Hi,
I have been trying to get VLANs working and have partially succeded, however I have found a pretty major shortcoming and I wanted to check whether it is my fault and I completely misunderstand how VLANs are implemented or whether there is a bug in ROS.
Consider the following configuration:
/interface vlan add arp=enabled comment="" disabled=no interface=ether1 mtu=1500 name=vlan1 use-service-tag=no vlan-id=42
/ip address add address=192.168.42.254/24 broadcast=192.168.42.255 comment="" disabled=no interface=vlan1 network=192.168.42.0
/ip address add address=192.168.11.254/24 broadcast=192.168.11.255 comment="" disabled=no interface=ether1 network=192.168.11.0
/ip pool add name=dhcp_pool1 ranges=192.168.11.1-192.168.11.100
/ip dhcp-server network add address=192.168.11.0/24 comment="" dns-server=192.168.11.254 gateway=192.168.11.254
/ip dhcp-server add address-pool=dhcp_pool1 authoritative=after-2sec-delay bootp-support=static disabled=no interface=ether2 lease-time=3d name=dhcp1
This works perfectly with any device on VLAN 42… until a DHCP server is added to ether1, at which point, any device on VLAN 42 making a DHCP request is served by the DHCP server on ether1 - that is any device on VLAN 42 which issues a DHCP request is served an address in the 192.168.11.0/24 network.
So it appears that vlan1 and ether1 are bridged. Clearly this is not a good thing.
Am I being stupid?