Hello,
I have the following case:
I have a basic router Mikrotik CCR2004-16G-2S+ From several of the ports different VLANs go out with id:13, 14, 15, 16, etc. which are for tenants of the building and accordingly VLAN with id:10 which is for internal use and the cameras are attached to it. I add different networks to the different VLANs and DHCP to them accordingly. Accordingly, to each individual switch, I put in the trunk, for example, VLAN16 for the tenant and VLAN10 to monitor the cameras. The networks must not be visible to each other. My problem comes from not being able to run VLAN10 on more than one port. I must have VLAN 10 on the 13,14,15 and 16 VLAN in truck and i have VLAN 10 to another port on access.
I am attaching a schematic diagram.
Thanks in advance.
anav
June 10, 2024, 2:42pm
2
Well I would recommend a separate management Network.
All the switches would get an IP on the management network etc..
Without seeing your config hard to help further.
What type of switches are these ( assuming basic managed switches ).
/export file=anynameyouwish (minus router serial number, public wanip information, keys etc.)
Hello,
here is config:
/interface bridge
add name=“bridge-tenant”
add name=bridge1
/interface ethernet
set [ find default-name=ether1 ] comment=internet-in
set [ find default-name=ether2 ] comment=NVR
/interface vlan
add interface=“bridge-tenant” name=vlan10 vlan-id=10
add interface=“bridge-tenant” name=vlan16 vlan-id=16
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.4.2-192.168.4.254
add name=dhcp_pool1 ranges=10.10.16.2-10.10.16.254
add name=dhcp_pool2 ranges=192.168.168.2-192.168.168.254
/ip dhcp-server
add address-pool=dhcp_pool0 interface=vlan10 name=dhcp1-VLAN10
add address-pool=dhcp_pool1 interface=vlan16 name=dhcp1-VLAN16
/port
set 0 name=serial0
set 1 name=serial1
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether6
add bridge=bridge1 interface=ether7
add bridge=bridge1 interface=ether8
add bridge=“bridge-tenant” interface=ether16
add bridge=“bridge-tenant” interface=ether15
add bridge=“bridge-tenant” interface=ether13
add bridge=“bridge-tenant” interface=ether14
add bridge=bridge1 interface=ether9
add bridge=“bridge-tenant” interface=ether10
add bridge=bridge1 interface=ether11
add bridge=“bridge-tenant” interface=ether12
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface bridge vlan
add bridge=bridge1 untagged=vlan10 vlan-ids=10
add bridge=*1F untagged=vlan10 vlan-ids=10
/ip address
add address=10.10.16.1/24 interface=vlan16 network=10.10.16.0
add address=192.168.4.1/24 interface=vlan10 network=192.168.4.0
/ip dhcp-client
add interface=ether1
/ip dhcp-server network
add address=10.10.16.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=10.10.16.1
add address=192.168.4.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=192.168.4.1
add address=192.168.168.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=192.168.168.1
/ip firewall nat
add action=masquerade chain=srcnat src-address=192.168.4.0/24
add action=masquerade chain=srcnat src-address=10.10.16.0/24
/system clock
set time-zone-name=Europe/Sofia
/system note
set show-at-login=no
/system routerboard settings
set enter-setup-on=delete-key