Hi
I have a question regarding vlans and mikrotik routers
I managed to create a trunk between a mikrotik and a cisco 2960 and it is working fine, but is there a way in which i can configure a few ports in access mode in the same vlan just like i can do on a cisco switch? Because until now i wasn’t able to.
For trunk:
I have created a vlan interface with a vlan id 3 and configured the port on the cisco as a trunk and allowed that vlan on trunk.
For access ports:
But what i want is to have 3 ports (ether 1, 2, 3) in the same vlan (vlan 3) and on ports (4,5,6) another vlan (vlan 4) and to connect 3 devices in the same subnet on vlan 3 and another 3 devices on ports (4,5,6) vlan 4. Is that possible?
From what i have seen i can add alot of vlans on a physical port, but i cannot add ports to vlans.
I have tried to add ports 1,2,3 to a bridge and also add vlan3 inside the bridge but unfortunately did not work 
If anyone has a solution for this please let me know
Thank you
What you did should have worked.
1,2,3 in bridge1
4,5,6 in bridge2
7 is the trunk port with vlan1,2,3
vlan1 in bridge1
vlan2 in bridge2
ports 123 on vlan1 and ports 456 on vlan2
I do similar stuff all the time.
Thx for the reply.
What i want to do:
I have 2 public addresses: 1 for the mikrotik router
1 for a vpn concentrator
1 is the ISP gw router
So i want to add: ether 1 ISP router
ether 2 vpn concentrator
And where do i configure the ip address of the mikrotik? On vlan1 interface or on ether 3 interface to comunicate with the other 2 devices?
I have tried to configure it on vlan1 interface but did not work like that, i wasn’t able to get a reply from the other 2 devices
I would have configured on the cisco switch a few access ports for all 3 devices, but i am running low on ports on that switch as it is, and the other switch is too far, that is why i have to connect them like this.
I want to add vlan 2 for the Lan connection 192.168.0.1/24. Will i have to configure this on vlan 2 interface or on ether 4?
I am a little confused with the mikrotik way of working. Since it is not working like a cisco router with subinterfaces nor like a layer 3 switch on which i can configure the ip address on the vlan that i use, or like a normal switch on which i set a few ports as access ports and i have no longer problems.
If the interface is a member of a bridge, the IP goes on the bridge. If the interface is just standalone, then the ip goes on the interface. Example. I have customers with MT firewalls and sometimes MT APs behind those firewalls. Sometimes, even Ubiquiti Bullets behind those APs.
I have a vpn link to my colocation for monitoring purposes. I route a management subnet from our colocation to the customer over the vpn interface. Usually a /30 or /29.
On the firewall, I create a bridge called “Management” and assign 10.0.0.1/29. The MT AP is plugged into the firewall with vlan10,20,30, and 50. 10,20,30 are wireless networks, 50 is the management vlan. So on the firewall, vlan50 interface gets bridged to the Management bridge. vlan10,20,30 get bridged to the associated bridge on the firewall. On the AP, vlan10,20,30 are bridged to the appropriate wlan interfaces and vlan50 is either assigned an IP (If there are no bullets that need to be routed to the management network), or added to a Management bridge (If there are bullets).
Its pretty logical once you understand how bridging/vlans work in linux/MT.
Thanks alot. I will give it a try and let you know how it went 