VLAN Setup

RouterOS General
1

Hi all

I have a setup with a Procurve 2910al and RB1200

The procurve has a few vlans, the RB is connected to Port4 on the procurve, which has a Tagged VLAN 101, with ip 10.176.1.1/28

The mt is connected to the procurve on port 8, I have configured a VLAN 101 interface on port8 and assigned IP 10.176.1.14/28

Should this not be enough to get access ? I cannot Ping any of the IP's from any of the units, anyone got an idea ?

admin@MikroTik] > /ip address print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK INTERFACE

0 10.100.50.1/24 10.100.50.0 ether10_vlan50
1 192.168.10.4/24 192.168.10.0 ether1
2 X 10.110.145.2/24 10.110.145.0 ether10_vlan154
3 10.100.70.1/24 10.100.70.0 ether10_vlan70
4 10.176.1.14/28 10.176.1.0 ether8vlan101
[admin@MikroTik] > /ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit

DST-ADDRESS PREF-SRC GATEWAY DISTANCE

0 A S 0.0.0.0/0 192.168.10.1 1
1 ADC 10.100.50.0/24 10.100.50.1 ether10_vlan50 0
2 ADC 10.100.70.0/24 10.100.70.1 ether10_vlan70 0
3 ADC 192.168.10.0/24 192.168.10.4 ether1 0
4 ADC 10.176.1.0/28 10.176.1.14 ether8vlan101 0
[admin@MikroTik] >

Please excuse my limited visio skills :slight_smile:

image001.png
image001.png554×310 11.2 KB

2

Can you post /export compact ?

mortenb 3
4

[admin@MikroTik] > /export compact

sep/18/2012 19:23:23 by RouterOS 5.20

software id = SIQR-JA9V

/interface ethernet
set 0 speed=1Gbps
/interface vlan
add interface=ether10 l2mtu=1596 name=ether10_vlan50 vlan-id=50
add disabled=yes interface=ether10 name=ether10_vlan154 vlan-id=154
add interface=ether10 l2mtu=1596 name=ether10_vlan70 vlan-id=70
add interface=ether8 l2mtu=1596 name=ether8vlan101 vlan-id=101
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
/ip pool
add name=dhcp_pool1 ranges=10.100.70.50-10.100.70.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=ether10_vlan70 name=dhcp1
relay=10.100.70.1
/queue simple
add limit-at=8M/8M max-limit=8M/8M name=VLAN_210_8Mbit
/ip address
add address=10.100.50.1/24 interface=ether10_vlan50
add address=192.168.10.4/24 interface=ether1
add address=10.110.145.2/24 disabled=yes interface=ether10_vlan154
add address=10.100.70.1/24 interface=ether10_vlan70
add address=10.176.1.14/28 interface=ether8vlan101
/ip dhcp-relay
add dhcp-server=192.168.10.10 disabled=no interface=ether10_vlan50 name=
relay_vlan50
add dhcp-server=192.168.10.10 interface=ether10_vlan154 name=relay_vlan154
/ip dhcp-server network
add address=10.100.70.0/24 gateway=10.100.70.1
/ip dns
set max-udp-packet-size=512 servers=192.168.10.9,192.168.10.10
/ip firewall address-list
add address=192.168.10.0 list=company-lan
/ip firewall filter
add chain=forward protocol=icmp
add action=reject chain=forward protocol=icmp reject-with=icmp-admin-prohibited
/ip neighbor discovery
set ether10_vlan50 disabled=yes
set ether10_vlan70 disabled=yes
set ether8vlan101 disabled=yes
/ip route
add distance=1 gateway=192.168.10.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
/queue interface
set ether10 queue=ethernet-default
set ether9 queue=ethernet-default
set ether7 queue=ethernet-default
set ether8 queue=ethernet-default
set ether6 queue=ethernet-default
set ether5 queue=ethernet-default
set ether4 queue=ethernet-default
set ether3 queue=ethernet-default
set ether2 queue=ethernet-default
set ether1 queue=ethernet-default
/system ntp client
set enabled=yes mode=unicast primary-ntp=192.168.10.10
[admin@MikroTik] >

5

Are you trying to ping from the router to the switch or from your computer connected to the router?

6

From the router to the switch, via the ether8vlan interface

7

Any one got a clue to why I cannot reach my VLAN’s between MT and HP ?


Morten

8

You need to set the state of the port to secure and add-if-missing in vlan-header.
So if it’s port 4 then this should probably be the setup:
/interface ethernet switch port
set 3 vlan-header=add-if-missing vlan-mode=secure

This is taken from RB750G, I guess it’s similar in your case.

9

Thank you, well it is kind of similar, I am running a rb1200 and would like to use the ports that are not part of the internal switch for VLAN routing. I cannot find these settings on the ports.

Some other settings I need to complete on these ports maybe ?

10

Did you try the config line I provided? There might be two other lines you need to add, will take a look when I open my computer, I don’t have it in my head. :wink:

11

Did you solve this?

12

No not at all, still struggeling with this part.

13

Resolved? I have some similar problem…