Hi and thanks.
I re-made the whole config this morning following the Router-Switch-AP (all in one) guide from http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1 but this time I tried to “Bridge-Off” the ether10 of my RB2011.
While I have the same issues as before, I can now connect to the router via MAC address (Winbox)
Here is the cfg:
# jul/28/2022 11:37:20 by RouterOS 7.4
# software id = EBV1-UKWG
#
# model = RB2011UiAS-2HnD
/interface bridge
add name=BR1 protocol-mode=none
/interface ethernet
set [ find default-name=ether10 ] name=ether10-safe
/interface wireless
set [ find default-name=wlan1 ] disabled=no frequency=auto hide-ssid=yes \
mode=ap-bridge ssid=theFarmSvc
/interface vlan
add interface=BR1 name=BASE_VLAN vlan-id=99
add interface=BR1 name=BLUE_VLAN vlan-id=10
add interface=BR1 name=GREEN_VLAN vlan-id=20
/interface list
add name=WAN
add name=VLAN
add name=BASE
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys \
supplicant-identity=MikroTik
/ip pool
add name=SAFE_POOL ranges=10.10.0.10-10.10.0.20
add name=BLUE_POOL ranges=192.168.3.2-192.168.3.254
add name=GREEN_POOL ranges=192.168.203.2-192.168.203.254
add name=BASE_POOL ranges=192.168.0.10-192.168.0.20
/ip dhcp-server
# DHCP server can not run on slave interface!
add address-pool=SAFE_POOL interface=ether10-safe name=SAFE_DHCP
add address-pool=BLUE_POOL interface=BLUE_VLAN name=BLUE_DHCP
add address-pool=GREEN_POOL interface=GREEN_VLAN name=GREEN_DHCP
add address-pool=BASE_POOL interface=BASE_VLAN name=BASE_DHCP
/port
set 0 name=serial0
/interface bridge port
add bridge=BR1 interface=ether2 pvid=10
add bridge=BR1 interface=ether3 pvid=10
add bridge=BR1 interface=wlan1 pvid=10
add bridge=BR1 interface=ether4 pvid=20
add bridge=BR1 interface=ether5 pvid=20
add bridge=BR1 interface=ether9 pvid=99
add bridge=BR1 interface=ether10-safe pvid=99
/interface list member
add interface=ether1 list=WAN
add interface=BLUE_VLAN list=VLAN
add interface=GREEN_VLAN list=VLAN
add interface=ether10-safe list=BASE
/ip address
add address=10.10.0.1/24 interface=ether10-safe network=10.10.0.0
add address=192.168.3.1/24 interface=BLUE_VLAN network=192.168.3.0
add address=192.168.203.1/24 interface=GREEN_VLAN network=192.168.203.0
add address=192.168.0.1/24 interface=BASE_VLAN network=192.168.0.0
/ip dhcp-client
add interface=ether1
/ip dhcp-server network
add address=10.10.0.0/24 dns-server=192.168.0.1 gateway=10.10.0.1
add address=192.168.0.0/24 dns-server=192.168.0.1 gateway=192.168.0.1
add address=192.168.3.0/24 dns-server=192.168.0.1 gateway=192.168.3.1
add address=192.168.203.0/24 dns-server=192.168.0.1 gateway=192.168.203.1
/ip dns
set allow-remote-requests=yes servers=9.9.9.9
/system clock
set time-zone-name=Europe/Rome
/system identity
set name=MTtheFarm
Issue1:
there must be something wrong in how I set up the dhcp for ether10-safe, Winbox tell me DHCP server can not run on slave interface. (I did it to avoid setting a manual IP on my laptop…).
As you can see, the router is now getting WAN from another router (just “LAB” mode), and I can connect even from “my” LAN 192.168.1.0/24: log say I’m in from local…
Issue2:
I actually don’t need the BASE VLAN other than to get SAFE access to the router: can it be simplified?
Issue3:
clients connected to ether2, ether3 or ether4, ether5, DON’T receive any address…