Hi All - I am trying to learn VLANs on a Mikrotik RB1100AHx4 and am struggling to make it work. Firmware 6.45.6
Here is my desired config:
- Port 1 and Port 2 are WAN 1 and Wan 2
- Port 3-13 in bridge, if the device (like a phone) is set to VLAN 10, I want to to get a IP from "pool10VoIP" 192.168.10.x
- Port 3-13 in bridge, if the device (like a PC) is untagged, I want to to get a IP from "pool "dhcp" 10.1.10.x
In the config pasted below, I was experimenting with a trunk port to plug into my switch...but that is not the preferred config (I don't think?) I would like ports 3-13 to behave the same, do I need a trunk port?
Any help would be greatly appreciated!!
oct/17/2019 12:07:49 by RouterOS 6.45.6
software id = BFDZ-AU3M
model = RB1100x4
/interface bridge
add name=bridge1 vlan-filtering=yes
/interface vlan
add interface=bridge1 name=Datavlan1 vlan-id=1
add interface=bridge1 name=VoIPvlan10 vlan-id=10
/interface ethernet switch port
set 0 default-vlan-id=0
set 1 default-vlan-id=0
set 2 default-vlan-id=0
set 3 default-vlan-id=0
set 4 default-vlan-id=0
set 5 default-vlan-id=0
set 6 default-vlan-id=0
set 7 default-vlan-id=0
set 8 default-vlan-id=0
set 9 default-vlan-id=0
set 10 default-vlan-id=0
set 11 default-vlan-id=0
set 12 default-vlan-id=0
set 13 default-vlan-id=0
set 14 default-vlan-id=0
set 15 default-vlan-id=0
/interface list
add name=WAN
add name=LAN
add name=WAN2
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=10.1.10.245-10.1.10.250
add name=vpn ranges=192.168.89.2-192.168.89.255
add name=pool10VoIP ranges=192.168.10.100-192.168.10.200
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge1 name=dhcp1
add address-pool=pool10VoIP disabled=no interface=VoIPvlan10 name=
server10VoIP relay=192.168.10.1
/ppp profile
set *FFFFFFFE local-address=192.168.89.1 remote-address=vpn
/interface bridge port
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether6
add bridge=bridge1 interface=ether7
add bridge=bridge1 interface=ether8
add bridge=bridge1 interface=ether9
add bridge=bridge1 interface=ether10
add bridge=bridge1 interface=ether11
add bridge=bridge1 interface=ether12
add bridge=bridge1 interface=ether13
/interface bridge vlan
add bridge=bridge1 tagged=
ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13
untagged=ether3 vlan-ids=10
add bridge=bridge1 tagged=
ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13
vlan-ids=1
/interface l2tp-server server
set enabled=yes ipsec-secret=1qazXSW@~ use-ipsec=yes
/interface list member
add interface=ether1 list=WAN
add interface=bridge1 list=LAN
add interface=ether2 list=WAN2
/interface pptp-server server
set enabled=yes
/interface sstp-server server
set default-profile=default-encryption enabled=yes
/ip address
add address=10.1.10.1/24 interface=ether3 network=10.1.10.0
add address=64.64.64.1/24 interface=ether2 network=64.64.64.0
add address=192.168.10.1/24 interface=VoIPvlan10 network=192.168.10.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=10.1.10.0/24 dns-server=8.8.8.8 gateway=10.1.10.1 netmask=24
add address=192.168.10.0/24 dns-server=8.8.8.8 gateway=192.168.10.0 netmask=
24
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
add action=masquerade chain=srcnat comment="masq. vpn traffic" src-address=
192.168.89.0/24
/system clock
set time-zone-name=America/Los_Angeles