Community discussions

MikroTik App
 
User avatar
0012nish
newbie
Topic Author
Posts: 32
Joined: Mon Jun 27, 2016 1:15 pm
Location: Stockholm

VLAN routing in CRS317

Mon Feb 12, 2018 5:46 pm

Hello!
I have just got an CRS317 and tried to config it as a router to my office, the configuration looks like this:
# model = CRS317-1G-16S+

/interface bridge
add admin-mac=64:D1:54:EA:BB:71 auto-mac=no fast-forward=no name=bridge1 pvid=1 vlan-filtering=yes

/interface vlan
add interface=sfp-sfpplus8 name=VLAN2001 vlan-id=2001
add interface=sfp-sfpplus8 name=VLAN1919 vlan-id=1919
add interface=sfp-sfpplus8 name=VLAN2016 vlan-id=2016

/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot

/interface bridge port
add bridge=bridge1 interface=sfp-sfpplus14 pvid=2016
add bridge=bridge1 interface=sfp-sfpplus8
add bridge=bridge1 interface=sfp-sfpplus15 pvid=2001
add bridge=bridge1 interface=sfp-sfpplus16 pvid=1919

/interface bridge vlan
add bridge=bridge1 tagged=sfp-sfpplus8 untagged=sfp-sfpplus14 vlan-ids=2016
add bridge=bridge1 tagged=sfp-sfpplus8 untagged=sfp-sfpplus16 vlan-ids=1919
add bridge=bridge1 tagged=sfp-sfpplus8 untagged=sfp-sfpplus15 vlan-ids=2001


/ip address
add address=172.23.123.155/24 interface=2001 network=172.23.123.0

/ip route
add distance=1 gateway=172.23.123.254

/ip firewall filter
Problem:
When I connect my pc to port 15 so my computer can get an IP address from server which is on the same VLAN.
The server (ip address is 172.23.123.1) can ping Mikrotik via 172.23.123.155 and i can from my pc get ip from same server on the vlan2001, but I can't reach the Mikrotik from my pc, I can reach the MT from anywhere else in the VLAN 2001 but not when I'm connecting to the Vlan 2001 via MT?
Any Idea?
 
skuykend
Member Candidate
Member Candidate
Posts: 274
Joined: Tue Oct 06, 2015 7:28 am

Re: VLAN routing in CRS317

Mon Feb 12, 2018 7:14 pm

First thing I see is your parent interface for your vlans under /interface vlans should be the bridge1 not sfp-sfpplus8.
 
User avatar
0012nish
newbie
Topic Author
Posts: 32
Joined: Mon Jun 27, 2016 1:15 pm
Location: Stockholm

Re: VLAN routing in CRS317

Mon Feb 12, 2018 7:21 pm

I did try this but in this case the MT lose the connection with server.
 
skuykend
Member Candidate
Member Candidate
Posts: 274
Joined: Tue Oct 06, 2015 7:28 am

Re: VLAN routing in CRS317  [SOLVED]

Mon Feb 12, 2018 10:05 pm

Ahh, in addition to what I put earlier, you'll also need to add the bridge1 as a tagged member of vlan 2001 so it can talk to the cpu.
/interface bridge vlan
add bridge=bridge1 tagged=sfp-sfpplus8,bridge1 untagged=sfp-sfpplus15 vlan-ids=2001
 
User avatar
0012nish
newbie
Topic Author
Posts: 32
Joined: Mon Jun 27, 2016 1:15 pm
Location: Stockholm

Re: VLAN routing in CRS317

Tue Feb 13, 2018 12:04 pm

Thanks a lot !! this was the missing point :)

Who is online

Users browsing this forum: Amazon [Bot], Bing [Bot], Cr4shOnPc, GoogleOther [Bot], orionren and 65 guests