Hello,
I just bought a CRS125-24G-1s and can’t solve this problem.
A cable from ISP comes in eth1, but here is the catch: ISP provides internet using two vlans on that cable: vlan111 for WAN and vlan150 to connect my company’s computers from a nearby building into a LAN.
I tried to do the same thing I did with the old HP switch: tag both vlans on eth1 and untag the rest in their respective ports. But with Mikrotik I can’t figure out how to config it.
Currently only computers with public ip connected to eth2-eth9 ports work. Internal computers eth10-eth22 can’t communicate at all.
Although this switch has both public and private address, I cant reach it neigher from outside (WAN) nor from inside (LAN).
My intent here is that this Mikrotik would act as a switch & router (be a gateway for internal computers).
What am I doing wrong?
Here is the main config:
/interface bridge add name=bridgeLocal
/interface ethernet set [ find default-name=ether1 ] name=ether1-trunk
/interface vlan
add interface=ether1-trunk name=vlan111-public vlan-id=111
add interface=ether1-trunk name=vlan150-internal vlan-id=150
/interface list
add name=WAN
add name=LAN
/interface bridge port
add bridge=bridgeLocal interface=ether1-trunk
add bridge=bridgeLocal interface=ether2
add bridge=bridgeLocal interface=ether3
add bridge=bridgeLocal interface=ether4
add bridge=bridgeLocal interface=ether5
add bridge=bridgeLocal interface=ether6
add bridge=bridgeLocal interface=ether7
add bridge=bridgeLocal interface=ether8
add bridge=bridgeLocal interface=ether9
add bridge=bridgeLocal interface=ether10
add bridge=bridgeLocal interface=ether11
add bridge=bridgeLocal interface=ether12
add bridge=bridgeLocal interface=ether13
add bridge=bridgeLocal interface=ether14
add bridge=bridgeLocal interface=ether15
add bridge=bridgeLocal interface=ether16
add bridge=bridgeLocal interface=ether17
add bridge=bridgeLocal interface=ether18
add bridge=bridgeLocal interface=ether19
add bridge=bridgeLocal interface=ether20
add bridge=bridgeLocal interface=ether21
add bridge=bridgeLocal interface=ether22
add bridge=bridgeLocal interface=ether23
add bridge=bridgeLocal interface=ether24
add bridge=bridgeLocal interface=sfp1
/interface ethernet switch egress-vlan-tag
add tagged-ports=ether1-trunk,switch1-cpu vlan-id=111
add tagged-ports=ether1-trunk,switch1-cpu vlan-id=150
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=111 ports=ether2,ether3,ether4,ether5,ether6,ether7,ether8,ether9
add customer-vid=0 new-customer-vid=150 ports=ether10,ether11,ether12,ether13,ether14,ether15,ether16,ether17,ether18,ether19,ether20,ether21,ether22
/interface ethernet switch vlan
add ports=ether1-trunk,ether2,ether3,ether4,ether5,ether6,ether7,ether8,ether9,switch1-cpu vlan-id=111
add ports=ether1-trunk,ether10,ether11,ether12,ether13,ether14,ether15,ether16,ether17,ether18,ether19,ether20,ether21,ether22,switch1-cpu vlan-id=150
/interface list member
add interface=ether1-trunk list=WAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=ether9 list=LAN
add interface=ether10 list=LAN
add interface=ether11 list=LAN
add interface=ether12 list=LAN
add interface=ether13 list=LAN
add interface=ether14 list=LAN
add interface=ether15 list=LAN
add interface=ether16 list=LAN
add interface=ether17 list=LAN
add interface=ether18 list=LAN
add interface=ether19 list=LAN
add interface=ether20 list=LAN
add interface=ether21 list=LAN
add interface=ether22 list=LAN
add interface=ether23 list=LAN
add interface=ether24 list=LAN
add interface=sfp1 list=LAN
/ip address
add address=192.168.10.10/24 interface=vlan111-public network=192.168.10.0
add address=10.0.0.1/24 interface=vlan150-internal network=10.0.0.0
/ip route
add gateway=192.168.10.254
add dst-address=192.168.10.0/26 gateway=192.168.10.254