Community discussions

MikroTik App
 
takyn
just joined
Topic Author
Posts: 5
Joined: Wed Feb 27, 2019 12:31 am

VLAN separation

Fri Jan 31, 2020 2:03 am

Hi, I'm trying to set up a VLANs. I have two: internal and mgmt. I need to disable communication between of them, but any settings I tried on the firewall did not work. Still ping between networks is working. Please, give me an advice.

Its RB2011 in v6.46
 /interface bridge
add fast-forward=no name=bridge1 vlan-filtering=yes
/interface vlan
add interface=bridge1 name=vlan_wire_internal_40 vlan-id=40
add interface=bridge1 name=vlan_wire_mgmt_10 vlan-id=10
/ip pool
add name=dhcp_pool0 ranges=10.0.10.2-10.0.10.254
add name=dhcp_pool3 ranges=10.0.40.2-10.0.40.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=vlan_wire_mgmt_10 name=dhcp_mgmt_10
add address-pool=dhcp_pool3 disabled=no interface=vlan_wire_internal_40 name=dhcp_internal_40
/interface bridge port
add bridge=bridge1 frame-types=admit-only-vlan-tagged interface=vlan_wire_mgmt_10 pvid=10
add bridge=bridge1 frame-types=admit-only-vlan-tagged interface=vlan_wire_internal_40 pvid=40
add bridge=bridge1 interface=ether10 pvid=10
add bridge=bridge1 interface=ether5 pvid=10
/interface bridge vlan
add bridge=bridge1 tagged=bridge1,vlan_wire_internal_40,ether5,ether10 vlan-ids=40
add bridge=bridge1 tagged=bridge1,vlan_wire_mgmt_10 untagged=ether5,ether10 vlan-ids=10
/ip address
add address=10.0.0.80/24 interface=ether1 network=10.0.0.0
add address=10.0.40.1/24 interface=vlan_wire_internal_40 network=10.0.40.0
add address=10.0.10.1/24 interface=vlan_wire_mgmt_10 network=10.0.10.0
/ip dhcp-client
add disabled=no interface=ether1
/ip dhcp-server network
add address=10.0.10.0/24 dns-server=8.8.8.8 gateway=10.0.10.1
add address=10.0.40.0/24 dns-server=8.8.8.8 gateway=10.0.40.1
 
User avatar
pcunite
Forum Guru
Forum Guru
Posts: 1345
Joined: Sat May 25, 2013 5:13 am
Location: USA

Re: VLAN separation  [SOLVED]

Fri Jan 31, 2020 5:56 am

Study the link in my signature until you can quote it from memory. Then ... you will have mastered VLAN separation.
 
takyn
just joined
Topic Author
Posts: 5
Joined: Wed Feb 27, 2019 12:31 am

Re: VLAN separation

Sun Feb 09, 2020 11:20 am

Good resources. Thas a pity this materials are not visible in official manual.

Who is online

Users browsing this forum: GoogleOther [Bot] and 40 guests