Problem with VLAN Setup

Hello together,

based on the Thread http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1 i am currently familiarizing myself with the topic of VLAN in order to set up my future layout similar to the approach described (Switch with a separate router (RoaS)).
I have currently completely ignored firewall rules, as well as the MAC server settings. (My router is not connected with the Internet, its behind another router)

My test setup currently looks like this:
RB5009
→ Ether1 is connected to my existing router (FritzBox)

CRS326
→ Port 24 is connected to RB5009 (Port 2)

PC
→ Second network card is connected to port 1 on the switch
→ The network card has no VID
→ It should be assigend to VLAN 10 (but that does not work)

Without VLAN everything ist working as i want it.
But unfortunately I get nothing after activating my VLAN settings.
No Device in Winbox. No IP Adress for my PC on his second card…

So I have a stupid error somewhere :frowning:
I hope someone of you has a tip for me, what I am doing wrong

Thx in advance

The basis for my configuration were the existing files from the mentioned thread
I tried to adapt the files to my needs - but somewhere i made a mistake
CRS326.rsc (3.31 KB)
RB5009.rsc (2.72 KB)

If its not in config format not going to look at it.

Or as TDW was trying to say ;-PPPP facts/evidence please…

For the OP - provide the /export of the devices, not the commands you applied to the devices as there may have been errors whilst importing them

Sorry for the inconvenience, i thougt a txt-file would be easier.. i am noob
Port 23 of the switch is atm not part of the bridge, so i can connect to the switch after i activate VLAN-Filtering

I hope the files / export is correct as i did them
RB5009.rsc (2.72 KB)
CRS326.rsc (3.31 KB)

AndyM1988, what everyone was asking is that you provide the relevant configuration snippets. Anyway …


On the RB5009, if you look at the hosts on the bridge (/interface bridge host print), do you see entries in the different VLANs? If your computer is connected to the CRS326, do you see its MAC address on the RB5009?

CRS326
→ Port 24 is connected to RB5009 (Port 2)

This port is missing from the bridge VLAN settings:
/interface bridge vlan
add bridge=bridge tagged=ether24,sfp-sfpplus1,sfp-sfpplus2 vlan-ids=10
add bridge=bridge tagged=ether24,sfp-sfpplus1,sfp-sfpplus2 vlan-ids=20
add bridge=bridge tagged=ether24,sfp-sfpplus1,sfp-sfpplus2 vlan-ids=30
add bridge=bridge tagged=bridge,ether24,sfp-sfpplus1,sfp-sfpplus2 vlan-ids=99

WRONG, full config, snippets only waste our time, based on years of trying to help folks,

On the 5009 basic math, 4 vlans, 4 addresses, but ONLY 3 pools, 3 dhcp servers, and 3 dhcp-server networks!!
( assuming either base or managment is not really being used ?? )

Plus bridge port should look like this, personal preference:

/interface bridge port
add bridge=bridge interface=ether2 ingress-filtering=yes frame-types=admit-only-vlan-tagged
add bridge=bridge interface=ether3 ingress-filtering=yes frame-types=admit-only-vlan-tagged
add bridge=bridge interface=ether4 ingress-filtering=yes frame-types=admit-only-vlan-tagged
add bridge=bridge interface=ether5 ingress-filtering=yes frame-types=admit-only-vlan-tagged
add bridge=bridge interface=ether6 ingress-filtering=yes frame-types=admit-only-vlan-tagged
add bridge=bridge interface=ether7 ingress-filtering=yes frame-types=admit-only-vlan-tagged
add bridge=bridge interface=sfp-sfpplus1 ingress-filtering=yes frame-types=admit-only-vlan-tagged

Three DHCP servers/networks/pools looks fine - the switch management address is static, if there will be other devices on the management VLAN and they are setup in a similar fashion a DHCP server is not required.

First of all, thx a lot for your support
I tried the first hint from tdw and now i get an IP from VLAN-10

Thx mate

@anav i need to look deeper in your suggestion.
Regarding the 3 DHCP servers, I took the approach from the thread i mentioned in the starting post.
The DHCP Server for the MGMT was listed there as optional (i assume because, the switch gets a static IP assigned?)

What would be the better approach here, to also work with DHCP for the MGMT_VLAN or to also give the other switches a fixed address in the corresponding 99 network?
In the final Setup, there woud be i think 1 Router, 4 Switches and i think 3 WLan AP

Thx @all

Personal choice.
All my switches/APs get an IP from the managment VLAN but they are set fixed upon lease or I do it manually via mac address.
Having all MTs on the same network makes IP neighbours discovery set to the interface List which I make and only contains the managment VLAN,
I can see all my devices when I pull up winbox