routing

RouterOS General
1

I have vlan 10 and I setup an IP address on the interface of 192.168.10.254. The main VLAN is 21 and it has IP. 192.168.21.251 which I can telnet into it and from the command prompt I can ping 192.168.10.254. I setup a DHCP-Relay for Vlan10 and I am getting the correct IP’s from that vlan, but from within VLAN 10 I cant ping 192.168.10.254. From VLAN 21 everything is working fine

 # mar/15/2014 15:48:51 by RouterOS 5.14
   # software id = FP7P-M89C
   #

   /interface bridge
   add name=bridge-phones
   add l2mtu=1598 name=bridge-network

   /interface vlan
   add interface=bridge-phones l2mtu=65531 name=vlan-10-phones vlan-id=10
   add interface=bridge-network l2mtu=1594 name=vlan-21-network vlan-id=21

   /interface bridge port
   add bridge=bridge-network interface=ether1
   add bridge=bridge-network interface=ether2
   add bridge=bridge-network interface=ether3
   add bridge=bridge-network interface=ether4
   add bridge=bridge-network interface=ether5
   add bridge=bridge-phones interface=ether6
   add bridge=bridge-phones interface=ether7
   add bridge=bridge-phones interface=ether8
   add bridge=bridge-network interface=ether9
   add bridge=bridge-network interface=ether10

   /ip address
   add address=192.168.10.254/24 interface=bridge-phones
   add address=192.168.21.251/24 interface=bridge-network

   /ip dhcp-relay
   add dhcp-server=192.168.21.254 disabled=no interface=bridge-phones local-address=192.168.10.254 name=Vlan10_DHCP
2

Post your whole export. Need to see the firewall config and routes especially.

3

This is the entire compact export.


   # mar/15/2014 15:48:51 by RouterOS 5.14
   # software id = FP7P-M89C
   #
   /interface bridge
   add name=bridge-phones
   add l2mtu=1598 name=bridge-network
  
   /interface vlan
   add interface=bridge-phones l2mtu=65531 name=vlan-10-phones vlan-id=10
   add interface=bridge-network l2mtu=1594 name=vlan-21-network vlan-id=21
   
   /interface bridge port
   add bridge=bridge-network interface=ether1
   add bridge=bridge-network interface=ether2
   add bridge=bridge-network interface=ether3
   add bridge=bridge-network interface=ether4
   add bridge=bridge-network interface=ether5
   add bridge=bridge-phones interface=ether6
   add bridge=bridge-phones interface=ether7
   add bridge=bridge-phones interface=ether8
   add bridge=bridge-network interface=ether9
   add bridge=bridge-network interface=ether10
   
   /ip address
   add address=192.168.10.254/24 interface=bridge-phones
   add address=192.168.21.251/24 interface=bridge-network
   
   /ip dhcp-relay
   add dhcp-server=192.168.21.254 disabled=no interface=bridge-phones local-address=192.168.10.254 name=Vlan10_DHCP
   
   /ip dns
   set allow-remote-requests=yes
   
   /system clock
   set time-zone-name=America/New_York
   
   /system health
   set use-fan=auxiliary
4

What about your routing table?

Is all of your traffic on your network tagged?.. because I’m not sure you are putting your VLAN in the correct place.

Diagram your network…

5

I have a router with IP 192.168.21.254 this is also the DHCP server for both VLANS. it is connected to port 1 on the MicroTik. All components are plugged into Vlan 21 and I have several IP phones that I would like to plug into Vlan 10 on ports 6-8. Right now VLAN21 is fully functional with internet and DHCP.

6

Then you shouldn’t be assigning things the way you are right now… by placing the VLANs on the bridge you are tagging ALL traffic to those ports…

I assume you more want port 1 to act as a trunk and the other ports as access ports correct?

Also what kind of hardware do you have? Depending on the hardware you may be able to do this with the switch chip.

My assumption is that ether1 should have two tagged VLANs… all of the other ports are untagged access ports to a specific VLAN.

-Eric

7

Port1 is a connected to a Cisco 871 Router. I would need port 1 to be a trunk port for both Vlan’s. What I dont understand is that why cant I ping 192.168.10.254 from the same vlan? I get an IP of 192.168.10.54 from DHCP Server 192.168.21.254

8

When you get that IP where are you plugged in… I think it is because your VLANs are not properly configured.

-Eric

9

When I plug into port 6 I get and IP from 192.168.10.0/24 range with default server of 254. But I cant ping 254. From the MicroTick command line I can ping 192.168.10.254. Right now I am plugged into port 10 and I have DHCP enabled and I get IP 192.168.21.77. There is only one DHCP-Server which is 192.168.21.254.

10

I think you need to actually fix your configuration first… then troubleshoot the DHCP. Your VLANs are not properly configured. Right now you have tagged traffic for each vlan going everywhere…

11

Your config (assuming ether1 is trunk and the rest are access ports, meaning ether1 has only TAGGED vlans 10 and 21)
/interface bridge
add name=bridge-phones
add l2mtu=1598 name=bridge-network

/interface vlan
add interface=ether1 l2mtu=65531 name=vlan-10-phones vlan-id=10
add interface=ether1 l2mtu=1594 name=vlan-21-network vlan-id=21

/interface bridge port
add bridge=bridge-network interface=ether1
add bridge=bridge-network interface=ether2
add bridge=bridge-network interface=ether3
add bridge=bridge-network interface=ether4
add bridge=bridge-network interface=ether5
add bridge=bridge-phones interface=ether6
add bridge=bridge-phones interface=ether7
add bridge=bridge-phones interface=ether8
add bridge=bridge-network interface=ether9
add bridge=bridge-network interface=ether10

/ip address
add address=192.168.10.254/24 interface=bridge-phones
add address=192.168.21.251/24 interface=bridge-network

12

And the reason you couldn’t ping is because your tagged and untagged traffic was all confused…

13

Thanks

that worked

14

I actually had a mistake in that…

Should be
/interface bridge
add name=bridge-phones
add l2mtu=1598 name=bridge-network

/interface vlan
add interface=ether1 l2mtu=65531 name=vlan-10-phones vlan-id=10
add interface=ether1 l2mtu=1594 name=vlan-21-network vlan-id=21

/interface bridge port
add bridge=bridge-network interface=vlan-21-network
add brige=bridge-phones interface=vlan-10-phones
add bridge=bridge-network interface=ether2
add bridge=bridge-network interface=ether3
add bridge=bridge-network interface=ether4
add bridge=bridge-network interface=ether5
add bridge=bridge-phones interface=ether6
add bridge=bridge-phones interface=ether7
add bridge=bridge-phones interface=ether8
add bridge=bridge-network interface=ether9
add bridge=bridge-network interface=ether10

/ip address
add address=192.168.10.254/24 interface=bridge-phones
add address=192.168.21.251/24 interface=bridge-network