VLAN for unmanaged switch

RouterOS Beginner Basics
1

Hi ALL :slight_smile:

I have a Mikrotik RBD53GR-5HacD2HnD router and some Mikrotik switch with VLANs set up.

WAN - ports ether1, ether2.
Bridge - ether3,ether4,ether5 ports.

On the bridge set and addressed interface VLANs: 200, 201, 202, 203, 204, 299.

When I connect to ports ether3,ether4,ether5 a managed switch and devices to this switch then VLANs work properly.

I have a specific situation that one of the switches must remain unmanaged, without VLANs. I want to connect it to ether3 port and for devices connected to it access to VLAN200.

Is there a simple way to do this?

Config:

# jan/02/1970 00:14:17 by RouterOS 6.49.10
# software id = QGMG-YU36
#
# model = RBD53GR-5HacD2HnD
# serial number = DC900E6067D8
/interface bridge
add fast-forward=no name=BR_LAN
/interface vlan
add interface=BR_LAN name=vlan200 vlan-id=200
add interface=BR_LAN name=vlan201 vlan-id=201
add interface=BR_LAN name=vlan202 vlan-id=202
add interface=BR_LAN name=vlan203 vlan-id=203
add interface=BR_LAN name=vlan299 vlan-id=299
/ip pool
add name=dhcp_pool0 ranges=10.200.0.2-10.200.0.254
add name=dhcp_pool1 ranges=10.201.0.2-10.201.0.254
add name=dhcp_pool2 ranges=10.202.0.2-10.202.0.254
add name=dhcp_pool3 ranges=10.203.0.2-10.203.0.254
add name=dhcp_pool4 ranges=10.2.99.2-10.2.99.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=vlan200 name=dhcp_vlan200
add address-pool=dhcp_pool1 disabled=no interface=vlan201 name=dhcp_vlan201
add address-pool=dhcp_pool2 disabled=no interface=vlan202 name=dhcp_vlan202
add address-pool=dhcp_pool3 disabled=no interface=vlan203 name=dhcp_vlan203
add address-pool=dhcp_pool4 disabled=no interface=vlan299 name=dhcp_vlan299
/interface bridge port
add bridge=BR_LAN hw=no interface=ether3
add bridge=BR_LAN hw=no interface=ether4
add bridge=BR_LAN hw=no interface=ether5
/ip address
add address=10.200.0.1/24 interface=vlan200 network=10.200.0.0
add address=10.201.0.1/24 interface=vlan201 network=10.201.0.0
add address=10.202.0.1/24 interface=vlan202 network=10.202.0.0
add address=10.203.0.1/24 interface=vlan203 network=10.203.0.0
add address=10.2.99.1/24 interface=vlan299 network=10.2.99.0
/ip dhcp-client
add disabled=no interface=ether1
/ip dhcp-server network
add address=10.2.99.0/24 gateway=10.2.99.1
add address=10.200.0.0/24 gateway=10.200.0.1
add address=10.201.0.0/24 gateway=10.201.0.1
add address=10.202.0.0/24 gateway=10.202.0.1
add address=10.203.0.0/24 gateway=10.203.0.1

Best Regards,
Pawel

2

You do not show full config ?
You need to define ether3 as access port on VLAN200. That’s all there is to it.

/interface bridge port
add bridge=BR_LAN interface=ether3 pvid=200 frame-types=admit-only-untagged-and-priority-tagged
/interface bridge vlan
add bridge=BR_LAN untagged=ether3 vlan-ids=200

See this excellent post for more info on VLANs.
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

3

Thank you for your reply.

This is the lab and its full configuration (default wifi config is skipped).

Do I need to enable VLAN filtering on the Bridge for the options to work?

4

Yes.
Take one port out of the bridge and use that one to access the device when you flip that switch using Winbox / MAC.
Because when you do, you will for a moment get kicked out when using other ports, maybe even completely locked out if some setting gets wrong, unless you isolated one port before.

5

Good advice holvoe… :wink:
Something like an off bridge access to config the router and emergency access anytime the bridge burps eh!!

Looking at the article I can now understand the question on bridge vlan-filtering setting.
No where in the article does it clearly state this requirement, at least from a brief skim.
I note that in all the configs, the script starts with vlan-filtering=NO, and this might leave the impression that that is the correct setting and an OP misses the very last line in each config that turns it ON.
Will alert pcunite. It should be noted in the main text.

In MT docs, they do highlight this… https://help.mikrotik.com/docs/display/ROS/Bridge+VLAN+Table
…
vlbfyes.jpg