If you want your router to function between the ISP and the ISP provided router then you very well may not be able to do that without some crazy NAT rules which would be similar to a man in the middle (hack) approach. One thing you can do is bridge all used ports together and monitor the traffic. Without a solid understanding of what your connecting to and how you really are going to have to guess and check things out. I cannot advise you on what settings to use to connect in an unknown way. You should have enough information in this thread to do just about anything with bridging or VLANS that you might need to do.
Would it work if I replace the dumb switch with the Mikrotik RB260GS?
This switch supports VLAN’s.
Regards, Robin
Yes the MikroTik switch will allow you to use VLAN’s at the switch. However I personally don’t use VLAN’s in my home even though all of the equipment I am using is VLAN capable and I run a business in my pole barn off the same network. I cannot think of any reason to use VLANS in a small network.
It’s not that I want to run VLAN’s in my home network, but it’s that I need to find out how to get the things I get from my provider where they need to go.
So if there is another way thats even easier I would take it.
So my provider gives me 3 VLAN’s. 1 for IPTV, 1 for VOIP en 1 for internet. The TV setup-boxes are from Motorola and are from the provider. The current router is from the provider and is a ZTE H220N. Which gives me now mixed TV and Internet on the 4 ports behind it and VOIP on it.
If I can figure out how they done that, than I could be able to do it to. From the Mikrotik I would push the VIOP vlan to for example port 2. IPTV and Internet I would like to push to the other ports if possible, but so that I have TV and Internet.
The reason why I want this is, that I want to be able to setup my own DNS and DHCP.
If this is possible without VLAN’s or just with one Microtik I would be happy.
So if you know a way to get this done I would like to hear it.
Regards,
Robin
I’m trying to solve the same problem as WijnantsRMJ. We probably have the same ISP 
My ISP delivers a pre-configured router and IPTV setup box. It is plug and play, however the router functionality that the ISP delivers is pretty limited and wireless is bad and therefore I want to replace it with a 2011UAS-2HnD.
The current working setup, but with the limited router from my ISP
As you see VLAN 4 + 6 are both delivered on all yellow switch ports of the ISP router. The IPTV box automatically connects on VLAN 4 and other computers use VLAN 6, even when a unmanaged switch is used.
I want to accomplish the same with the 2011UAS-2HnD. My starting point is the setup below I found on the internet, but in this setup each vlan is on a separate switch port of the 2011UAS-2HnD which is not practical in my situation cause it requires me to do extra cabling.
Is it possible to configure the 2011UAS-2HnD in such a way that is delivers the same port configuration/functionality as the current ISP router does?
/interface ethernet
set 0 arp=proxy-arp auto-negotiation=yes disabled=no full-duplex=yes l2mtu=1598 mtu=1500 name=ether1-gateway speed=1Gbps
set 1 arp=enabled auto-negotiation=yes disabled=no full-duplex=yes l2mtu=1598 mtu=1500 name=ether2 speed=1Gbps
/interface vlan
add arp=enabled disabled=no interface=ether1-gateway l2mtu=1594 mtu=1500 name=vlan1.6 use-service-tag=no vlan-id=6
add interface=ether1-gateway l2mtu=1594 name=vlan1.4 vlan-id=4
/ppp profile
set 0 change-tcp-mss=yes name=default only-one=default use-compression=default use-encryption=default use-mpls=default use-vj-compression=default
/interface pppoe-client
add add-default-route=yes allow=pap,mschap2 dial-on-demand=no disabled=no interface=vlan1.6 keepalive-timeout=20 max-mru=1480 max-mtu=1480 mrru=disabled name=pppoe password=kpn profile=default use-peer-dns=no user=XX-XX-XX-XX-XX-X@direct-adsl
/routing bgp instance
set default disabled=yes
/interface bridge
add name=bridge-local
add name=bridge-iptv
/interface bridge port
add bridge=bridge-local interface=ether2
add bridge=bridge-local interface=ether3
add bridge=bridge-local interface=ether4
add bridge=bridge-local interface=ether5
add bridge=bridge-local interface=wlan1
add bridge=bridge-iptv interface=vlan1.4
add bridge=bridge-iptv interface=ether6
/interface bridge settings
set use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=no
/interface ethernet switch port
set 0 vlan-header=leave-as-is vlan-mode=disabled
set 1 vlan-header=leave-as-is vlan-mode=disabled
set 2 vlan-header=leave-as-is vlan-mode=disabled
set 3 vlan-header=leave-as-is vlan-mode=disabled
set 4 vlan-header=leave-as-is vlan-mode=disabled
set 5 vlan-header=leave-as-is vlan-mode=disabled
set 6 vlan-header=leave-as-is vlan-mode=disabled
set 7 vlan-header=leave-as-is vlan-mode=disabled
set 8 vlan-header=leave-as-is vlan-mode=disabled
set 9 vlan-header=leave-as-is vlan-mode=disabled
set 10 vlan-header=leave-as-is vlan-mode=disabled
set 11 vlan-header=leave-as-is vlan-mode=disabled
set 12 vlan-header=leave-as-is vlan-mode=disabled
/ip address
add address=192.168.2.250/24 disabled=no interface=bridge-local network=192.168.2.0
/ip dns
set allow-remote-requests=yes cache-max-ttl=1d cache-size=2048KiB max-udp-packet-size=4096 servers=8.8.8.8,8.8.4.4
/ip firewall filter
add action=accept chain=input disabled=no in-interface=pppoe protocol=icmp
add action=accept chain=input connection-state=related disabled=no
add action=accept chain=input connection-state=established disabled=no
add action=reject chain=input in-interface=pppoe protocol=tcp reject-with=icmp-port-unreachable
add action=reject chain=input in-interface=pppoe protocol=udp reject-with=icmp-port-unreachable
/ip firewall nat
add action=masquerade chain=srcnat disabled=no out-interface=pppoe src-address=192.168.0.0/16 to-addresses=0.0.0.0
/ip neighbor discovery
set sfp1 discover=no
set ether1-gateway discover=no
set ether2 discover=yes
set ether3 discover=yes
set ether4 discover=yes
set ether5 discover=yes
set wlan1 discover=no
set bridge-local discover=yes
set pppoe discover=no
set vlan1.6 discover=no
/ip pool
add name=thuisnetwerk ranges=192.168.2.40-192.168.2.150
/ip dhcp-server
add address-pool=thuisnetwerk authoritative=yes disabled=no interface=bridge-local lease-time=8h00m name=dhcp-thuis
/ip dhcp-server config
set store-leases-disk=15m
/ip dhcp-server network
add address=192.168.2.0/24 dns-server=192.168.2.250 domain=thuis.local gateway=192.168.2.250
/ip traffic-flow
set active-flow-timeout=30m cache-entries=4k enabled=no inactive-flow-timeout=15s interfaces=all
/ip upnp
set allow-disable-external-interface=no enabled=yes show-dummy-rule=no
/ip upnp interfaces
add disabled=no interface=bridge-local type=internal
add disabled=no interface=pppoe type=external
/lcd
set backlight-timeout=5m enabled=yes
/system clock
set time-zone-name=Europe/Amsterdam
no one that can awnser this question?
In your diagram you show a laptop connected via an unmanaged switch to the router. Is that traffic untagged?
The IPTV box could well be tagging traffic to VLAN4 but it is less obvious whether your internet traffic is tagged to VLAN 6 or whether the router takes untagged traffic and places it on VLAN6 to the ISP.
Im using the same provider here in the Netherlands - so i understand the question.
The request by the OP is to have internet and iptv traffic mixed incoming on the same physical ports but iptv traffic should be forwarded over WAN in VLAN4 - DHCP is done from the network rather then that it should be done on the router itself. The provider’s original router can do this - based on the MAC addresses of the iptv set-top boxes it tags this traffic with VLAN 4 and forwards it to the WAN.
The internet traffic should be handled by the local DHCP server and forwarded over VLAN 6 (PPPoE) on the WAN.
This is the case on the router delivered by the provider but I’m not sure if same can be done with RouterOS, but i hope that question is now a bit more clear.
If it is not possible then of course he should deploy managed switches to where he has the iptv set-top boxes and use vlans to get it working.
EDIT: Found that it is supported: http://wiki.mikrotik.com/wiki/Manual:CRS_examples#MAC_Based_VLAN, this link provides the info to configure it.