Hello!
I got lost! I tried to start the router for 4 nights and almost nothing was completed. I know how to configure WAN port, so the router itself has access to the Internet, but the configuration of bridge with VLANs is something that I failed so far…
I checked plenty of configuration files from the forum, trying to glue them, read an endless amount of posts, also: great docs, wiping router multiple times, again and again, …and I don’t see hope.
Please, help…
Device: RB5009UPr+S+
My setup (the goal of configuration):
ether1: WAN (access to the Internet works from the router)
Bridge ports: form ether2 to ether8.
VLANS config: described in config file.
DHCP Server: All VLANS
At the very beginning I wanted to configure ether2 port, as an ACCESS port, and check if laptop can obtain an IP from DHCP - does not work, the configuration I copied from: http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1 Even Management (BASE) port does not work from this configuration for me.
What I’m doing wrong?
Configuration file:
###############################################################################
# Topic: RB5009 switch VLAN configuration
# Example:
# Web:
# RouterOS: 7.5 Stable
# Model: RB5009UPr+S+
# Date:
# Notes:
# Thanks: Mikrotik,
###############################################################################
# VLAN Overview
#######################################
# 10 = ManagedDevices_VLAN10 (10.0.10.0/24)
# 20 = TrustedUsers_VLAN20 (10.0.20.0/24)
# 30 = IoT_VLAN30 (10.0.30.0/24)
# 40 = Guests_VLAN40 (10.0.40.0/24)
#100 = Management_VLAN100 (10.0.100.0/24)
# Port Overview
#######################################
# ether1 = WAN port
# ether2 = Linux device (VLAN10 - Access)
# ether3 = Linux device (VLAN10 - Access)
# ether4 = Access Point Unifi (VLAN20, 30, 40 - Trunk)
# ether5 = Linux device (VLAN20 - Access)
# ether6 = Unused
# ether7 = Unused
# ether8 = Management access to RB-5009 (10.0.100.0/24)
# sfp-sfpplus1 = Unused (No WAN)
/interface bridge
add name=BR1 protocol-mode=none vlan-filtering=yes
/interface bridge port
add bridge=BR1 frame-types=admit-only-vlan-tagged interface=ether2
/interface bridge vlan
add bridge=BR1 tagged=BR1,ether2 vlan-ids=10
/interface vlan
add interface=BR1 name=BLUE_VLAN vlan-id=10
/interface list
add name=VLAN
/interface list member
add interface=BLUE_VLAN list=VLAN
/ip pool
add name=BLUE_POOL ranges=10.0.10.2-10.0.10.254
/ip dhcp-server
add address-pool=BLUE_POOL interface=BLUE_VLAN name=BLUE_DHCP
/ip address
add address=10.0.10.1/24 interface=BLUE_VLAN network=10.0.10.0
/ip dhcp-client
add interface=ether1
/ip dhcp-server network
add address=10.0.10.0/24 dns-server=192.168.0.1 gateway=10.0.10.1
/system identity
set name=Router