VLANS for IOT & Guest WiFi

RouterOS General
1

Hello all,

New to mikrotik & VLANs. I’m wanting to setup VLANs now for two UNIFI wifi networks. I’ve got one setup so far only for troubleshooting, but I cannot get my test WiFi client to obtain an IP from my Mikrotik after I’ve assigned it to a VLAN network.

equipment I’m using:
RB5009UPr+S+
CRS310
CRS326
Unifi 24-port POE switch
three Unifi APs

I don’t know if I should be setting up the VLANS on my RB5009 or on the CRS3XX. I’ve currently set up the VLANs on my RB5009 using the bridge interface. I’ve attached my network diagram and a copy of my config exported with ‘hide-sensitive’. Would someone please look at my config and let me know what I’ve done wrong?

Any help is appreciated!
doc_config.rsc (10.6 KB)
docjay - network diagram.JPG

2

I got my wifi clients to grab an IP from the VLAN20 interface via DHCP, just needed to bounce the IOT_VLAN_20 interface.

..but the other question I have, should this config be on the CRS3XX switches or is this config fine on the RB5009?

Thanks

3

Must have … sorry .. must read: http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

4

My approach is all vlans once I introduce vlans.
So what is the flat network for… trusted vlan?
Just make it a vlan vlan5, for example, and then the bridge does just bridging.

Also suggest all smart devices get LANIP from trusted or managment vlan.
Trunk port from 5009 to all smart devices.

Its pretty simple…

5

BTW … why not use VLAN number as subnet number … just for clarification.
No need but why not?
VLAN30 = 10.10.30.0/24
VLAN20 = 10.10.20.0/24
etc.

6

I like that Polish Notation!!