Hello I have some problems routing Vlans to the Default gateway. I’ll explian it better.
I have a “one leg net setup”, so all the config is to be done in, ether1.
Ether1 has the Def Gw on untagged default vlan on the ip 192.168.0.250. Ether1 has the ip 192.168.0.238.
Ether1 has 2 subinterfaces, Vlan201 and Vlan202 with Ip’s 192.168.201.250 and 192.168.202.250.
A switch with a trunk with the defult vlan + Vlan 201/202 in Port1 is pluged onto ether1. Another port port2 with default vlan is pluged onto Wan router with Ip 192.168.0.250
Switch port 3/4 has vlan 201 (untagged) and port 5/6 has vlan 202 (untagged).
Swith Port 7/8 has the default vlan.
Devices on Switch port 3 can ping devices on switch port 4 and viceversa.
Devices on Switch port 5 can ping devices on switch port 6 and viceversa
Devices on Switch port 7 can ping devices on switch port 8 and viceversa
Devices on Switch port 3/4 can ping devices on switch port 5/6 and viceversa
Devices on Switch port 7/8 can ping Def Gw on 192.168.0.250 and reach wan.
Devices on Switch port 3-6 can ping Ether1 ip 192.168.0.238
Devices on Switch port 3-6 can’t ping Ether1 ip 192.168.0.250
Devices on Switch port 3-6 can’t ping devices on switch port 7/8 and viceversa
So, since we have comunication between Vlan’s I supose I made a routing mistake. I want to be able to reach wan from Vlans
I want to avoid NAT as posible since I want to know wich Ip is reaching what and avoid masquerading
Changing the Net Setup is not and option.
Can this be achived with MK devices?Thank you
Note: I also tested it without bridge and the same problem, Vlans don’t reach Wan.
MK export:
/interface bridge
add name=Puente
/interface vlan
add interface=ether1 name=vlan201 vlan-id=201
add interface=ether1 name=vlan202 vlan-id=202
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
/interface bridge port
add bridge=Puente interface=vlan201
add bridge=Puente interface=vlan202
add bridge=Puente interface=ether1
/interface list member
add interface=ether1 list=WAN
add interface=*F list=LAN
add list=LAN
/ip address
add address=192.168.201.250/24 interface=vlan201 network=192.168.201.0
add address=192.168.202.250/24 interface=vlan202 network=192.168.202.0
add address=192.168.0.238/24 interface=ether1 network=192.168.0.0
/ip dhcp-client
add disabled=yes interface=ether1
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.0.250 routing-table=main suppress-hw-offload=no