RB and CRS - Trunk and VLAN example config not working

RouterOS General
1

Hello

I tried to configure my RouterBoard and CRS according to: http://wiki.mikrotik.com/wiki/Manual:CRS_examples#Port_Based_VLAN

my present configuration of CRS is:

[admin@MikroTik] > export

jan/02/1970 03:24:21 by RouterOS 6.34.4

software id = BSUC-CLB7

/interface ethernet
set [ find default-name=ether1 ] name=ether1-master
set [ find default-name=ether2 ] name=ether2-trunk
set [ find default-name=ether3 ] master-port=ether1-master
set [ find default-name=ether4 ] master-port=ether1-master
set [ find default-name=ether5 ] master-port=ether1-master
set [ find default-name=ether6 ] master-port=ether1-master
set [ find default-name=ether7 ] master-port=ether1-master
set [ find default-name=ether8 ] master-port=ether1-master
set [ find default-name=ether9 ] master-port=ether1-master
set [ find default-name=ether10 ] master-port=ether1-master
set [ find default-name=ether11 ] master-port=ether1-master
set [ find default-name=ether12 ] master-port=ether1-master
set [ find default-name=ether13 ] master-port=ether1-master
set [ find default-name=ether14 ] master-port=ether1-master
set [ find default-name=ether15 ] master-port=ether2-trunk
set [ find default-name=ether16 ] master-port=ether1-master
set [ find default-name=ether17 ] master-port=ether1-master
set [ find default-name=ether18 ] master-port=ether1-master
set [ find default-name=ether19 ] master-port=ether1-master
set [ find default-name=ether20 ] master-port=ether1-master
set [ find default-name=ether21 ] master-port=ether1-master
set [ find default-name=ether22 ] master-port=ether1-master
set [ find default-name=ether23 ] master-port=ether1-master
set [ find default-name=sfp1 ] master-port=ether1-master
/interface vlan
add interface=ether2-trunk name=ether2-vlan200 vlan-id=200
/ip pool
add name=pool-test ranges=192.169.100.10-192.169.100.250
/ip dhcp-server
add address-pool=pool-test disabled=no interface=ether24 name=dhcp-test
/interface ethernet switch egress-vlan-tag
add tagged-ports=ether2-trunk,ether15 vlan-id=200
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=200 ports=ether15
/interface ethernet switch vlan
add ports=ether2-trunk,ether15 vlan-id=200
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether1-master network=192.168.88.0
/system routerboard settings
set protected-routerboot=disabled
[admin@MikroTik] >

on the Trunk side (RouterBoard) i have such configuration:

/interface vlan add interface=ether10 name=vlan100 vlan-id=100
/interface vlan add interface=ether10 name=vlan200 vlan-id=200

plus configuration for dhcp on router board vlan200:

/ip dhcp-server add address-pool=pool-tmp disabled=no interface=vlan200 name=dhcp-200

Port ether10 of RouterBoard is connected to ether2-trunk CRS port. When i connect computer to ether15 it can’t recive address from dhcp server. What is strange, when i manually create vlan 200 on port ether2-trunk and setup dhcp-client on this port it is reciving ip how it should. So it looks like problem is with vlan packets forwarding to corrects ports. What am i doing wrong? What else should be configured/corrected?

Best regards
holo

2

Hello holo,

In the same link you mentioned you can find note: Multiple master-port configuration is designed as fast and simple port isolation solution, but it limits part of VLAN functionality supported by CRS switch-chip. For advanced configurations use one master-port within CRS switch chip for all ports, configure VLANs and isolate port groups with port isolation profile configuration.

So, the one way yo reach your purpose is:
/interface ethernet
set [ find default-name=ether2 ] master-port=ether1-master name=ether2-trunk
set [ find default-name=ether15 ] master-port=ether1-master

3

Hi,

I am having issue with CSR112G for basic VLAN configurations, I have followed TOC Manual, but none is working. I need to have one Trunk port with VLAN 200 (IP 192.168.10.12/24) allowed on Trunk port followed by other L2 VLANs to pass through same trunk, I have managed to do basic and able to ping but port is access not trunk.

Idea is simple to have multiple vlans on Trunk Port and management IP on Trunk port.

Appreciate early response.

4

Thank you, that was issue.. now everything is working fine.

P.S.
Sorry or late respond.