Community discussions

MikroTik App
 
Tesar
just joined
Topic Author
Posts: 7
Joined: Fri Aug 19, 2022 11:37 am

RB450 VLAN - access port not working

Fri Aug 19, 2022 12:03 pm

Hello there, I successfully running RB450 router with VLAN config. Ether4 port is a trunk port which is working fine (connected to CRS354). Now I wanted to use another port (ether3) on RB450 as access port to one of the VLANs. Unfortunately, i can't connect to the desired network through it.

/interface bridge
add name=br-WAN
add name=br-switch1

/interface bridge port
add bridge=br-WAN interface=ether1
add bridge=br-switch1 interface=ether2
add bridge=br-switch1 interface=ether3
add bridge=br-switch1 interface=ether4
add bridge=br-switch1 interface=ether5

/interface vlan
add interface=br-switch1 name=vlan-PUBLIC vlan-id=3
add interface=br-switch1 name=vlan-KS vlan-id=4

/interface ethernet switch
set switch1 switch-all-ports=no

/interface ethernet switch port
set ether2 vlan-mode=disabled
set ether3 default-vlan-id=3 vlan-header=always-strip vlan-mode=secure
set ether4 vlan-header=add-if-missing vlan-mode=secure
set ether5 vlan-mode=disabled
set switch1-cpu vlan-mode=secure

/interface ethernet switch vlan
add ports=ether3,ether4,switch1-cpu switch=switch1 vlan-id=3
add ports=ether4,switch1-cpu switch=switch1 vlan-id=4
 
erlinden
Forum Guru
Forum Guru
Posts: 1920
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: RB450 VLAN - access port not working

Fri Aug 19, 2022 1:00 pm

You should configure it as:
set switch1-cpu vlan-header=leave-as-is vlan-mode=secure
 
Tesar
just joined
Topic Author
Posts: 7
Joined: Fri Aug 19, 2022 11:37 am

Re: RB450 VLAN - access port not working

Fri Aug 19, 2022 2:12 pm

I have vlan-header=leave-as-is on switch1-cpu. It's the default value so not showing in my config export.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11439
Joined: Thu Mar 03, 2016 10:23 pm

Re: RB450 VLAN - access port not working

Fri Aug 19, 2022 2:19 pm

Configuration seems fine to me.

Did you try to cold-boot device after changing configuration of VLANs? I seem to remember rare cases where configuration did not apply properly after change in ROS and (oddly enough) did not apply at warm boot (reboot). Cold boot (power off, disconnect power for a few minutes, power on) did help.
 
Tesar
just joined
Topic Author
Posts: 7
Joined: Fri Aug 19, 2022 11:37 am

Re: RB450 VLAN - access port not working

Fri Aug 19, 2022 3:10 pm

Configuration seems fine to me.

Did you try to cold-boot device after changing configuration of VLANs? I seem to remember rare cases where configuration did not apply properly after change in ROS and (oddly enough) did not apply at warm boot (reboot). Cold boot (power off, disconnect power for a few minutes, power on) did help.
no luck
 
erlinden
Forum Guru
Forum Guru
Posts: 1920
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: RB450 VLAN - access port not working

Fri Aug 19, 2022 3:21 pm

What RouterOS version and firmware are you running?
 
Tesar
just joined
Topic Author
Posts: 7
Joined: Fri Aug 19, 2022 11:37 am

Re: RB450 VLAN - access port not working

Fri Aug 19, 2022 3:28 pm

What RouterOS version and firmware are you running?
both 7.4.1
 
erlinden
Forum Guru
Forum Guru
Posts: 1920
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: RB450 VLAN - access port not working

Fri Aug 19, 2022 3:43 pm

What exactly do you mean by "I can't connect to the desired network through it."?
Is this the complete export?
Why is there a second bridge (though not related)?
Can you also share the config of the CRS354?
 
User avatar
CZFan
Forum Guru
Forum Guru
Posts: 2098
Joined: Sun Oct 09, 2016 8:25 pm
Location: South Africa, Krugersdorp (Home town of Brad Binder)
Contact:

Re: RB450 VLAN - access port not working

Fri Aug 19, 2022 5:59 pm

Which model do you have, RB450G or RB450Gx4?

Two different chips and needs to be configured differently
 
Tesar
just joined
Topic Author
Posts: 7
Joined: Fri Aug 19, 2022 11:37 am

Re: RB450 VLAN - access port not working

Tue Aug 23, 2022 8:47 am

What exactly do you mean by "I can't connect to the desired network through it."?
Is this the complete export?
Why is there a second bridge (though not related)?
Can you also share the config of the CRS354?
There are DHCP servers + couple of virtual servers on each VLAN. Can't get the IP or connect to servers with static config on access port client.
Second bridge is not related, it's WAN interface on ether1 (which excluded from the switch group - /interface ethernet switch set switch1 switch-all-ports=no).
CRS354 running SWOS so can't export. But it's running fine (uplink from RB450 ether4, access and trunk ports working as expected).
Last edited by Tesar on Tue Aug 23, 2022 8:51 am, edited 1 time in total.
 
Tesar
just joined
Topic Author
Posts: 7
Joined: Fri Aug 19, 2022 11:37 am

Re: RB450 VLAN - access port not working

Tue Aug 23, 2022 8:51 am

Which model do you have, RB450G or RB450Gx4?

Two different chips and needs to be configured differently
RB450G with Atheros8316. Can you provide some hint regarding "needs to be configured differently"? I have another router with Atheros 8327 which running just fine. But can't find anywhere the required configuration differences.
 
Tesar
just joined
Topic Author
Posts: 7
Joined: Fri Aug 19, 2022 11:37 am

Re: RB450 VLAN - access port not working  [SOLVED]

Mon Aug 29, 2022 3:25 pm

You should configure it as:
set switch1-cpu vlan-header=leave-as-is vlan-mode=secure
So instead of:
/interface ethernet switch port
set switch1-cpu vlan-header=leave-as-is vlan-mode=secure
I used:
/interface ethernet switch port
set switch1-cpu vlan-header=add-if-missing vlan-mode=secure
Both trunk and access port are working now as expected.

Who is online

Users browsing this forum: Bolendox, LeoNaXe and 28 guests