VLAN Setting Not Working

RouterOS General
1

Hello all,

I am a new user of Mikrotik and so far I am enjoying the features and ease of use given by Mikrotik.

My network configuration is as follow, using 2 CRS1xx.
Screen Shot 2020-02-09 at 16.41.11.png
CRS125 port 1 is for connection to Modem (WAN), while CRS125 port 2 is connecting to port 1 of CRS109.
On CRS125 port 2, I set as follow.

add interface=ether2 name=vlan_Display vlan-id=10
add interface=ether2 name=vlan_Sound vlan-id=30
add interface=ether2 name=vlan_Timer vlan-id=20

While on CRS109 I set as follow.

/interface ethernet switch
set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports=“ether1,ether
3,ether4,ether5,ether6,ether7,ether8”
/interface bridge port
add bridge=bridge_balkon hw=no interface=ether1
add bridge=bridge_balkon hw=no interface=ether2
add bridge=bridge_balkon hw=no interface=ether4 pvid=10
add bridge=bridge_balkon hw=no interface=ether5 pvid=10
add bridge=bridge_balkon hw=no interface=ether6 pvid=10
add bridge=bridge_balkon hw=no interface=ether7 pvid=10
add bridge=bridge_balkon hw=no interface=ether8 pvid=30
add bridge=bridge_balkon interface=sfp1
add bridge=bridge_balkon interface=wlan_Balkon
/interface bridge vlan
add bridge=bridge_balkon disabled=yes tagged=ether1 untagged=
ether4,ether5,ether6,ether7 vlan-ids=10
add bridge=bridge_balkon disabled=yes tagged=ether1 untagged=
ether8 vlan-ids=30
/interface ethernet switch egress-vlan-tag
add tagged-ports=ether1 vlan-id=10
add tagged-ports=ether1 vlan-id=20
add tagged-ports=ether1 vlan-id=30
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=10 ports=
ether3,ether4,ether5,ether6,ether7
add customer-vid=0 new-customer-vid=30 ports=ether8
/interface ethernet switch vlan
add ports=“ether1,ether3,ether4,ether5,ether6,et
her7” vlan-id=10
add ports=ether1,ether8 vlan-id=20
/interface list member
add interface=ether1 list=LAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=sfp1 list=WAN

/ip address
add address=192.168.1.4/24 interface=ether2 network=192.168.1.0
/ip dhcp-client
add dhcp-options=hostname,clientid interface=bridge_balkon
/ip dns
set servers=192.168.1.1
/ip route
add distance=1 gateway=192.168.1.1

What I try to achieve is as follow:

  1. VLAN on CRS109 port 3,4,5,6,7=pvid10 while port 8-pvid30 with port 1 as tagged port.
  2. Services I provided to these VLAN is only DHCP, set up on CRS125 port 2 on each VLANs.
  3. On CRS109, I cannot obtain DHCP address, the PC i connected to the ports always got 169.254.x.x address (self assigned), not the address I set for each VLAN.
  4. I want to apply Hotspot to these VLANs, as well as implementing WiFi VLAN, however for now I limit on the DHCP part which I have not been able to successfully apply.

Please advise on what I did wrong, as I have been trying to run through this setup time and time again, reset the configuration and create from scratch a couple of times but the result still the same, i.e. no address given to the client under CRS109.

Thank you in advance for all the help.

2

You’re mixing two ways of configuring VLANs. You should follow only one way and I suggest you to follow the way giving you wire-speed performance. When doing it this way, you should configure VLAN specific stuff in /interface ethernet switch config subtree and remove any VLAN setting from /interface bridge.

3

Thanks for your advise. I will try on my setup and will post here about the result.

One question. Should I remove the “pvid” section from /interface bridge port?

4

I wrote


and I meant every bit of it.

5

Thanks for the advise.
I look at my setting again today.
In fact, those settings of VLAN inside bridge is actually already inactive.
However, I tried to remove all settings of VLAN under /interface bridge but result still the same, i.e. client still dont get any IP address.
I tried to search at every bit of advise from google or youtube regarding VLAN on CRS1xx, which all seems to instruct similarly like this, but when I tried step by step dilligently, it always never worked. Yet, maybe I mossed some minute details here.

Thanks a lot for any piece of advise.

6

Hello,

I tried to reset my configuration and start everything from scratch, and it worked. Guess it was my previous testing that makes the configuration a mess. Thank you very much for the advise on making a clean VLAN configuration.

Now that I already get IP Address according to my VLAN setting, then I would like to also have Wireless VLAN linked with the VLAN setting of this router.

This is what I do on the CRS109.

/interface vlan
add interface=ether1 name=vlan_Main1 vlan-id=10
add interface=ether1 name=vlan_Main3 vlan-id=30
add interface=ether1 name=vlan_Main2 vlan-id=20
/interface wireless
add disabled=no keepalive-frames=disabled mac-address=xx:xx:xx:xx:xx:xx
master-interface=wlan1 multicast-buffering=disabled name=vlan_S1
security-profile=profile_S1 ssid=xyzxyz wds-cost-range=0
wds-default-cost=0 wps-mode=disabled
add disabled=no keepalive-frames=disabled mac-address=xx:xx:xx:xx:xx:xx
master-interface=wlan1 multicast-buffering=disabled name=vlan_T1
security-profile=profile_T1 ssid=xyzxyz wds-cost-range=0
wds-default-cost=0 wps-mode=disabled
add disabled=no keepalive-frames=disabled mac-address=xx:xx:xx:xx:xx:xx
master-interface=wlan1 multicast-buffering=disabled name=
wlan_D1 security-profile=profile_D1 ssid=xyzxyz
wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/interface bridge port
add bridge=bridge_S1 interface=vlan_S1
add bridge=bridge_S1 interface=vlan_Main3
add bridge=bridge_D1 interface=wlan_D1
add bridge=bridge_D1 interface=vlan_Main1
add bridge=bridge_T1 interface=vlan_T1
add bridge=bridge_T1 interface=vlan_Main2
/ip address
add address=192.168.10.2 interface=bridge_D1 network=192.168.10.2
add address=192.168.20.2 interface=bridge_T1 network=192.168.20.2
add address=192.168.30.2 interface=bridge_S1 network=192.168.30.2

What I basically do is adding a vlan (vlan_Main1, vlan_Main2, vlan_Main3) under ether1 which is the trunk port to the main router, each with VLAN ID accordingly.
Then, I create a Virtual Wireless under the main wlan1, each with the SSID I want to have.
Then I combine the vlan_Main with each of the SSID accordingly.
The Virtual SSID shows, but I cannot obtain an IP address.

Please advise.

Thank you.