Hello
I just buy a routerboard RB2011UiAS-2HnD-IN end i would like to use it as follow
ether1 as trunk for Vlan 8, 113 ;
ether 2,3 access vlan 8 ;
ether 4,5 access for vlan 113 ;
ether 6 trunk for vlan 4,12 ;
ether7,8,9 access vlan 4 ;
ether10 access vlan 12;
I did configurate the router as switch using https://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features , disabling dhcp , firewall, etc because i don’t need routing perfomances. I can connect to the switch thru ether1 at ip 192.168.8.248 , vlan8 ; vlans on switch1 are working correctly ; however, when i connect the cable to ether6 i cannot access to the switch and nothing work anymore.
Any suggestion?
Thank you
Here my config:
apr/23/2017 10:44:21 by RouterOS 6.38.5
software id = HTJF-HZ12
/interface bridge
add admin-mac=6C:3B:6B:FE:30:76 auto-mac=no comment=defconf name=bridge
add name=bridge1
add name=bridge2
/interface ethernet
set [ find default-name=ether2 ] master-port=ether1
set [ find default-name=ether3 ] master-port=ether1
set [ find default-name=ether4 ] master-port=ether1
set [ find default-name=ether5 ] master-port=ether1
set [ find default-name=ether7 ] master-port=ether6
set [ find default-name=ether8 ] master-port=ether6
set [ find default-name=ether9 ] master-port=ether6
set [ find default-name=ether10 ] master-port=ether6
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce
disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=
MikroTik-FE307F wireless-protocol=802.11
/ip neighbor discovery
set ether1 discover=no
/interface vlan
add interface=ether1 name=vlan_admins vlan-id=8
/interface ethernet switch port
set 1 default-vlan-id=8 vlan-header=add-if-missing vlan-mode=secure
set 2 default-vlan-id=8 vlan-mode=secure
set 3 default-vlan-id=113 vlan-mode=secure
set 4 default-vlan-id=113 vlan-mode=secure
set 5 default-vlan-id=113 vlan-mode=secure
set 6 default-vlan-id=4 vlan-header=add-if-missing vlan-mode=secure
set 7 default-vlan-id=4 vlan-header=always-strip vlan-mode=secure
set 8 default-vlan-id=4 vlan-header=always-strip vlan-mode=secure
set 9 default-vlan-id=4 vlan-header=always-strip vlan-mode=secure
set 10 default-vlan-id=12 vlan-header=always-strip vlan-mode=secure
set 11 default-vlan-id=8 vlan-mode=secure
set 12 default-vlan-id=4 vlan-mode=secure
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp interface=bridge name=defconf
/interface bridge port
add bridge=bridge2 comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge1 interface=ether1
/interface ethernet switch vlan
add independent-learning=yes ports=ether1,ether3,ether4,ether5 switch=switch1
vlan-id=113
add independent-learning=yes ports=ether1,ether2,switch1-cpu switch=switch1
vlan-id=8
add ports=ether6,ether7,ether8,ether9 switch=switch2 vlan-id=4
add ports=ether6,ether10 switch=switch2 vlan-id=12
/ip address
add address=192.168.8.248/24 comment=defconf interface=vlan_admins network=
192.168.8.0
add address=192.168.8.248/24 interface=ether1 network=192.168.8.0
add address=192.168.8.248/24 interface=bridge1 network=192.168.8.0
add address=192.168.8.248/24 disabled=yes interface=bridge2 network=
192.168.8.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid interface=bridge
/ip dhcp-server network
add address=192.168.8.0/24 comment=defconf gateway=192.168.8.248 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.8.248 name=router
/ip firewall filter
add action=accept chain=input comment=“defconf: accept ICMP” disabled=yes
protocol=icmp
add action=accept chain=input comment=“defconf: accept established,related”
connection-state=established,related disabled=yes
add action=drop chain=input comment=“defconf: drop all from WAN” disabled=yes
in-interface=ether1
add action=fasttrack-connection chain=forward comment=“defconf: fasttrack”
connection-state=established,related disabled=yes
add action=accept chain=forward comment=“defconf: accept established,related”
connection-state=established,related disabled=yes
add action=drop chain=forward comment=“defconf: drop invalid”
connection-state=invalid disabled=yes
add action=drop chain=forward comment=
“defconf: drop all from WAN not DSTNATed” connection-nat-state=!dstnat
connection-state=new disabled=yes in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat comment=“defconf: masquerade” disabled=yes
out-interface=ether1
/ip route
add distance=1 gateway=192.168.8.254
/system clock
set time-zone-name=Europe/Rome
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=bridge
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=bridge