Hi anav or anyone else that can kindly help,
Network noob here but I have been doing a ton of research and learning about my MikroTik RB5009 for the past week and have setup my network, but now I’d like to segment it with VLANs. I’ve leaned on a bunch of resources to learn about them conceptually, including the Wiki Manual, threads on this forum including: http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1 and videos such as this one https://youtu.be/1ZJ-pM89N7o (which the comments on it subsequently brought me here) but as you know there’s a gap between knowledge and understanding, especially when it gets put into practice! Sorry if this is a faux pas to resurrect this thread, but everyone has been explaining things in ways that I understand so I wanted to hitch my wagon to it haha.
I ended up following the steps in the video I shared above to get a VLAN working (some differences such as using LAN since the 5009 doesn’t have WiFi) and was happy, until I read the comments in that video and then your comment saying that setting up multiple bridges for each VLAN is not good practice, and everything should go through one bridge. I’ve been trying to do this but have hit a wall, like asphri, in that I’m not sure where to implement my DHCP server. When I have it set to the Guest-VLAN interface, it is invalid, and if I set it to the bridge it won’t let me because I already have a DHCP server there. I’m trying to do everything via WinBox/GUI with no terminal just because it helps me understand concepts and how to do things better with this router, so I’m hoping I can get this working without diving into it. I’m not allergic to code or terminals or anything, I was a front end dev in a past life.
Attached is my basic topology. I’m currently practicing by making a Guest-VLAN, so that’s not included in the picture, and there are more devices connected to the router but this gives an idea. I will have a main SSID with no VLAN tagging (basically using default config), a Guest SSID with VLAN tagging, and an IOT SSID with VLAN tagging. Currently I’m just working on Guest and then will copy the steps to do the same for the IOT VLAN.
I’ve also attached my Interface and DHCP to see where I’m running into issues. If you need any more info, please let me know.
Thanks for your time!
