RB5009UG and VLAN Taging

RouterOS Beginner Basics
1

Hello
I own RB5009UG and have problem with configuration, maybe can you help me understand what I’m doing wrong.
I need 3 VLAN:
1 - MGMT
10 - LAN
35 - TEST
Port 1 is used for WAN
port 2-4 is used for LAN (access)
port 7 is used for (access)
sfp1 is used for turns with rest of network (1 untagged, 10/35 tagged)
at this moment I have this configuration but is not working - on port 2-4 I lost access to router.
Thank you for help.

/interface bridge
add name=BR_Home vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] name="ether1[WAN]"
set [ find default-name=sfp-sfpplus1 ] auto-negotiation=no speed=1Gbps
/interface vlan
add interface=BR_Home name=LAN_10 use-service-tag=yes vlan-id=10
add interface=BR_Home name=MGMT_1 use-service-tag=yes vlan-id=1
add interface=BR_Home name=TEST_35 use-service-tag=yes vlan-id=35
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool_MGMT ranges=10.0.1.2-10.0.1.30
add name=dhcp_pool_LAN ranges=10.0.10.2-10.0.10.254
add name=dhcp_pool_Home_IoT ranges=10.0.50.2-10.0.50.254
add name=dhcp_pool_TEST ranges=192.168.2.2-192.168.2.6
/ip dhcp-server
add address-pool=dhcp_pool_MGMT interface=MGMT_1 lease-time=8h name=dhcp_MGMT
add address-pool=dhcp_pool_LAN interface=LAN_10 lease-time=8h name=dhcp_LAN
add address-pool=dhcp_pool_TEST interface=TEST_35 lease-time=8h name=\
    dhcp_TEST
/interface bridge port
add bridge=BR_Home interface=ether2 pvid=10
add bridge=BR_Home interface=sfp-sfpplus1
add bridge=BR_Home interface=ether7
add bridge=BR_Home interface=ether3 pvid=10
add bridge=BR_Home interface=LAN_10 pvid=10
add bridge=BR_Home interface=MGMT_1
add bridge=BR_Home interface=TEST_35 pvid=35
add bridge=BR_Home interface=ether4 pvid=10
/ip firewall connection tracking
set enabled=yes
/interface bridge vlan
add bridge=BR_Home untagged=ether7,sfp-sfpplus1 vlan-ids=1
add bridge=BR_Home tagged=sfp-sfpplus1 untagged=ether2,ether3,LAN_10,ether4 \
    vlan-ids=10
add bridge=BR_Home tagged=sfp-sfpplus1 vlan-ids=35
/ip address
add address=10.0.1.1/27 interface=MGMT_1 network=10.0.1.0
add address=10.0.10.1/24 interface=LAN_10 network=10.0.10.0
add address=192.168.2.1/29 interface=TEST_35 network=192.168.2.0
/ip dhcp-client
add interface="ether1[WAN]" use-peer-dns=no
/ip dhcp-server network
add address=10.0.1.0/27 dns-server=10.0.1.1 gateway=10.0.1.1
add address=10.0.10.0/24 dns-server=10.0.1.1 gateway=10.0.10.1
add address=10.0.50.0/24 gateway=10.0.50.1
add address=192.168.2.0/29 dns-server=8.8.8.8 gateway=192.168.2.1
2 
/interface vlan
add interface=BR_Home name=LAN_10 use-service-tag=yes vlan-id=10
add interface=BR_Home name=MGMT_1 use-service-tag=yes vlan-id=1
add interface=BR_Home name=TEST_35 use-service-tag=yes vlan-id=35

Why do you use service tag ? That’s for 802.1ad compatibility.
Disable if you want to use normal VLAN.

3

Done but issue still persist
Ok small updated e.g. if I configure eth5:

/interface bridge port
add bridge=BR_Home interface=ether5
/interface bridge vlan
add bridge=BR_Home untagged= ether5,ether7,sfp-sfpplus1 vlan-ids=1

on port 5 I have connectivity to all device in vlan 1 but dhcp is not working.

Thanks

4

If you use VLAN, it’s best to avoid pvid=1.
Also, it’s not always visible in export since it’s the default value so you may not always be sure that your config is ok.

Did you read this tutorial ?
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

5

THis statement makes no sense to me…
sfp1 is used for turns with rest of network (1 untagged, 10/35 tagged)

can you provide a better explanation?