I'm administering the RB3011 on its 192.168.88.1 address via ether2; making changes using SSH, but using the webfig interface to view things for convenience. The RB3011 is a RouterBoard 3011UiAS on RouterOS 6.44.3. In my scenario, I want to add a VLAN with ID 10, which has a DHCP server on it serving addresses in the network range 192.168.10.0/24. The DHCP server listens (in theory) on my new VLAN interface 192.168.10.1 (called "vif", short for "VLAN interface"). Hosts should be able to get an IP address in this VLAN if they connect to the access port ether8. For my testing, I'm manually configuring the host (Linux) with the IP address 192.168.10.5, since it's not getting an address from DHCP. I'm trying to ping the 192.168.10.1 interface to verify connectivity. Simple, but not working. The way I'm working is writing my configuration in a text editor and applying the commands by pasting them into an SSH session after a full system reset (/system reset-configuration) each time to ensure a consistent base state.
Code: Select all
# Add a new VLAN interface called "vif" to the bridge. VLAN 10
/interface vlan
add interface=bridge name=vif vlan-id=10
# Put access port "ether8" into VLAN 10
/interface bridge port
set [ find interface=ether8 bridge=bridge] pvid=10
# Set bridge ether8 as untagged ingress/egress (access port mode)
/interface bridge vlan
add bridge=bridge untagged=ether8 vlan-ids=10
# Set up the IP configuration
/ip address add address=192.168.10.1/24 interface=vif comment="Internal Network" network=192.168.10.0
/ip pool add name=internal-dhcp ranges=192.168.10.2-192.168.10.254
/ip dhcp-server network add address=192.168.10.0/24 dns-server=192.168.10.1 domain=mydomain.local gateway=192.168.10.1 netmask=24
/ip dhcp-server
# Disable the default 192.168.88.0/24 DHCP server - I don't use this anyway
disable [ find name=defconf ]
# Create a new DHCP server on the new vif (VLAN 10) interface.
add address-pool=internal-dhcp disabled=no interface=vif name="Internal DHCP"
# This next line doesn't seem to do anything practical but is suggested here:
# https://wiki.mikrotik.com/wiki/Manual:Layer2_misconfiguration#VLAN_interface_on_a_slave_interface
# Whether I add this or not, interface "vif" and the bridge both show up as "non slave"
/interface vlan set vif interface=bridge
# Enable VLAN filtering.
/interface bridge
set [ find name=bridge ] vlan-filtering=yes
Kind regards,
Jon