[Swich + router] configuration

RouterOS Beginner Basics
1

Hi there,

Is it posible inside a single device (hAP ac Lite) as below configuration?:
IMG_2149.JPG
ISP on the first interface;
webserver on the second (ISP provide a static IP by mac address here);
3,4 interface + wifi - other devices (dynamic IP).

It is important that the webserver and other devices will be isolated each other.

Thanks.

2

So you have one ISP that has provided you two WANIP addresses OR two different ISPs?
In either case all doable.

3

Yes. One ISP, two external IP. I need to give one IP to the webserver and one to the router (dhcp) so that the webserver and other devices ended up in isolation from each other.
I add a one bridge with ISP port and webserver port. Next: second bridge with all others ports. But how will the Internet get into the second bridge? And what about dhcp server and dhcp client?
Thanks!

4

All possible with the hapac, although I am pretty sure you could have done all with ONE IP, but there is nothing wrong with a dedicated IP either for a server and probably a better way to go, just more costly. How to set it up correctly is a good question.

Did the ISP give you a block of IPs… or just two fixed IPs?
what info did they exactly provide just use fake numbers etc…

5

Now I have done this:
bridge-1 = ISP port + web server port
bridge-2 = all other ports

bridge-2 ports connect among themselves, but how to connect it with the ISP?

6

What are your speed requirements? The easiest way to configure what you want is to use two bridges, but you device can only have one hardware-accelerated bridge. If your WAN is relatively slow I’d say go this way, with LAN bridge with hardware acceleration and WAN bridge in software.

Another way would be to add all five ports to a single bridge, and then isolate ports from each other using VLANs, but this is going to be more complicated.

7

that would be cool! How can I do it?

8

http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
Is the best reference to read on the topic and its not that difficult.
There are some gotchas that most trip over but we are here to help.