Hello, I wan’t to know is it possible to use the one ip for ros and accessed by different interface.
Case1:
1.1 the router has two interface called lan1 and lan2.
1.2 the lan1 and lan2 have the same network of 192.168.2.0/24
1.3 the router take the ip of 192.168.2.1/24
1.4 lan1 and lan2 should not accessible with each other
Q: how to setup this network? use bridge and bridge filter?
case2:
2.1 the router has only one interface called lan1
2.2 the lan1 interface carries traffic for vlan 5 and vlan 6
2.3 vlan 5 and vlan 6 have the same network of 192.168.2.0/24
2.4 the router take the ip of 192.168.2.1/24
Q: I know we can create two vlan interface for vlan5 and vlan 6, then the situation is the same with case1, but i want to know how to setup by bridge vlan filter
A. Do bridge both interfaces and then filter traffic between interfaces.
or
B. Divide 192.168.2.0/24 subnet to two 192.168.2.0/25 subnets for each interface and then filter traffic
Putting the same IP on two interfaces will confuse router.
Case1: in similar case I ended up with bridging both interfaces, putting IP on bridge (instead of both interfaces) and filtering (in bridge) communication going from Ether1 to Ether2 and oppositely. Works like charm! Both parts can communicate with router but can’t reach each other.
Case2: bridging and vlans can bring unexpected issues unless you really know what you are doing and can explain all possible paths of frames whole Layer2 network. But in general, it should work same way as mentioned in Case1.
Case1: Yesterday i tried to bridge the two interfaces then filter them in bridge filters,(just like what @BartoszP and @vecernik87 said), and it worked. Thank you.
Case2: I found that it can be achieved by Bridge VLAN Filtering and physical vlan switch(see:https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_VLAN_Filtering), but just like @vecernik87 said, in general you can create two vlan interfaces then bridge them like case1.