What setting is missing?

RouterOS Beginner Basics
1

I trying to connect my modem to the Mikrotik RB450G via VLAN id 10. It seems to have some problem. I am using everything default except a few settings stated below.

Firstly, under Interface I added a VLAN interface under the port of ether1 which connects to the modem. Then under the dhcp client, I add one client using the VLAN interface. It manage to get the public address and gateway. I also connect a wireless ap to ether2 which it is working perfectly giving me ip of range 192.168.88.2 - 192.168.88.254. But the only thing i still cannot get internet access. The routes are default.
What other setting do I miss? Do I need to do VLAN tagging under the switch interface or is bridging required?

Cheers,
Terence

2

A few points to add I want to use ether1 as a WAN port. And the modem will only gives the public address under the connection of VLAN id 10.

3

You need to add a masquerade rule for the vlan interface.

/ip firewall nat

add action=masquerade chain=srcnat disabled=no out-interface="your_vlan_interface"
4

Thanks a lot. It works!

But I got another question. For IPTV, it is also through the same modem and the vlan id is 20. But it seems weird, I could not get any ip from the DHCP client, and how do I do the NAT or any other settings if I want to connect IPTV device via ether4?

5

One more point to add. Should I put interface for Vlanid20 as ether 1 or Vlanid10?

6

More than likely ether1. Unless your provider is doing QinQ…

7

Yea ether1 is correct as i can see RX values but I could get the DHCP client to obtain IP. Is there a need to do anything to switch vlan setting? Because I only used the vlan interface settings.

8

Do you have your DHCP client on the correct interface?

9

It will be on the VLAN interface with the id 20 right?

10

Yea it should be. Does your host have a DHCP server on that vlan?

11

I am not too sure but what I know is tagging vlan id 10 is for internet and vlan id 20 is for IPTV. I wonder whether is I should do through the switch interface instead.

12

I did some research, they said something about IGMP spoofing, vendor-id and dhcp relay.