I have an RB2011iLS-IN running v6.44.3 and am trying to set up some VLANs.
Here is what I would like the setup to be:
Port 4 is a VLAN trunk carrying packets for both VLAN-100 and VLAN-200.
Port 2 is an access port for VLAN-100.
Ports 3, 5, 6, 7, 8, 9, 10 are access ports for VLAN-200.
Port 1 is the WAN port / gateway for the VLAN-100 network.
In case it helps/matters - Port 4 connects to a switch that handles splitting out the VLANs on the other side of the trunk. That switch is already configured and working properly. (I was able to verify that using two of those switches - I just need it to work with the Routerboard instead).
Please let me know if I have left out anything important - this is definitely not my area of expertise.
So you WAN is not a real WAN? If it is it would not be on port 4 or port 2 as well just incoming and stop at the router.
In any case all your answers are here…
I mistyped the last line of my description - sorry about that.
It should have read that “Port 1 is the WAN port / gateway for the VLAN-200 network.”, not the VLAN-100 network.
In simpler terms, here is what is going on:
Normally the way this system is setup is that the RB2011 has the WAN on port 1, a connection to a switch on port 4, and some local devices on the other ports.
The switch then has a few devices connected to it. There is only one LAN (no VLANs) in this setup.
Now the customer wants to bring the WAN connection in from the switch side. My thought was to use VLANs to, in effect, tunnel the traffic from that connection on the switch down to the router and out a port on it. That would be the VLAN-100 network in my description earlier. Then everything else is on VLAN-200 and works just like it always did.
The links between the router/switch and to the WAN are long-distance RF links, and the position requirements of the radio necessitate bringing it in through the switch side.
Ahh Okay, I see what you are saying now.
Yes, create a vlanxxx for the ISP connection.
The switch will have to accept traffic from the ISP (modem?) without any tags, lets say on port1, tag the packets with vlanxxx and then send them out port 2 to the RB2011. THe RBwill see the packets coming in and return the traffic to the switch. The switch will have to remove the tags on egress back to the modem.
On the RB2011 you have to create the vlan, attach it to its port 1 interface, and thats about it I would think.
Standard IP Client for the wan connection on port 1.
Is it a fixed static WANIP?