troubleshooting with VLAN and port trunk

hey guys!

this is my first post. I’m needin some help with the configuration of a RB250GS, with the VLAN and port trunk settings.

I tried the solutions of another similar post, but nothing seems to work with it.

I’m trying to set an interfase (eth1) as a port trunk, to receive tagged packets from my ISP, and untag them to other ports, let say, eth4 and eth5 (each one to a diferent VLAN)

maybe the graphic will help to understand what i’m tryinf to do! thanks and sorry about the grammar errors..

Something like this?

/interface vlan add vlan-id=16 interface=ether1 name=eth1_vlan16 disabled=no
/interface vlan add vlan-id=17 interface=ether1 name=eth1_vlan17 disabled=no
/interface bridge add name=bridge_vlan16
/interface bridge add name=bridge_vlan17
/interface bridge port add bridge=bridge_vlan16 interface=eth1_vlan16
/interface bridge port add bridge=bridge_vlan16 interface=ether4
/interface bridge port add bridge=bridge_vlan17 interface=eth1_vlan17
/interface bridge port add bridge=bridge_vlan17 interface=ether5

Or did you want the VLANs to be tagged on ether4 and ether5? In which case you can just add two more “vlan” interfaces and use those in the respective VLAN bridges as the interface parameters instead of the ethernet interfaces. Like:

/interface vlan add vlan-id=16 interface=ether1 name=eth1_vlan16 disabled=no
/interface vlan add vlan-id=17 interface=ether1 name=eth1_vlan17 disabled=no
/interface vlan add vlan-id=16 interface=ether4 name=eth4_vlan16 disabled=no
/interface vlan add vlan-id=17 interface=ether5 name=eth5_vlan17 disabled=no
/interface bridge add name=bridge_vlan16
/interface bridge add name=bridge_vlan17
/interface bridge port add bridge=bridge_vlan16 interface=eth1_vlan16
/interface bridge port add bridge=bridge_vlan16 interface=eth4_vlan16
/interface bridge port add bridge=bridge_vlan17 interface=eth1_vlan17
/interface bridge port add bridge=bridge_vlan17 interface=eth5_vlan17

[/quote]

DISCLAIMER: These are off the top of my head (potentially full of typos or worse)

Try the following configuration:
swos.png

Be sure to upgrade to the latest version.
I couldn’t get anything to work until v1.2

With 1.2 it will work as you desire.

Hehe, 250G, so SwOS, not RouterOS–my bad! I think I read it as 450 or 750.

Embarrassed,
Aaron out.

If anyone made the SwOS add VLAN tags, please post your configuration. Thank you.

great it is works…

ver 1.3, already

but how can I re-access the rb250 under/ below the tagged example from vlan ID 17(ie from port 5)

what must be done? I did pptp and connected to top/ above router
(IP address local: 192.168.88.100, remote: 192.168.88.101) its same sub-IP of the rb250(192.168.88.1)
but can not access the rb250(192.168.88.1) these is will be for remote access monitoring purpose

thank you for your kindness

You could try to access the SwOS on another port with 192.168.88.1, including after re-power.

Did you make the RB250/GS add a VLAN tag ? Could you post your config please.

if direct cable pc <=> SWos(ie port3, un-used one), the rb250 can be accessed via 192.168.88.1 as by the manual said,
re-powering does not help and its configuration is the same as above direction

“Did you make the RB250/GS add a VLAN tag ?”… I do not understand these… please assist

It means when a eth frame comes in port x , when it gets out port y it should have a vlan tag added. X is “access” port and y us a “trunk” port.

I had tried easily connected vpn/ pptp via vlan 17(192.168.17.x ) to router(to its internal lan distribution 192.168.88.2) but can not remotely access the rb250(192.168.88.1)
how/ what can I adjust :unamused:, so to make work of remote access(pptp) the rb250 from different port/ tagged Vlan

Set Default VLAN ID for port x and VLAN Header = add if missing for port y. Set VLAN Mode = strict for both ports and add entry in VLANs table for VLAN ID with both ports. You might want to set VLAN Header = always strip for port x if you want VLAN tag removed from frames leaving access port.

Hello,

Your input is greatly appreciated.

I tried this multiple times, it did not work.

Please do it on a RB250GS and give me the exported config file.

Have you verified (with sniff tool) that the trunk port sends out frames that include the VLAN tag?

Thank you.

Dear kirshteins

may I ask for the detail screen capture like you had post on Tue Oct 19, 2010 9:14 am
sorry to ask you again to make remote able access for the rb250 as for the above case