So,
I’ve spent the last 7+ hours trying to figure this out. I’ve read the documentation, read a lot of posts here on the forum, searched: vlan on wan port mikrotik, vlan wan setup, watched dozens of youtube videos and so on all to no avail
I got a new ISP due to them providing fiber and I got the following information:
Static IP: 123.123.123.141 (123 so as not to reveal my IP)
Gateway: 123.123.123.1
Sub-Netmask: 255.255.255.0/24
DNS: 8.8.8.8, 8.8.4.4 (going to use CloudFlare instead)
The above things were easy enough to understand but they wrote that I need to VLAN tag the router (assuming they mean the WAN port) to VLAN 101 and after spending so much time I’m now giving opening a topic a shot.
Simply assign the vlan to lets say ether1 interface.
/interface list members
add interface=VlanWAN list=WAN
add ether1 list=WAN
No need to enter DHCP client as its all static so we use IP address instead. /ip address
add address=123.123.123.141 address interface=vlanWAN network=123.123.123.0
It seems to me @anav left out the command to actually create the vlan interface with the /interface vlan command. Then you will need to use whatever name you created for your WAN vlan interface (the example @anav provided used VlanWAN, my example used wan_107). You will need to use vlan-id=101 (not 107 as in my example). You will need to use the other commands @anav listed so your firewall will work, just use whatever vlan interface name you choose in place of “VlanWAN”. Ip address needs to be applied to the vlan interface, not ether1 (or whatever ethernet port your internet circuit is connected to).
example: (I am using v7.8, but I think this should work with v6.48.7 as well)
[demo@RB760iGS-1] > interface vlan print
Flags: R - RUNNING
Columns: NAME, MTU, ARP, VLAN-ID, INTERFACE
# NAME MTU ARP VLAN-ID INTERFACE
0 R vlan10 1500 enabled 10 BR-SW
1 R vlan241 1500 enabled 241 BR-SW
[demo@RB760iGS-1] > interface print
Flags: R - RUNNING; S - SLAVE
Columns: NAME, TYPE, ACTUAL-MTU, L2MTU, MAX-L2MTU, MAC-ADDRESS
# NAME TYPE ACTUAL-MTU L2MTU MAX-L2MTU MAC-ADDRESS
0 S eth4-BR-SW_U10_T241 ether 1500 1596 2026 DC:2C:6E:CA:FE:F4
1 R ether1-WAN ether 1500 1596 2026 DC:2C:6E:CA:FE:F1
2 S ether2-BR-SW-Base-U1 ether 1500 1596 2026 DC:2C:6E:CA:FE:F2
3 S ether3-BR-SW-U241 ether 1500 1596 2026 DC:2C:6E:CA:FE:F3
4 ether5-off_bridge_wrk ether 1500 1596 2026 DC:2C:6E:CA:FE:F5
5 sfp1 ether 1500 1596 2026 DC:2C:6E:CA:FE:F6
;;; defconf
6 R BR-SW bridge 1500 1596 DC:2C:6E:CA:FE:F2
7 R loopback bridge 1500 65535 3E:C6:77:F0:0D:13
8 R vlan10 vlan 1500 1592 DC:2C:6E:CA:FE:F2
9 R vlan241 vlan 1500 1592 DC:2C:6E:CA:FE:F2
[demo@RB760iGS-1] > /interface vlan
add comment disable edit enable export find print remove reset set
[demo@RB760iGS-1] > /interface vlan add
arp arp-timeout comment copy-from disabled interface loop-protect loop-protect-disable-time loop-protect-send-interval mtu name use-service-tag vlan-id
[demo@RB760iGS-1] > /interface vlan add interface=ether
ether1-WAN ether2-BR-SW-Base-U1 ether3-BR-SW-U241 ether5-off_bridge_wrk
[demo@RB760iGS-1] > /interface vlan add interface=ether1-WAN vlan-id=107 name=wan_107
[demo@RB760iGS-1] > interface print
Flags: R - RUNNING; S - SLAVE
Columns: NAME, TYPE, ACTUAL-MTU, L2MTU, MAX-L2MTU, MAC-ADDRESS
# NAME TYPE ACTUAL-MTU L2MTU MAX-L2MTU MAC-ADDRESS
0 S eth4-BR-SW_U10_T241 ether 1500 1596 2026 DC:2C:6E:CA:FE:F4
1 R ether1-WAN ether 1500 1596 2026 DC:2C:6E:CA:FE:F1
2 S ether2-BR-SW-Base-U1 ether 1500 1596 2026 DC:2C:6E:CA:FE:F2
3 S ether3-BR-SW-U241 ether 1500 1596 2026 DC:2C:6E:CA:FE:F3
4 ether5-off_bridge_wrk ether 1500 1596 2026 DC:2C:6E:CA:FE:F5
5 sfp1 ether 1500 1596 2026 DC:2C:6E:CA:FE:F6
;;; defconf
6 R BR-SW bridge 1500 1596 DC:2C:6E:CA:FE:F2
7 R loopback bridge 1500 65535 3E:C6:77:F0:0D:13
8 R vlan10 vlan 1500 1592 DC:2C:6E:CA:FE:F2
9 R vlan241 vlan 1500 1592 DC:2C:6E:CA:FE:F2
10 R wan_107 vlan 1500 1592 DC:2C:6E:CA:FE:F1
[demo@RB760iGS-1] > interface vlan print detail
Flags: X - disabled, R - running
0 R name="vlan10" mtu=1500 l2mtu=1592 mac-address=DC:2C:6E:CA:FE:F2 arp=enabled arp-timeout=auto loop-protect=default loop-protect-status=off loop-protect-send-interval=5s loop-protect-disable-time=5m vlan-id=10
interface=BR-SW use-service-tag=no
1 R name="vlan241" mtu=1500 l2mtu=1592 mac-address=DC:2C:6E:CA:FE:F2 arp=enabled arp-timeout=auto loop-protect=default loop-protect-status=off loop-protect-send-interval=5s loop-protect-disable-time=5m vlan-id=241
interface=BR-SW use-service-tag=no
2 R name="wan_107" mtu=1500 l2mtu=1592 mac-address=DC:2C:6E:CA:FE:F1 arp=enabled arp-timeout=auto loop-protect=default loop-protect-status=off loop-protect-send-interval=5s loop-protect-disable-time=5m vlan-id=107
interface=ether1-WAN use-service-tag=no
[demo@RB760iGS-1] >
If you need more help, you will need to provide more info, a network diagram and export. If you don’t know how, see New User Posting For Assistance