HI,
i look for configure some VLAN on Mikrotik router.
i found these document: http://mum.mikrotik.com/presentations/ID13/khomeini.pdf
These is my configuration:
now i try configuration on a HAP lite for test router OS version 6.35
eth1 → internet
eth2 → admin network (for safe access during test)
eth3 → access port for vlan64 (for unmanaged switch or computer)
eth4 → trunk port for vlan64 and vlan35 (for ubnt AP)
these the entire configuration:
/interface bridge
add name=admin_bridge
add name=trunk_bridge
add name=vlan64_bridge
/interface ethernet
set [ find default-name=ether1 ] name=ETH_1_GTW
set [ find default-name=ether2 ] name=ETH_2_ADMIN
set [ find default-name=ether3 ] name=ETH_3_LAN_ip64
set [ find default-name=ether4 ] name=ETH_4_AP_TRUNK
/interface vlan
add interface=trunk_bridge name=vlan35 vlan-id=35
add interface=trunk_bridge name=vlan64 vlan-id=64
/interface wireless security-profiles
add authentication-types=wpa-psk,wpa2-psk eap-methods=“”
management-protection=allowed mode=dynamic-keys name=adminProfile
supplicant-identity=“” wpa-pre-shared-key=AdminCircle88
wpa2-pre-shared-key=AdminCircle88
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=italy disabled=no
mode=ap-bridge name=WLAN_ADMIN rx-chains=0 security-profile=adminProfile
ssid=AdminRouter tx-chains=0 wps-mode=disabled
/ip dhcp-server
add disabled=no interface=vlan35 name=server35
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/ip pool
add name=admin_pool ranges=192.168.88.5-192.168.88.10
add name=64_pool ranges=192.168.64.200-192.168.64.250
add name=35_pool ranges=192.168.35.5-192.168.35.20
/ip dhcp-server
add address-pool=admin_pool disabled=no interface=admin_bridge name=
admin_server
DHCP server can not run on slave interface!
add address-pool=64_pool disabled=no interface=vlan64 name=server64
/interface bridge port
add bridge=admin_bridge interface=ETH_2_ADMIN
add bridge=admin_bridge interface=WLAN_ADMIN
add bridge=trunk_bridge interface=ETH_4_AP_TRUNK
add bridge=vlan64_bridge interface=ETH_3_LAN_ip64
add bridge=vlan64_bridge interface=vlan64
/ip address
add address=192.168.88.1/24 comment=admin_ip interface=ETH_2_ADMIN network=
192.168.88.0
add address=192.168.35.1/24 comment=35 interface=vlan35 network=192.168.35.0
add address=192.168.64.1/24 comment=64 interface=vlan64 network=192.168.64.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no
interface=ETH_1_GTW
/ip dhcp-server network
add address=192.168.35.0/24 gateway=192.168.35.1
add address=192.168.64.0/24 gateway=192.168.64.1
add address=192.168.88.0/24 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip firewall filter
add chain=input comment=" default configuration" protocol=icmp
add chain=input comment=" default configuration" connection-state=
established,related
add action=drop chain=input comment=" default configuration" in-interface=
ETH_1_GTW
add action=fasttrack-connection chain=forward comment=
" default configuration" connection-state=established,related
add chain=forward comment=" default configuration" connection-state=
established,related
add action=drop chain=forward comment=" default configuration"
connection-state=invalid
add action=drop chain=forward comment=" default configuration"
connection-nat-state=!dstnat connection-state=new in-interface=ETH_1_GTW
/ip firewall nat
add action=masquerade chain=srcnat comment=nat_eth_1 out-interface=ETH_1_GTW
/system clock
set time-zone-name=Europe/Rome
/system routerboard settings
set cpu-frequency=650MHz protected-routerboot=disabled
so i don’t understand why these configuration don’t work (no DHCP on VLAN), and why vlan interface is read like a slave interface.
Tanks ALL