VLANs how to?

RouterOS Beginner Basics
1

Hi.
I have RB1200 and I want to use 1Gb/s switch to maximize throughoutput.
I have HP Proliant Server with NIC1 and NIC2.
I have Netgear NAS with NIC1 and NIC2.
I plan to create VLANS:
VLAN 2 - storage - HP Proliant server NIC2 + Netgear NAS NIC2 (ethernet4 + ethernet5)
VLAN 3 - internet ethernet10 (may be I will add some ports to VLAN3 later…)
VLAN 4 - LAN storage - HP Proliant server NIC1 + Netgear NAS NIC1 (will add VLAN 5) (ethernet1 + ethernet2)
VLAN 5 - Management - HP Proliant server NIC1 (iLO. NIC1 = shared port) + Netgear NAS NIC1 (will add VLAN 5) (ethernet1 + ethernet2)
So… I hane ethernet1 and ethernet2 in the VLAN4 and VLAN5 at one time.
Ho to create “right” config?

2

Sorry. Forgot. MikroTik will be as firewall and router between management, storage and LAN networks…

3

Try to use this link: http://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features#Vlan_Table

Try to make new config:
Port ether1 = tagged (VLAN4 - lan, VLAN5 - management) trunk
Port ether2 = untagged (VLAN5 -management) access
Config from mikrotik:
/interface ethernet switch port> print
# NAME SWITCH VLAN-MODE VLAN-HEADER
3 ether2 switch1 secure always-strip
4 ether1 switch1 secure add-if-missing
/interface ethernet switch rule> print
0 switch=switch1 ports=ether2 vlan-header=not-present copy-to-cpu=no redirect-to-cpu=no mirror=no new-dst-ports=ether1 new-vlan-id=4
1 switch=switch1 ports=ether1 vlan-header=present vlan-id=5 copy-to-cpu=no redirect-to-cpu=no mirror=no new-dst-ports=ether2
/interface ethernet switch vlan> print
# SWITCH VLAN-ID PORTS
0 switch1 4 ether1
1 switch1 5 ether1
2 switch1 0 ether2
But how to add IP-addresses to VLAN5 and VLAN4?

Port ether 4 + Port 5 = bridge - It’s easy…

4

Read this to understand how Mikrotik handles VLANs
http://blog.butchevans.com/2010/02/to-tag-or-not-to-tag-that-is-the-question/

5

Thank’s. It’s working. I tested with Nortel BayStack 450-24T. All working with this config:

  1. create (interface) vlan4 = ether1
  2. create (interface) vlan5 = ether1
  3. create bridge-vlan4 - I think, not needed
  4. create bridge-vlan5 = vlan4 + ether2 (untagged access)
  5. Add IP addresses to vlan4 and vlan5

on baystack I created trunk port 1 and connected with ether1 (Mikrotik), then I create access port 4 in vlan4 and access port 5 in vlan5. I try to ping from access port 5 devices at ether2 on mikrotik and it was working. Then I try to ping from access port 4 ip-address of vlan4 (mikrotik). Success again. Thank’s!