RB-750gl Need one port to be on wan network SOLVED

RouterOS General
1

Hopefully someone can help me, I have been working on this for a few days now and this is my last resort.

I have a RB-750gl

I would like one port/interface to be bridged(?) to the Gateway to be on the same network as the wan.

Is this possible? I have tried bridging the Gateway and interface, but it seems when I do so it breaks all wan access for every other port.

If someone can point me in the right direction that would be great.

Thanks so much!

2

Default setup is:

ether1 - wan
ether2 - lan
ether3-5 -lan ( configured as slave ports of eth2)

easiest way for your case is just make one port a slave of ether1 instead of ether2. you have to change the master-port setting of that port

3

I will give that a try, thanks for your time.

I will let you know how it goes…

4

Alright, so here is what I did…
When I tried to make ether5 slave to ether1 the router said that only one port could be master on the switch.
So i had to make it so all the other interfaces were no longer slave to ether2.
Then it allowed me to slave ether5 to ether1.
But now the DHCP server is only running on ether2.
Do I now have to run separate DHCP servers on all the non slaved interfaces? Or should I have done this another way?
I thought that ether1 was not on the switch by default?
Thanks again for all your help!

5

I suggest you create a bridge and put port 2/3/4 into that bridge.
Move all the ether2 related config (IP address, DHCP server, firewall rules) to the bridge and your good to go.
Other possibility is to create a bridge and put port 1 and 5 in that bridge as WAN bridge and return the master-port setting for 3/4 to be slave of ether2

6

I like the idea of creating a bridge and putting port 1 and 5 in a bridge, that is what my initial instinct was to try and get this working. When I put ports 1 and 5 in a bridge it breaks WAN access from internal network (ports 2,3,4). I think that I need to set up the routing rules to get this to work.
Here is my current routing rules…

 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 ADS  0.0.0.0/0                          192.168.11.1              1
 1 ADC  192.168.11.0/24    192.168.11.63   WAN Bridge                0
 2 ADC  192.168.88.0/24    192.168.88.1    ether2-master-l...        0
7

You have to movr all ether1 related config (ip, dhcp-client) to the bridge.

8

Yes, I finally got this figured out thanks to everyone helping me.

I think the big one giving me the issues was the firewall NAT that I was forgetting to change.

So to bridge port 5 properly to port 1 and make it function I did this…

/interface bridge
add l2mtu=1598 name="WAN Bridge"
/interface ethernet
set [ find default-name=ether5 ] name=ether5-slave-local
/ip neighbor discovery
set "WAN Bridge" discover=no
/interface bridge port
add bridge="WAN Bridge" interface=ether1-gateway
add bridge="WAN Bridge" interface=ether5-slave-local
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid disabled=\
    no interface="WAN Bridge"
/ip firewall filter
add action=drop chain=input comment="default configuration" in-interface=\
    "WAN Bridge"
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" \
    out-interface="WAN Bridge"

Thanks again everyone!

9

i wasn’t aware that this switchchip only can handle one master. i would work with vlans then. bridges also work but as the traffic pass the cpu the performance is not as good as just using vlans