In the manual (http://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features#Port_Switching) there is shown only example of incoming one tagged traffic then leaving only unntaged!
I can’t figure out how to forward tagged vlans? For example (see attached image)
750switching_problem.jpg
Dont want to make bridging! Want use full speed switching! Thanks!
Please sombody?? Why there are no documentation! If it is fully managed switch then please solve this simple task!
this should work:
/interface ethernet switch port
set 0 vlan-mode=fallback
set 1 default-vlan-id=200 vlan-header=add-if-missing vlan-mode=secure
set 2 default-vlan-id=200 vlan-header=add-if-missing vlan-mode=secure
set 3 default-vlan-id=200 vlan-header=always-strip vlan-mode=secure
set 4 default-vlan-id=300 vlan-header=always-strip vlan-mode=secure
set 5 vlan-mode=secure
0 - eth1-wan
1 - ether2-master (tagged 200,300,400)
2 - ether3-slave (tagged 200,300,400)
3- ether4-slave (Access port - untagged 200)
4- ether5-slave (Access port - untagged 300)
5- switch-cpu
/interface ethernet switch vlan
add ports=switch1-cpu,ether2,ether3,ether4 switch=switch1 vlan-id=200
add ports=ether2,ether3,ether5 switch=switch1 vlan-id=300
add ports=ether2,ether3 switch=switch1 vlan-id=400
On second router:
/interface ethernet switch port
set 0 vlan-mode=fallback
set 1 default-vlan-id=200 vlan-header=add-if-missing vlan-mode=secure
set 2 vlan-mode=fallback
set 3 vlan-mode=fallback
set 4 vlan-mode=fallback
set 5 vlan-mode=secure
/interface ethernet switch vlan
add ports=switch1-cpu,ether2 switch=switch1 vlan-id=200
add ports=ether2 switch=switch1 vlan-id=300
add ports=ether2 switch=switch1 vlan-id=400
Sorry, but dont work this way!
As i understand if i want ACCESS port i make on PORT - AlwaysStrip? And thats all? Or there is some other trick?
I have one mistake in sheme!
So the problem as i see is Hybrid port! I need from router 1 to AP - where there is 4 SSID each with different VLAN, but managment network is UNTTAGED! So if i understand correct this is HYBRID port and this switch cant do it?
/interface ethernet switch port
set 0 vlan-mode=fallback
set 1 default-vlan-id=200 vlan-header=add-if-missing vlan-mode=secure
set 2 default-vlan-id=200 vlan-header=add-if-missing vlan-mode=secure
set 3 default-vlan-id=0 vlan-header=always-strip vlan-mode=secure
set 4 default-vlan-id=300 vlan-header=always-strip vlan-mode=secure
set 5 vlan-mode=secure
/interface ethernet switch vlan
add ports=switch1-cpu,ether4 switch=switch1 vlan-id=0
add ports=switch1-cpu,ether2,ether3,ether4 switch=switch1 vlan-id=200
add ports=ether2,ether3,ether5 switch=switch1 vlan-id=300
add ports=ether2,ether3,ether4 switch=switch1 vlan-id=400
0 - eth1-wan
1 - ether2-master (tagged 200,300,400)
2 - ether3-slave (tagged 200,300,400)
3- ether4-slave (Hybrid - native untagged (vlan0), tagged 200,400)
4- ether5-slave (Access port - untagged 300)
5- switch-cpu
This should work as Hybrid port (ether4) .. give it a try
I asked this question, because in one of MUM presentation (page 34) there is sad that on these switches cant make HYBRID ports, but i cant see it in documentation… so i hope someone make it clear!
link to presentation:
http://mum.mikrotik.com/presentations/IT14/starnowski.pdf
I tried the above setup (similar) and it works. I tried it with HP Procurve 1920 switches.
They all got the Management IPs via VLAN0 and VLAN200 and VLAN300 vas tagged and avaible in Procurve.
My setup:
Mikrotik eth4 (vlan0, vlan200,vlan300) → Procurve1 port 24 (PVID 1, tagged 200, tagged 200)
Then from Procurve1 port 23 (PVID1, tagged 200, tagged 300 - Hybridport) → Procurve2 port 24 (PVID1, tagged 200, tagged 300 -HybridPort)
Procurve1 - 1-12 → unttaged 200
Procurve1 - 13-23 - untagged 300
Procurve2 1 - PVID 1 (access port with native VLAN)
Procurve2 - 2-12 - unttaged 200
Procurve2 - 13-23 - untagged 300
Mikrotik DHCP:
DHCP- Managemnt → eth2-master
DHCP-200 - vlan200 (eth2-master)
DHCP-300 - vlan300 (eth2-master)
Interface group:
eth2-master (slaves - eth3-5)
ROS: 6.33 (6.30.4, 6.32.x)
Everthing works as it should (DHCP for specific VLAN respond to the right ports).
Why dont you try it for yourself.. If you have problem post export and update the picture with correct connections.
huntah - all work just fine! Thanks man!
Port you want make a HYBRID- for example port 2 with UNtagged VLAN ID 88, and Tagged VLAN 200 and VLAN 300
/interface ethernet switch port
set 2 default-vlan-id=88 vlan-header=always-strip vlan-mode=secure
/interface ethernet switch vlan
add independent-learning=no ports=ether2,switch1-cpu switch=switch1 vlan-id=88
add independent-learning=no ports=ether2 switch=switch1 vlan-id=200
add independent-learning=no ports=ether2 switch=switch1 vlan-id=300
750switching_problem.jpg
I have the same requirement. Unfortunately the solution described above, is not working for my RB 450G. Is anybody running a 450G with a solution like this?
Dirk
What exactly is not working? What ports are involved in your configuration? Is switch-all-ports options (which only works for a few boards, but including RB450G) is enabled?
The results do not depend on the switch-all-ports option. Currently I am using port 2 as master and ports 3-5 as slaves (switch-all-ports is enabled). After further analysis I come to the conclusion that the default-vlan-id setting is not working as expected. I have described the topic in detail in this post http://forum.mikrotik.com/t/vlan-issues-on-rb-450g/94318/1