I have a RB411/Mikrotik 4.5 Level 3 and a managed switch 802.1q compatible. I connect my Mikrotik to a trunk port (native vlan, id=1 and a test vlan, id=200). Now, management address of routerboard is on ether1 interface, but i want it on a vlan1 interface; I tried to create vlans on routerboard, tried to create bridges but I failed. Please help - how to configure a management interface on a vlan?
(Second vlan, id=200 will carry user traffic).
/int bri add
/int bri port add bridge=bridge1 int=ether1
/int bri port add bridge=bridge1 int=wlan1
/int vl add vlan-id=1 interface=bridge1 dis=no
/int vl add vlan-id=200 interface=bridge1 dis=no
/ip addr add addr=a.b.c.d/e int=vlan1
/ip route add gateway=a.b.c.f
/int bri filt add mac-protocol=vlan vlan-id=1 out-interface=wlan1 action=drop
/int bri filt add mac-protocol=vlan vlan-id=1 in-interface=wlan1 action=drop
You don’t describe what kind of user traffic you have or how/where it’s going to be transported, so I’ve just assumed it’s layer 2.
If it’s routed, you may have to apply source-routing to separate user and management traffic and send them out the correct interfaces (not just throw everything to one default gw).