The ISP provides two IP addresses (by DHCP and PPPoE) on one WAN port

RouterOS General
1

Hi!
The provider requires that we give him two different mac-addresses through one WAN, and set up them VLAN connection via DHCP (vlan=942) and PPPoE (vlan=302)
How can we do it? I read about virtual interfaces, but they are not available on ARM architecture and as I understand, VRRP is not designed for this task.

At the moment I have set up a connection only via PPPoE, but I have encountered the problem that the network is missing on some devices. They get the network settings, but have no access to the Internet, the same problem is observed on the cable through the switch and on WI-FI. Clearing ARP/Lease/DNS Cache helps temporarily.
In addition, sometimes there are empty MACs in Lease. I tried to find the source of the flood, but to no avail.
Config:

# feb/16/2023 15:24:54 by RouterOS 6.48.6
# model = RBD53iG-5HacD2HnD

/interface bridge
add admin-mac=48:8F:5A:E4:D5:2E auto-mac=no comment=main_bridge name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
    country="united states" disabled=no distance=indoors frequency=auto \
    installation=indoor mode=ap-bridge ssid=home wireless-protocol=\
    802.11
set [ find default-name=wlan2 ] band=5ghz-n/ac channel-width=20/40/80mhz-Ceee \
    country="united states" disabled=no distance=indoors frequency=auto \
    installation=indoor mode=ap-bridge ssid=home wireless-protocol=\
    802.11
/interface ethernet
set [ find default-name=ether1 ] mac-address=00:00:5E:00:01:01 name=\
    wan_lionline
/interface vlan
add interface=wan_lionline name=vlan-li vlan-id=302
/interface pppoe-client
add add-default-route=yes disabled=no interface=vlan-li name=pppoe-out_li \
    use-peer-dns=yes user=user
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk group-key-update=1h \
    mode=dynamic-keys supplicant-identity=home
/ip pool
add name=dhcp ranges=192.168.0.10-192.168.0.200
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge lease-time=12h name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf interface=wlan2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=pppoe-out_li list=WAN
add interface=vlan-li list=WAN
add interface=wan_lionline list=WAN
/interface pptp-server server
set default-profile=default
/ip address
add address=192.168.0.1/24 comment=defconf interface=bridge network=\
    192.168.0.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
add add-default-route=no comment=defconf interface=wan_lionline use-peer-ntp=\
    no
/ip dhcp-server network
add address=192.168.0.0/24 comment=def_dhcp_server gateway=192.168.0.1 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.0.1 comment=defconf name=router.lan
/ip firewall filter
standart_rule

Router: hAP ac³
Switch: Tenda TEG1024G
empty_mac.jpg

2

I am no expert when it comes to funky providers LOL but wil take a stab..
/interface vlan
add interface=ether1 name=vlanPPP vlan-id=302
add interface=ether1 name=vlanDHCP vlan=id=942

ON the PPP Menu, select PPPOE client-
For interface select vlanPPP, ensure default route is selected
add in your username and password on dial out tab.

ON IP DHCP CLIENT Menu,
Select for interface=vlanDHCP
Select as well the checkbox for default route.


As for two mac addresses for one etherport, beyond my skills.
/interface list members
add interface=pppoe-out1 list=WAN
add interface=vlanDHCP list=WAN
add interface=ether1 list=WAN

3

Hi anav!
Thanks for the quick response!

I also find this configuration too confusing…

Correct me if I’m wrong, but in this case, would it be the same mac for both types of connections? My ISP requires me to have a different mac for these connections. He mentioned that they have to be bridged, and the second channel (in my case it’s DHCP) has to broadcast to the second port of the bridge, but I have no idea how that’s supposed to look and work. Unfortunately, I couldn’t find a solution on the forum or in the wiki.

Do you also have any idea what could be causing the connectivity problem on devices in the network? Could it be ISP related? We used to be connected to another one and there were no such problems. I took a different Mikrotik for the test, but the problems were similar. With tp-link, this situation is not observed :open_mouth:

4

Apparently there is a way to do want you want but its very complicated. The requirement for two separate mac addresses is the killer. Blows my simple config out of the water.

5

MAC addresses alone are not that big problem, it may look weird at first, but VRRP hack works.

6

The config below makes use of the fact that we do have one mac address already, and can use the mac address of ether1 for the easier DHCP setting.
Then we have to create the bridge so as to be able to assign a different mac address ( the bridge is just being used for that purpose) for the pppoe connection.
We do have to use another interfaces mac address on the router for the Bridge we are making for the PPPOE connection.
On bridge settings we make use of the admin mac option to add this mac address. You should also note we make use of default route in the IP DHCP settings. It may seem a bit counter-intuitive it being the easier interface or at least less complex, but the pppoe interface is actually easier because we can identify the gateway by the pppoe-name.

/interface bridge
add name=bridgeMAC admin-mac=port5macaddress auto-mac=no
/interface vlan
add interface=ether1 name=vlanDHCP vlan-id=942
add interface=ether1 name=vlanPPP vlan-id=302
/interface pppoe-client
add add-default-route=NO disabled=no interface=bridgeMAC name=pppoe-out1 user=test1
/ip dhcp-client
add add-default-route=YES interface=vlanDHCP
/interface bridge port
add bridge=bridgeMAC interface=vlanPPP
/interface list members
add interface=vlanDHCP list=WAN
add interface=pppoe-out1 list=WAN
/ip routes
add dst-address=0.0.0.0/0 gwy=pppoe-out1 table=main

It feels weird because we slotting in the PPPOE vlan between ( or viewed as connecting ) ether1 and the Bridge. Normally we connect ether1 to the PPPOE interface, and in this case the PPPOE interface is connected to the bridge.
We are stealing port5s mac address LOL. Since this is only for the ISPs viewing/needs, it wont affect any traffic on port 5 itself.

7

Interesting!
Unfortunately, I will only be able to try both options tomorrow, after which I will report the results