Use RouterOS as VLAN Switch

RouterOS General
1

I use a RouterBoard RB751U-2HnD with RouterOS 6.5.

What I want to accomplish is to have a Switch which leaves all vlan tags (marked by some AP) but adds vlan 1 tags if tags are missing.

On ether5 there is then a Server connected (not RouterOS different operating system) which has a vlan trunk for vlan id 1 and 2.

I have followed the documentation here: http://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features

Starting without any configuration, I set ether3, ether4, ether5 to have ether2 as a master port.

And then did the following to add the vlan tags

/interface ethernet switch port
set ether2 vlan-mode=secure vlan-header=add-if-missing default-vlan-id=1
set ether3 vlan-mode=secure vlan-header=add-if-missing default-vlan-id=1
set ether4 vlan-mode=secure vlan-header=add-if-missing default-vlan-id=1
set ether5 vlan-mode=secure vlan-header=add-if-missing default-vlan-id=1




/interface ethernet switch vlan
add ports=ether2,ether3,ether4,ether5 switch=switch1 vlan-id=1
add ports=ehter2,ether3,ether4,ether5 switch=switch1 vlan-id=2

Now for testing reason I connect my laptop directly to ether3. I successfully receive a IP address of the DHCP set to vlan1 on the server. However when I try to ping the server, no response. Also the IP address which I have assigned to the Switch (port ether2) is not accessible.

Am I mising anything here?

Thanks for your feedback,
Oliver

2

Can you post the IP addresses for the server, the client machine, and all addresses assigned on the MikroTik? Also, the route table from the MikroTik.

3

On the server following interfaces are declared:

vlan1: 172.20.128.1/24 DHCP 172.20.128.31-254
vlan2: 192.168.50.1/24 DHCP 192.168.50.31-254

On the RouterOS Switch following ip address is defined:
ether2-master: 172.20.128.11/24

Routes on RouterOS Switch:
172.20.128.0/24 gateway: ether2-master

Client machine receives following ip address when connecting to ether3:
172.20.128.31/24

I get network unrechable when pinging either 172.20.128.1 or 172.20.128.11 from client machine.

4

Sorry Oliver, I’m not seeing a definite answer on this one (admittedly, I haven’t worked much with VLANs though). Reviewing the manual though, I’m not sure why it isn’t working, unless I’m not fully understanding some of the options. I’m hoping someone else can chime in to help.