I got a couple of RB750 and want to reuse one as a switch with VLAN functionality.
Short version:
Main Router (any Brand) provides DHCP —> MK RB750 (handles VLANs + VLAN DHCP)—> Client with VLAN-ID get DHCP from MK
Main Router (any Brand) provides DHCP —> MK RB750 (handles VLANs + VLAN DHCP)—> Client with NO VLAN-ID get DHCP from MAIN Router
For all intensive purposes ether1 on the MK RB750 is the link/WAN port to the Main router.
I followed this tutorial: Turn your router into a network switch https://www.youtube.com/watch?v=XKYmgtVs9kc
Build the VLANs on the Bridge
Clients with no VLAN-ID gets internet access on ether 2 - 5
Clients with VLAN-ID gets DHCP IP on ether 2 - 5 but no internet access
Added a masquerade rule on the Bridge as ether1 is included within the Bridge to no avail.
Any input would be much appreciated to get this resolve to why the VLAN Clients do not have internet access.
Yes but at the bottom of your schematic you show four or five devices that are not on VLAN ???
With 5 Ports, 1 from Main router, and four others I assume going to managed switches (since you show multiple devices on every port), leaves ZERO PORTS for the non vlan devices.
Your math does not add up???..
(one port cannot serve multiple devices)
(four ports cannot serve 5 different port requirements as depicted).
Unless the MT device has more ports, I want some of the coffee you are drinking.
Presumably the client VLAN tagging is done elsewhere.
The configuration has IP addresses and connected routes for the VLANs, but no address or default route on the untagged VLAN for the masquerade rule to work with.
Either
/ip address
add address=xx.xx.xx.yy/24 interface=bridge_ALL
/ip route
add distance=1 gateway=xx.xx.xx.zz
where xx.xx.xx.zz is the LAN address of your main router and xx.xx.xx.yy is any available LAN address OR
/ip dhcp-client
add disabled=no interface=bridge_ALL
Okay,
I see where the confusing came into play. The coffee I am currently drinking is Douwe Egberts Pure Gold nr3
ether 2 - 5 can hand out DHCP for VLANs and DHCP from Main router.
Using Virtualization one can have multiple devices on one port.
Example:
ether 2 has the following VM NICs connected to it
VM1 with VLAN ID 20
VM2 with VLAN ID 30
VM3 with NO VLAN ID
(I know this can be done as I have done it before with another router brand)
If managed switches would have been used still would not have matter what traffic was passed to the switch as the switch would strip the tags if need be.
With either of those in place can you successfully ping or traceroute from the Mikrotik itself to the internet (e.g. 8.8.8.8 or 1.1.1.1), and what does a traceroute from any VLAN client show?
Selecting a VLAN interface won’t work - ping will attempt to send the request from that interface. Instead of selecting an Interface on the General tab you can enter an address of one of the VLANs, e.g. 192.168.30.1, as the Src. Address on the Advanced tab.
If that is successful try from one of your VLAN clients.
It is odd it took so long to start working as there just didn’t appear to be anything wrong, maybe some cached connection/routing/arp data which had to expire.
All I did was
Reset Configuration
No Default Configuration
Do Not Backup
Ran the code, wait for about 10min then all of a sudden it all worked as indented.
Must have been something with cached connection/routing/arp data that was not accounted for.
