Hello everyone,
This is a repost from the General forum, as my original post took a few days to be approved. I think that it ended up getting buried as a result.
I’ve recently picked up some Mikrotik equipment with the hopes of setting up a little more robust of a home network. I’ve got a RB750GL and a RB260GS that I’d like to setup as follows:
Once I manage to get the basics working on the RB750GL, I’ll see if I can figure out the trunking to the RB260GS.
I’ve been using the following pages as my main sources of information:
http://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features
http://mikrotikroutersetup.blogspot.ca/p/mikrotik-router-dhcp.html
http://forum.mikrotik.com/t/vlan-help/75342/1
My hope was to have two DHCP servers running on the RB750GL, one that would serve addresses to devices on the vlan100 network, and the other serving addresses to the vlan200 network. I’ve included my config as I’ve got it so far, but it doesn’t seem to be doing what I think it should be. When I connect a device to ether2, I’m given an address from the default DHCP server on the default network (192.168.88.0/24). When I connect on either ether3 or ether4, I am not assigned an address at all.
I realize that I haven’t added any rules to enable NAT from either of these VLAN networks. I figured that I’d start with small steps to get the DHCP server working as I’d hoped and then deal with the trunk and NAT.
apr/26/2014 14:43:22 by RouterOS 6.11
software id = 1R09-Q0PV
/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether2 ] name=ether2-master-local
set [ find default-name=ether3 ] master-port=ether2-master-local name=
ether3-slave-local
set [ find default-name=ether4 ] master-port=ether2-master-local name=
ether4-slave-local
set [ find default-name=ether5 ] master-port=ether2-master-local name=
ether5-slave-local
/ip neighbor discovery
set ether1-gateway discover=no
/interface vlan
add interface=ether2-master-local l2mtu=1594 name=vlan100 vlan-id=100
add interface=ether2-master-local l2mtu=1594 name=vlan200 vlan-id=200
/interface ethernet switch port
set 2 default-vlan-id=200 vlan-header=always-strip vlan-mode=secure
set 3 default-vlan-id=100 vlan-header=always-strip vlan-mode=secure
set 4 vlan-header=add-if-missing vlan-mode=secure
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
mac-cookie-timeout=3d
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=pool-vlan100 ranges=172.16.0.100-172.16.0.199
add name=pool-vlan200 ranges=172.16.1.100-172.16.1.199
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=ether2-master-local
lease-time=10m name=default
add address-pool=pool-vlan100 authoritative=after-10sec-delay disabled=
no interface=vlan100 name=server-vlan100
add address-pool=pool-vlan200 authoritative=after-10sec-delay disabled=
no interface=vlan200 name=server-vlan200
/interface ethernet switch vlan
add independent-learning=no ports=ether4-slave-local,ether5-slave-local
switch=switch1 vlan-id=100
add independent-learning=no ports=ether3-slave-local,ether5-slave-local
switch=switch1 vlan-id=200
/ip address
add address=192.168.88.1/24 comment=“default configuration” interface=
ether2-master-local network=192.168.88.0
add address=172.16.0.0/24 interface=vlan100 network=172.16.0.0
add address=172.16.1.0/24 interface=vlan200 network=172.16.1.0
/ip dhcp-client
add comment=“default configuration” dhcp-options=hostname,clientid
disabled=no interface=ether1-gateway
/ip dhcp-server network
add address=172.16.0.0/24 comment=vlan100 dns-server=172.16.0.1 gateway=
172.16.0.1
add address=172.16.1.0/24 comment=vlan200 dns-server=172.16.1.1 gateway=
172.16.1.1
add address=192.168.88.0/24 comment=“default configuration” dns-server=
192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.88.1 name=router
add address=172.16.0.1 name=dns-vlan100
add address=172.16.1.1 name=dns-vlan200
/ip firewall filter
add chain=input comment=“default configuration” protocol=icmp
add chain=input comment=“default configuration” connection-state=
established
add chain=input comment=“default configuration” connection-state=related
add action=drop chain=input comment=“default configuration”
in-interface=ether1-gateway
add chain=forward comment=“default configuration” connection-state=
established
add chain=forward comment=“default configuration” connection-state=
related
add action=drop chain=forward comment=“default configuration”
connection-state=invalid
/ip firewall nat
add action=masquerade chain=srcnat comment=“default configuration”
out-interface=ether1-gateway
/ip upnp
set allow-disable-external-interface=no
/system clock
set time-zone-name=America/Vancouver
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-localI’d appreciate any pointers on how to set this up. I think that I have a general understanding of what’s going on, but I’m clearly missing something here. Thanks in advance!