Community discussions

MikroTik App
 
mikrotiker2916
just joined
Topic Author
Posts: 10
Joined: Sat Jun 25, 2016 2:55 pm

3560 and Mikrotik RB2011-RM vlans not working

Sat Jun 25, 2016 4:17 pm

Hi, I am a newbie and trying to get a 3560 cisco switch connected to a rb2011-rm router.  I have created a couple of vlans on the switch, made gig0/6 the trunk connected to ether5 on the MT-rm2011.  I have removed ether5 as a slave on the MT and created a vlan trunk to carry both vlans.  My PC cannot get an IP on both the vlans when connected to the cisco switch.  I created a bridge (bridge-trunk) and created the vlan interfaces for 100 and 200.  Please help on what is wrong on this setup.  Attached both configs from the MT and the cisco switch.  Thank you for your help.

----------------------
cisco config:

interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
 switchport access vlan 100
 switchport mode access
!
interface GigabitEthernet0/3
 switchport access vlan 100
 switchport mode access
!
interface GigabitEthernet0/4
 switchport access vlan 200
 switchport mode access
!
interface GigabitEthernet0/5
 switchport access vlan 200
 switchport mode access
!         
interface GigabitEthernet0/6
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 100,200
!
interface GigabitEthernet0/7
!
interface GigabitEthernet0/8
!
interface GigabitEthernet0/9
!
interface GigabitEthernet0/10
!
interface Vlan1
 ip address 192.168.10.200 255.255.255.0
!
interface Vlan100
 no ip address
!
interface Vlan200
 no ip address
!
ip default-gateway 192.168.10.1


----------------------
MT config:

[admin@MikroTik - RM2011] > /export compact
# jun/25/2016 06:48:43 by RouterOS 6.35.4
# software id = E5ED-QXG8
#
/interface bridge
add admin-mac=4C:5E:0C:77:B6:25 auto-mac=no comment=defconf name=bridge
add name=bridge-trunk
/interface ethernet
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether3 ] master-port=ether2-master
set [ find default-name=ether4 ] master-port=ether2-master
set [ find default-name=ether6 ] name=ether6-master
set [ find default-name=ether7 ] master-port=ether6-master
set [ find default-name=ether8 ] master-port=ether6-master
set [ find default-name=ether9 ] master-port=ether6-master
set [ find default-name=ether10 ] master-port=ether6-master
/ip neighbor discovery
set ether1 discover=no
set bridge comment=defconf
/interface vlan
add interface=bridge-trunk name=vlan-100 vlan-id=100
add interface=bridge-trunk name=vlan-200 vlan-id=200
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.10.20-192.168.10.254
add name=dhcp_pool1 ranges=192.168.100.2-192.168.100.254
add name=dhcp_pool2 ranges=192.168.200.2-192.168.200.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
add address-pool=dhcp_pool1 disabled=no interface=vlan-100 name=dhcp1
add address-pool=dhcp_pool2 disabled=no interface=vlan-200 name=dhcp2
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=bridge comment=defconf interface=ether6-master
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge-trunk interface=ether5
/ip address
add address=192.168.10.1/24 comment=defconf interface=ether2-master network=192.168.10.0
add address=192.168.100.1/24 interface=vlan-100 network=192.168.100.0
add address=192.168.200.1/24 interface=vlan-200 network=192.168.200.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.10.0/24 comment=defconf gateway=192.168.10.1
add address=192.168.100.0/24 gateway=192.168.100.1
add address=192.168.200.0/24 gateway=192.168.200.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.10.1 name=router
/ip firewall filter
add chain=input comment="defconf: accept ICMP" protocol=icmp
add chain=input comment="defconf: accept established,related" connection-state=established,related
add action=drop chain=input comment="defconf: drop all from WAN" in-interface=ether1
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add chain=forward comment="defconf: accept established,related" connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf:  drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=ether1
/system clock
set time-zone-name=America/Chicago
/system identity
set name="MikroTik - RM2011"
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=bridge
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=bridge
[admin@MikroTik - RM2011] >

-----------------------------
 
User avatar
Cha0s
Forum Guru
Forum Guru
Posts: 1142
Joined: Tue Oct 11, 2005 4:53 pm

Re: 3560 and Mikrotik RB2011-RM vlans not working

Sun Jun 26, 2016 11:20 am

I have removed ether5 as a slave on the MT and created a vlan trunk to carry both vlans.
In RouterOS you don't have the so-called 'trunk ports'.
When you add VLAN interfaces under a physical ethernet port, it works as a 'trunk port' (in cisco terminology).

Simply remove the ether5 interface from the bridge, and add the VLAN interfaces under ether5.

Then you configure IPs and your dhcp (assuming it will be running on mikrotik) for those vlan interfaces and it should work.

You don't need the bridge as far as I can tell, but you haven't explained what you are trying to do exactly so I may be wrong about that.
 
KBV
Frequent Visitor
Frequent Visitor
Posts: 79
Joined: Mon Nov 10, 2014 7:02 pm

Re: 3560 and Mikrotik RB2011-RM vlans not working

Sun Jun 26, 2016 4:00 pm

interface GigabitEthernet0/6
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 100,200
missing "switchport mode trunk" command
 
mikrotiker2916
just joined
Topic Author
Posts: 10
Joined: Sat Jun 25, 2016 2:55 pm

Re: 3560 and Mikrotik RB2011-RM vlans not working

Fri Jul 08, 2016 8:12 am

KBV, thanks.  That did it.  I was out of town and could not respond.  What happened was I had shut down power due to lightning and thunder and it lost the running config where the "trunk mode" statement was not saved.  So when the switch came back up, it did not have that config in the running config.  I made the change to running config and saved it to startup so that it won't happen again.

thanks and have a good one.
tiker2916

Who is online

Users browsing this forum: anav, JRnet, SkyNett7k and 127 guests