vlans between RB3011 and RB951

RouterOS General
1

Hello,
I have a problem with passing vlans from RB3011 to RB951Ui.
On 3011 there is:

/interface vlan
add interface=eth2-master loop-protect=off name=vlan11_Users vlan-id=11
add interface=eth2-master loop-protect=off name=vlan21_Wlan vlan-id=21

/ip address
add address=192.168.1.1/24 interface=br0 network=192.168.1.0
add address=192.168.11.1/24 interface=vlan11_Users network=192.168.11.0
add address=192.168.21.1/24 interface=vlan21_Wlan network=192.168.21.0

I don’t tag manamgment network (192.168.1.0). On 951 I am plannig incomming traffic on eth1 and the vlans should be handled by switch chip. The next thing is virtual ap. When I am setting vlan on 951 I am losing commnication with 3011.
To sum it up:

  • eth1, trunk
  • eth2, access, vlan11
  • eth3, access, vlan21
/interface ethernet switch vlan 
add vlan-id=11 ports=eth1,eth2
add vlan-id=21 ports=eth1,eth3

/interface ethernet switch port
set eth1 vlan-mode=secure vlan-header=leave-as-is
set eth2 vlan-mode=secure vlan-header=always-strip
set eth3 vlan-mode=secure vlan-header=always-strip

Help me please.

RB951G-2HnD, two networks, one internet connection
2

Resolved. If you want to apply config attached below, remember about resetting your device to defaults with no-defaults=yes option.
951sw.jpg

/interface {
	ethernet {
				set [ find default-name=ether1 ] name=eth1
				set [ find default-name=ether2 ] name=eth2 master-port=eth1
				set [ find default-name=ether3 ] name=eth3 master-port=eth1 
				set [ find default-name=ether4 ] name=eth4 master-port=eth1
				set [ find default-name=ether5 ] name=eth5 master-port=eth1
	
				switch {
						vlan {
								add ports=switch1-cpu,eth1,eth5 switch=switch1 vlan-id=0
								add ports=switch1-cpu,eth1,eth2,eth3 switch=switch1 vlan-id=11
								add ports=switch1-cpu,eth1,eth4 switch=switch1 vlan-id=21
						}

						port {
								set eth1 vlan-mode=secure vlan-header=leave-as-is default-vlan-id=0
								set eth2 vlan-mode=secure vlan-header=always-strip default-vlan-id=11
								set eth3 vlan-mode=secure vlan-header=always-strip default-vlan-id=11
								set eth4 vlan-mode=secure vlan-header=always-strip default-vlan-id=21
								set eth5 vlan-mode=secure vlan-header=always-strip default-vlan-id=0 
								set switch1-cpu vlan-mode=secure vlan-header=leave-as-is default-vlan-id=0
						}	
				}
	}
	
	vlan {
			add interface=eth1 vlan-id=11 name=vlan11_Users
			add interface=eth1 vlan-id=21 name=vlan21_Wlan
	}

	wireless {
			security-profiles {
								add name=profilUsers mode=dynamic-keys authentication-types=wpa2-psk wpa2-pre-shared-key=1234567890
								add name=profilGuests mode=dynamic-keys authentication-types=wpa2-psk wpa2-pre-shared-key=1234567890			
			}

			set wlan1 mode=ap-bridge ssid=Userzy security-profile=profilUsers disabled=no
			add master-interface=wlan1 mode=ap-bridge name=wlanGuests ssid=Goscie security-profile=profilGuests disabled=no
	}
	
	bridge {
				add name=brUsers
				port add bridge=brUsers interface=vlan11_Users
				port add bridge=brUsers interface=wlan1
				
				add name=brGuests
				port add bridge=brGuests interface=vlan21_Wlan
				port add bridge=brGuests interface=wlanGuests
	}
}


/ip dhcp-client add interface=eth1 disabled=no comment="mgmt"