RB4011 VLAN DHCP, offering without success

[gungner]

I’m trying to “upgrade” from RB450Gx4 to RM 4011iGS+. I thought it was just smaller adaptions to the config, since more ports, but what a misstake. I just can’t pass getting the clients an IP address. So I followed I don’t know how many tutorials in this forum, but always the same results, DHCP offering lease without success. The RB450 got a switch I understand that can set VLAN ID on port level, the one in RB4011 can’t (V6.x got some VLAN on RB4011 switch, V7 don’t)

So I started small with below. Log output attached

# jan/02/1970 00:44:45 by RouterOS 7.2rc3
# software id = WLH2-0A7L
#
# model = RB4011iGS+
# serial number = 
/interface bridge
add name=valhall_bridge protocol-mode=none vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] name=ether1_WAN
set [ find default-name=ether4 ] name=ether4_Asur
/interface vlan
add interface=valhall_bridge name=BASE_VLAN vlan-id=99
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.10.2-192.168.10.126
/ip dhcp-server
add address-pool=dhcp_pool0 interface=BASE_VLAN name=dhcp1
/port
set 0 name=serial0
set 1 name=serial1
/interface bridge port
add bridge=valhall_bridge interface=ether4_Asur pvid=99
/interface bridge vlan
add bridge=valhall_bridge tagged=valhall_bridge,ether4_Asur vlan-ids=99
/ip address
add address=192.168.10.1/24 interface=BASE_VLAN network=192.168.10.0
/ip dhcp-server network
add address=192.168.10.0/24 dns-server=9.9.9.9 gateway=192.168.10.1
/ip firewall filter
add action=accept chain=input in-interface=BASE_VLAN
/system logging
add prefix="*** DHCP ***" topics=dhcp

My RB450Gx ha been working great, I just needed more ports (and performance I thought). Now I’ve spent I don’t know how many hours thinking, it just a stupid mistake, you find it. Now I’m desperate and asking for help here.

Cheers, Tord

PS: I’ve tried different LAN cables, different clients, same same

[anav]

/interface bridge port
add bridge=valhall_bridge interface=ether4_Asur pvid=99
/interface bridge vlan
add bridge=valhall_bridge tagged=valhall_bridge,ether4_Asur vlan-ids=99

The bridge port setting states, you have an access port on ether4, and that a dumb device (PC) is attached such that when the PC traffic enters the port, its traffic gets tagged with vlan99.
When the return traffic exits the port, the vlan tagging will be stripped on the way back to the PC. All good!

The bridge vlan settings are not required in this simple case!. The router will automatically (dynamically) create the untagging for you on that port.
Alternatively if you did want to state it manually ( I prefer to, since then it will show up on any exported config and is clear to read ( so one can cross-check intent of the admin with bridge ports etc.)
If so
add bridge-vlhall_bridge tagged=bridge untagged=ether4_Asur vlan-ids=99 should also work.

TRY Both to confirm!!

[gungner]

SUPER What really did it was to

add bridge-valhall_bridge tagged=valhall_bridge untagged=ether4_Asur vlan-ids=99

and I left the bridge with PVID 1, need to create more VLANs for CCTV, IOT etc.. I guess it did work with tagged on RB450 since I used the switch to add the VLAN tagg, on RB4011 you can’t add any VLAN tagg on the switch port, hence untagged=ether4 since it’s an end point I’m a happy geezer now, thanks a lot.

cheers, tord

[anav]

When you decide to add more vlans ensure you read link C - https://forum.mikrotik.com/viewtopic.php?t=182373