Router hAP ac2 on stick (VLANs)

RouterOS Beginner Basics
1

Hi guys,

I have problem with implementing my topology shema(in attachment). I created 2 Vlans (10 and 20) on my hAP ac2 interface ether3. I used ether 3 as trunk port. Also i made two DHCP servers on each VLANs.
VLAN 10 - 192.168.10.0/24
VLAN 20 - 192.168.20.0/24


Then i connect my zyxel1900-24 interface 1 to mikrotik inteface 3. Then i create and configure my zyxel VLANs.
VLAN 10 - port 1 tagged and ports 3,5 untagged
VLAN 20 - port 1 tagged and ports 15,16 untagged

After that I connect my notebook as DHCP client in any VLANs untagged ports and no success. With static IP on notebook the same problem.
I read many manuals about that and don’t understand what happends.
Vlans_adding.jpg
Router on stick.jpg

2

Great thanks for the diagram! To see if there is an issue on the MT side of the house please post your config
/export hide-sensitive file=yourconfigapr25

3

Based on the “S” on the left, is ether3 configured as bridge port? That would not be right. If you need the port only for these two vlans, remove it from bridge. If you need it as part of bridge (for other untagged traffic), here is some reading material: https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_VLAN_Filtering

4

Sob is usually behind the latest trends, still wears bell-bottom jeans, all to say the best reference is this one with good examples…
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

5

I find the examples in official manual very helpful. Short and simple, you immediately know what’s the logic behind it.

6

Fixed for accuracy.

7

Here are my config of the hAP ac2 as .rsc file. And screenshots of Zyxel gs1900 with all VLANs.
photo_2019-04-25_23-08-31.jpg
photo_2019-04-25_23-08-32.jpg
photo_2019-04-25_23-08-34.jpg
photo_2019-04-25_23-08-35.jpg
photo_2019-04-25_23-08-29.jpg
hapAC2.rsc (1010 Bytes)

8

You are right it was in bridge but I tried also without bridge adding as trunk port and no success. It also unworking.

Now I understand logic of Mikrotiks VLANs clearly but it dosn’t work in my configuration for some reason. :confused:

I trying to do this during 3 days. I made my shema as simple as I can.

9

That is not the complete config. :frowning:
No ethernet interface No interface bridge ports, no interface bridge vlans no firewall rules etc…
Could care less about the pictures for now as I want to make sure what is hitting the zyxel device is correct…

10

I made for my router “restore default” coz of that config seems not complete. I tried made only VLAN trunk for simplicity.

Firewall, bridges are empty. Only VLAN trunk on ether 3.

11

On the Zyxel, you would seem to need to set the PVID parameter on ports 3,5,15,16 to 10 or 20 as appropriate.
I would change port 1 as well to only allow tagged frames, eventually, after you’ve got it working.
(Your diagram is wrong too - the line pointing to port 5 actually seems to point to port 6, and 15 and 16 seem to point to 17 and 18.)

12

Please read the link I provided it demonstrates how to setup vlans…

13

Thanks man. you are absolutely right. I found this solution today by myself. PVIDs helps me to fix this issue.
About diagram, sry. I know about this mistake, but it is not critical, I think. :smiley: