Dear Mikrotik!
Please disable any relevances to VLAN in RouterOS and in related documentation.
It has nothing to do to real VLAN logic.
With your VLAN logic, you make pain and many lost hours to people buying your products.
lol. Mikrotik RouterBoard has “host” logic in relation to VLANs, as it should be on router. VLAN for the router is simply yet another interface, like ethernet, tunnel, ppp etc. RouterBoards are routers at most, not switches. Word “Router” in “RouterOS” tells it clearly.
Also there is SwOS, switch chips in some RBs, CRS series. These are about switching.
Other vendors have the same different series for different purposes - routers, with VLAN “host” logic like Mikrotik have, and switches.
Clear.
Altough, I’m not alone, there are tons of discussions on misunderstanding the docs.
I have a RouterBOARD 750G r3.
Two WAN uplinks:
- ether1: PPPoE with fix public IP
- ether5: static public IP
I’ve set up failover with the 2 WANs
Local LAN is on ether2-master.
I would like to connect two tagged/trunk VLANs on ether2-master, assign IP addresses serve DHCP and provide internet connection to clients for all VLANs:
So:
ether1: pppoe WAN
ether2:
- vlan1 access: 192.168.0.254
- vlan3 trunk: 192.168.3.254, DHCP server
- vlan4 trunk: 192.168.4.254
ether5: static IP WAN
What is the recommended solution?
Create vlans 3 and 4 on ether2 via “interface/vlan/add”, setup dhcp, ip on it etc. Access vlan should not be created, because ether2 itself is already “untagged port”, so give it 192.168.0.254.
Again, it is not switch. VLANs here are like subinterfaces in Cisco.
I know it is not a switch.
I did exactly how you wrote, it was my first step of course.
The 3 and 4 VLANs do traffic with RB, but I cannot masquerade internet traffic through WANs.
Untagged VLAN 1 works perfectly, VLANs not.
Documentation refers to bridging and/or ingress/egress switch configuration to achieve this.
What L3 NAT (masq) has to do with L2 vlans, bridges,..? What you mean VLANs not working?
Mikrotik is very sketchy about the RB750Gr3 on this and the is no substantial info how it should work with the settings available on the CPU handling the vlan.
When I try yo set the vlan by CPU the mikrotok says NO and I loose my pppoe-out connection. The software vlan works although.
I mean I cannot masquerade through WAN connection for VLAN networks.
eg.: http://mikrotikroutersetup.blogspot.hu/p/mikrotik-router-dhcp.html
Post here your “/export compact hide-sensitive” and net diagram.
I’ve disabled VLAN and moved the devices to VLAN1 until my Cisco arrives.
I wont ruin the network again and I neither think any diagram is needed for this very simple situation to work.
Sounds very much like you haven’t added firewall rules allowing the vlans access to the internet
Sent from my Redmi Note 3 using Tapatalk