Hello,
Trying out in a GNS3. One PC connected to Mikrotik CHR on eth2. Eth1 on Mikrotik CHR connected to OpenBSD.
Mikrotik config:
/interface bridge
add name=bridge100 vlan-filtering=yes
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge100 interface=ether1
add bridge=bridge100 interface=ether2 pvid=100
/interface bridge vlan
add bridge=bridge100 tagged=ether1 untagged=ether2 vlan-ids=100
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
DHCP server is on OpenBSD. vlan0 created and dhcp server setup to provide IP addresses. vlan id set correctly.
Now, PC1 is unable to obtain IP address from dhcp server on OpenBSD. I see traffic comming, I see reply from dhcp server offering and address (confirmed with tcpdump), traffic arrives on eth1 on Mikrotik (I see packets with tool sniffer) but is not being passed down to eth2 for some reason.
Exactly same setup works, just replacing OpenBSD with another CHR, with interface vlan created and dhcp server on it. So, my question is, is there anything that two Mikrotiks do automatically that makes it work and pass traffic?
For some reason I don’t think its an error on OpenBSD side, but I believe it is a vlan tag issue for some reason, but just can’t get to it.
Thanks
100kpps
January 20, 2020, 10:30am
2
Traffic arriving on eth1:
[admin@MikroTik] /tool sniffer> packet print detail
0 time=2.135 num=1 direction=tx src-mac=00:50:79:66:68:00 dst-mac=FF:FF:FF:FF:FF:FF vlan=100
interface=ether1 src-address=0.0.0.0:68 (bootpc) dst-address=255.255.255.255:67 (bootps) protocol=ip
ip-protocol=udp size=410 cpu=0 fp=no ip-packet-size=392 ip-header-size=20 dscp=4 identification=0
fragment-offset=0 ttl=16
1 time=3.133 num=2 direction=tx src-mac=00:50:79:66:68:00 dst-mac=FF:FF:FF:FF:FF:FF vlan=100
interface=ether1 src-address=0.0.0.0:68 (bootpc) dst-address=255.255.255.255:67 (bootps) protocol=ip
ip-protocol=udp size=410 cpu=0 fp=no ip-packet-size=392 ip-header-size=20 dscp=4 identification=0
fragment-offset=0 ttl=16
2 time=3.135 num=3 direction=rx src-mac=00:0C:29:15:A7:3A dst-mac=00:50:79:66:68:00 interface=ether1
src-address=10.100.0.1:67 (bootps) dst-address=10.100.0.103:68 (bootpc) protocol=ip ip-protocol=udp
size=342 cpu=0 fp=no ip-packet-size=328 ip-header-size=20 dscp=4 identification=0 fragment-offset=0
ttl=16
3 time=6.126 num=4 direction=tx src-mac=00:50:79:66:68:00 dst-mac=FF:FF:FF:FF:FF:FF vlan=100
interface=ether1 src-address=0.0.0.0:68 (bootpc) dst-address=255.255.255.255:67 (bootps) protocol=ip
ip-protocol=udp size=410 cpu=0 fp=no ip-packet-size=392 ip-header-size=20 dscp=4 identification=0
fragment-offset=0 ttl=16
4 time=6.128 num=5 direction=rx src-mac=00:0C:29:15:A7:3A dst-mac=00:50:79:66:68:00 interface=ether1
src-address=10.100.0.1:67 (bootps) dst-address=10.100.0.103:68 (bootpc) protocol=ip ip-protocol=udp
size=342 cpu=0 fp=no ip-packet-size=328 ip-header-size=20 dscp=4 identification=0 fragment-offset=0
-- [Q quit|D dump|down]
But not arriving on ether2:
[admin@MikroTik] /tool sniffer> packet print detail
0 time=4.433 num=1 direction=rx src-mac=00:50:79:66:68:00 dst-mac=FF:FF:FF:FF:FF:FF interface=ether2
src-address=0.0.0.0:68 (bootpc) dst-address=255.255.255.255:67 (bootps) protocol=ip ip-protocol=udp
size=406 cpu=0 fp=no ip-packet-size=392 ip-header-size=20 dscp=4 identification=0 fragment-offset=0
ttl=16
1 time=5.43 num=2 direction=rx src-mac=00:50:79:66:68:00 dst-mac=FF:FF:FF:FF:FF:FF interface=ether2
src-address=0.0.0.0:68 (bootpc) dst-address=255.255.255.255:67 (bootps) protocol=ip ip-protocol=udp
size=406 cpu=0 fp=no ip-packet-size=392 ip-header-size=20 dscp=4 identification=0 fragment-offset=0
ttl=16
2 time=8.424 num=3 direction=rx src-mac=00:50:79:66:68:00 dst-mac=FF:FF:FF:FF:FF:FF interface=ether2
src-address=0.0.0.0:68 (bootpc) dst-address=255.255.255.255:67 (bootps) protocol=ip ip-protocol=udp
size=406 cpu=0 fp=no ip-packet-size=392 ip-header-size=20 dscp=4 identification=0 fragment-offset=0
ttl=16
Do I need an interface vlan in order to communicate with OpenBSD (trunk between these to)? I thought that was done by interface bridge vlan entries (ether1 tagged).