Hi,
I came up with this network in a GNS3 environment:
here are the 3 MK setups too:
Router 1
# 2024-10-11 10:08:02 by RouterOS 7.12.1
# software id =
#
/interface bridge
add name=bridge1 vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] name=ether1-WAN1
/interface vlan
add interface=bridge1 name=VLAN10 vlan-id=10
add interface=bridge1 name=VLAN20 vlan-id=20
add interface=bridge1 name=VLAN30 vlan-id=30
/interface vrrp
add interface=VLAN10 name=vrrp10 priority=250 vrid=10
add interface=VLAN20 name=vrrp20 priority=250 vrid=20
add interface=VLAN30 name=vrrp30 priority=250 vrid=30
/disk
set slot1 slot=slot1 type=hardware
set slot2 slot=slot2 type=hardware
set slot3 slot=slot3 type=hardware
set slot4 slot=slot4 type=hardware
set slot5 slot=slot5 type=hardware
set slot6 slot=slot6 type=hardware
set slot7 slot=slot7 type=hardware
set slot8 slot=slot8 type=hardware
set slot9 slot=slot9 type=hardware
set slot10 slot=slot10 type=hardware
set slot11 slot=slot11 type=hardware
set slot12 slot=slot12 type=hardware
set slot13 slot=slot13 type=hardware
set slot14 slot=slot14 type=hardware
set slot15 slot=slot15 type=hardware
set slot16 slot=slot16 type=hardware
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=10.194.10.50-10.194.10.254
add name=dhcp_pool1 ranges=10.194.20.50-10.194.20.254
add name=dhcp_pool2 ranges=10.194.30.50-10.194.30.254
/ip dhcp-server
add address-pool=dhcp_pool0 interface=vrrp10 name=dhcp1
add address-pool=dhcp_pool1 interface=vrrp20 name=dhcp2
add address-pool=dhcp_pool2 interface=vrrp30 name=dhcp3
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether6
/interface bridge vlan
add bridge=bridge1 tagged=bridge1,ether2 vlan-ids=10
add bridge=bridge1 tagged=bridge1,ether2 vlan-ids=20
add bridge=bridge1 tagged=bridge1,ether2 vlan-ids=30
/ip address
add address=10.194.10.2/24 interface=VLAN10 network=10.194.10.0
add address=10.194.20.2/24 interface=VLAN20 network=10.194.20.0
add address=10.194.30.2/24 interface=VLAN30 network=10.194.30.0
add address=10.194.10.1 interface=vrrp10 network=10.194.10.1
add address=10.194.20.1 interface=vrrp20 network=10.194.20.1
add address=10.194.30.1 interface=vrrp30 network=10.194.30.1
/ip dhcp-client
add interface=ether1-WAN1
/ip dhcp-server network
add address=10.194.10.0/24 dns-server=1.1.1.1 gateway=10.194.10.1
add address=10.194.20.0/24 dns-server=1.1.1.1 gateway=10.194.20.1
add address=10.194.30.0/24 dns-server=1.1.1.1 gateway=10.194.30.1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1-WAN1
/system identity
set name=R-1
/system note
set show-at-login=no
/system scheduler
add interval=15s name=schedule1 on-event=checkInternet policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
start-date=2024-09-29 start-time=19:32:20
/system script
add dont-require-permissions=no name=checkInternet owner=admin policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
if ([/ping 8.8.8.8 count=3]=0) do={\r\
\n /interface disable [find name=\"bridge1\"]\r\
\n} else={\r\
\n /interface enable [find name=\"bridge1\"]\r\
\n}\r\
\n"
/tool romon
set enabled=yes
Router 2 (backup):
# 2024-10-11 10:08:53 by RouterOS 7.12.1
# software id =
#
/interface bridge
add name=bridge1 vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] name=ether1-WAN
/interface vlan
add interface=bridge1 name=VLAN10 vlan-id=10
add interface=bridge1 name=VLAN20 vlan-id=20
add interface=bridge1 name=VLAN30 vlan-id=30
/interface vrrp
add interface=VLAN10 name=vrrp10 vrid=10
add interface=VLAN20 name=vrrp20 vrid=20
add interface=VLAN30 name=vrrp30 vrid=30
/disk
set slot1 slot=slot1 type=hardware
set slot2 slot=slot2 type=hardware
set slot3 slot=slot3 type=hardware
set slot4 slot=slot4 type=hardware
set slot5 slot=slot5 type=hardware
set slot6 slot=slot6 type=hardware
set slot7 slot=slot7 type=hardware
set slot8 slot=slot8 type=hardware
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=10.194.10.50-10.194.10.254
add name=dhcp_pool1 ranges=10.194.20.50-10.194.20.254
add name=dhcp_pool2 ranges=10.194.30.50-10.194.30.254
/ip dhcp-server
add address-pool=dhcp_pool0 interface=vrrp10 name=dhcp1
add address-pool=dhcp_pool1 interface=vrrp20 name=dhcp2
add address-pool=dhcp_pool2 interface=vrrp30 name=dhcp3
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether6
/interface bridge vlan
add bridge=bridge1 tagged=bridge1,ether3 vlan-ids=10
add bridge=bridge1 tagged=bridge1,ether3 vlan-ids=20
add bridge=bridge1 tagged=bridge1,ether3 vlan-ids=30
/ip address
add address=10.194.10.2/24 interface=VLAN10 network=10.194.10.0
add address=10.194.20.2/24 interface=VLAN20 network=10.194.20.0
add address=10.194.30.2/24 interface=VLAN30 network=10.194.30.0
add address=10.194.10.1 interface=vrrp10 network=10.194.10.1
add address=10.194.20.1 interface=vrrp20 network=10.194.20.1
add address=10.194.30.1 interface=vrrp30 network=10.194.30.1
/ip dhcp-client
add interface=ether1-WAN
/ip dhcp-server network
add address=10.194.10.0/24 dns-server=1.1.1.1 gateway=10.194.10.1
add address=10.194.20.0/24 dns-server=1.1.1.1 gateway=10.194.20.1
add address=10.194.30.0/24 dns-server=1.1.1.1 gateway=10.194.30.1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1-WAN
/system identity
set name=R-2
/system note
set show-at-login=no
/tool romon
set enabled=yes
Switch:
# 2024-10-11 10:09:41 by RouterOS 7.12.1
# software id =
#
/interface bridge
add name=bridge1 vlan-filtering=yes
/disk
set slot1 slot=slot1 type=hardware
set slot2 slot=slot2 type=hardware
set slot3 slot=slot3 type=hardware
set slot4 slot=slot4 type=hardware
set slot5 slot=slot5 type=hardware
set slot6 slot=slot6 type=hardware
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether6
/interface bridge vlan
add bridge=bridge1 tagged=ether2,ether3 untagged=ether1,ether4 vlan-ids=10
add bridge=bridge1 tagged=ether2,ether3 untagged=ether5 vlan-ids=20
add bridge=bridge1 tagged=ether2,ether3 untagged=ether6 vlan-ids=30
/ip dhcp-client
# DHCP client can not run on slave or passthrough interface!
add interface=ether1
/system identity
set name=Switch
/system note
set show-at-login=no
/tool romon
set enabled=yes
I have two problems. First one, it appears that R1 and R2 don’t exchange any VRRP messages, there are both on the RM state
Second, the VPCs can’t reach the DHCP servers.
So, there must be something wrong with my setup I can’t see, or something I am overlooking.
Could you please help me figure it out? Thanks