Hello, Tried to learn VLANs with Mikrotik, but, so far, all I got is to almost lock myself out. Fortunately, was able to access routers via Wireguard or WiFi, to unlock access. I am confused about VLAN filtering per port and per bridge. Please explain to me like I am stupid. Equipment: CRS304 sw…

Good advice with offbridge port. Is the IP address mandatory or Winbox mac connection is enough ? Read a lot in the meantime and observed that my plan is wrong, because I tried to copy tutorials not to apply them. Every tutorials work with three VLANs, but I need only two. There are two scenarios: …

Another thread to skim How to create most basic VLAN [image] costel: Question: Is there any good reason to separate Home WiFi from Management as all home devices need to talk to each other ? There is no way that someone plug a foreign equipment in one of the ethernet ports, like in a office. …

And the official docs https://web.archive.org/web/20220318113939/https://help.mikrotik.com/docs/display/ROS/Bridge#Bridge-VLANExample-TrunkandAccessPorts

Very good questions. I would put it another way. a. any IOT devices that phone home to a company cloud sight have no business being in the same vlan as home users. b. any guest users same same. c. If you have unpredictable spouse/children that click on anything under the sun, do you want y…

[image] costel: There are two scenarios: I need only two VLANs, a management one for all home devices, ethernet or WiFi, and a separate one for Guest devices. Keep the config simple like the actual working one and add only one VLAN for Guests, but I presume there will be serious problems regar…

Just in case, it is Rule #7: [image] The twelve Rules of Mikrotik Club Beginner Basics Preamble and disclaimer: The following is a set of Rules that are intended as advice useful to avoid the most common errors observed in configuration posted on this forum. It is my per…

First, thank you all for your support! After hours of reading, I learn something. The errors didn't came from the way VLANs were defined, but from "after configuration". Errors like: VLANs not being part of LAN interfaces list -> firewall kick me out; the same issue, offbridge port not being part…

@costel thanks for the update. I agree with leaving the firewall config until after you have vlans working. Then you can work on one issue at a time. Don't forget about any host based firewalls (like the windows firewall). You can turn off, or fine tune. For example see this https://community.s…

@Buckeye Seeing the questions I have and the mistakes I did, it is obvious that I don't fully understand how or why it works. For IoT, I was using an old mAP lite, so different WiFi, different subnet, that it easy at the beginning. Used a WAP for main WiFi. Then, was using CAPsMAN, adding hAP ax…

If it helps (morally), VLANs are difficult, and VLANs on RouterOS even more so, what you reported is the "normal" path that everyone has to go (painfully) through to get the hang of VLANs. No matter how many times you read and study the provided resources, you will make mistakes and (slowly) learn …

VLAN clarifications

RouterOS General

jaclaz September 9, 2025, 9:46pm 11

Just in case, it is Rule #7: