why vlan1 not connected to another vlan,
but at mikrotik can ping to all vlan,
what wrong with my konfigure??
please answer,
Not enough details. Post your topology and configuration.
konfiguration
just one router
mikrotik: interface vlan add name=vlan1 vlan-id=1 interface=lokal
mikrotik: interface vlan add name=vlan2 vlan-id=2 interface=lokal
192.168.0.1=> ip interface lokal on mikrotik
mikrotik: ip address add address=192.168.0.1/24 interface=vlan1
mikrotik: ip address add address=192.168.0.1/24 interface=vlan2
mikrotik: ip address add address=192.168.10.1/29 interface=vlan1
mikrotik: ip address add address=192.168.11.1/29 interface=vlan1
mikrotik: ip address add address=192.168.10.2/29 interface=vlan2
192.168.10.1/29 not ping to mikrotik, but from mikrotik can ping to 192.168.10.1
topologi.doc (1.11 MB)
mikrotik: ip address add address=192.168.0.1/24 interface=vlan1
mikrotik: ip address add address=192.168.0.1/24 interface=vlan2
mikrotik: ip address add address=192.168.10.1/29 interface=vlan1
mikrotik: ip address add address=192.168.11.1/29 interface=vlan1
mikrotik: ip address add address=192.168.10.2/29 interface=vlan2
What is all that? You can’t assign the same IP address (192.168.0.1/24) to both the VLAN 1 and 2 interfaces, and you can’t assign IP addresses in the same network (192.168.10.1/29 and 192.168.10.2/29) to the same VLAN interfaces. That simply is not how VLANs work. VLANs are like physical networks, and you wouldn’t be able to do that kind of IP scheme on a router with all physical interfaces either.
The router might let you configure that, but you can’t expect it to work.
please somebody help me,
You simply should not mix IP addresses like that. The IP address space on VLAN 1 should be different from VLAN 2. Your topology sheet has many errors in it.
Delete all IP addresses on the router. Leave the VLAN interfaces as they are.
Assign 192.168.0.1/30 to the interface ‘lokal’.
Assign 192.168.1.2/24 to the interface ‘public’ and add a route for ‘0.0.0.0/0’ with a gateway of 192.168.1.1 (assumed, not shown in your topology sheet).
Assign 192.168.11.1/29 to interface ‘vlan1’. All clients on that VLAN MUST have an IP address that starts with ‘192.168.11.’ and have a default gateway of 192.168.11.1, not 192.168.0.1 as your topology sheet indicates. The DNS server can be either.
Assign 192.168.10.1/29 to interface ‘vlan2’. All clients on that VLAN MUST have an IP address that starts with ‘192.168.10.’ and have a default gateway of 192.168.10.1, not 192.168.0.1 as your topology sheet indicates. The DNS server can be either.
Once you’ve done all that, if it’s still not working post the output of “/interface export”, “/ip address export”, “/ip route export” and “/ip firewall export”.
I began to understand the concept of VLAN, but why network stiil not work, I attach also export from konfiguration
Interface export.doc (478 KB)
Today I will not be near anything that can open Microsoft Word documents. Please post something that can be viewed just within the forum.
Therefore how to do the route on the VLAN, VLAN interfaces that can communicate with other interfaces???
Why are you adding all the client PC IP addresses to the router interfaces?
The router will automatically route between different subnets if they are local to itself. So if VLAN 1 is on 192.168.0.1/24 and VLAN 2 is on 192.168.1.1/24 you will be able to access either subnet from either subnet. If you don’t want this to happen then you need to define filter rules to prevent it from happening. If a route is no local to itself, then it will send it out of the default route unless you have a more specific route for the packet.
What is it that you are aiming to set up here? If you could describe that we would be able to give you better guidance.