool-5 disabled=no interface=bridge-5 lease-time=3d \
    name=DHCP-Server-5
add address-pool=DHCP-Pool-6 disabled=no interface=bridge-6 lease-time=3d \
    name=DHCP-Server-6
add address-pool=DHCP-Pool-108 disabled=no interface=bridge-108 lease-time=3d \
    name=DHCP-Server-Pool-108

/ip address
add address=195.249.88.1/24 interface=bridge_default network=195.249.88.0
add address=192.168.10.233/24 interface=ether2 network=192.168.10.0
add address=195.249.89.1/24 interface=bridge-102 network=195.249.89.0
add address=195.249.90.1/24 interface=bridge-103 network=195.249.90.0
add address=195.249.91.1/24 interface=bridge-104 network=195.249.91.0
add address=85.129.8.1/25 interface=bridge-105 network=85.129.8.0
add address=85.129.8.129/25 interface=bridge-106 network=85.129.8.128
add address=85.129.9.1/25 interface=bridge-107 network=85.129.9.0
add address=85.129.9.129/25 interface=bridge-108 network=85.129.9.128
add address=192.168.11.1/24 interface=bridge-10 network=192.168.11.0
add address=195.249.71.1/25 interface=bridge-5 network=195.249.71.0
add address=195.249.71.129/25 interface=bridge-6 network=195.249.71.128
/ip dhcp-server network
add address=85.129.8.0/25 dns-server=85.129.8.1 domain=pk.k64.dk gateway=\
    85.129.8.1 netmask=25
add address=85.129.8.128/25 dns-server=85.129.8.129 domain=dak.k64.dk \
    gateway=85.129.8.129 netmask=25
add address=85.129.9.0/25 dns-server=85.129.9.1 domain=huk.k64.dk gateway=\
    85.129.9.1 netmask=25
add address=85.129.9.128/25 dns-server=85.129.9.1 domain=disp.k64.dk gateway=\
    85.129.9.129 netmask=25
add address=192.168.11.0/24 dns-server=192.168.11.1 domain=management.k64.dk \
    gateway=192.168.11.1 netmask=24
add address=195.249.71.0/25 dns-server=195.249.71.1 domain=k64.k64.dk \
    gateway=195.249.71.1 netmask=25
add address=195.249.71.128/25 dns-server=195.249.71.129 domain=kk64.k64.dk \
    gateway=195.249.71.129 netmask=25
add address=195.249.88.0/24 dns-server=195.249.88.1 domain=uk.k64.dk gateway=\
    195.249.88.1 netmask=24
add address=195.249.89.0/24 dns-server=195.249.89.1 domain=sk.k64.dk gateway=\
    195.249.89.1 netmask=24
add address=195.249.90.0/24 dns-server=195.249.90.1 domain=hk.k64.dk gateway=\
    195.249.90.1 netmask=24
add address=195.249.91.0/24 dns-server=195.249.91.1 domain=bma.k64.dk \
    gateway=195.249.91.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip dns static
add address=192.168.88.1 name=router
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether2

macgaiver · February 24, 2015, 1:50pm

You need to create VLANs on Ethernets and then bridge VLAN interfaces with the same tag together, and then configure DHCP on bridge interfaces

OR you need to bridge all ethernet interfaces one bridge and then create many separate VLAN interfaces on that bridge, and create DHCP servers on those VLAN interfaces…

It is entirely up to you what option to use, usually you choose one and stick to it in your entire network.

Centauri · February 24, 2015, 2:02pm

Tanks a lot it was the bridging between the VLAN and the Bridge i was missing. Thanks