I just setup a new CRS112-8P-4S for my WISP. I've configured the switch for 3 different VLANs:
Public net - VLAN 9
Management net - VLAN 10
Old net - VLAN 1
My goal is to have all VLANs isolated from one another. I followed Example 2 (Trunk and Hybrid ports) in this guide and I think I got that working:
https://wiki.mikrotik.com/wiki/Manual:C ... d_ports.29
I'd like to have 2 IPs assigned to the switch, one on VLAN 10 and another on VLAN 1. I tried assigning those IPs to the bridge directly, but they don't respond. How do I configure IP addresses so that I can remote manage the switch over either/both VLANs?
Any help or advice is appreciated.
Thank you,
Here is my current config:
Code: Select all
# jun/30/2021 14:41:34 by RouterOS 6.48.3
# software id = PSC1-QAU1
# model = CRS112-8P-4S
/interface bridge
add admin-mac=2C:C8:1B:26:9B:4A auto-mac=no comment="Switch Bridge" name=bridge
/interface ethernet
set [ find default-name=ether1 ] comment="Management - VLAN 10"
set [ find default-name=ether2 ] comment="Public - VLAN 9"
set [ find default-name=ether3 ] comment=\
"Town AP - VLAN 9 Untag, VLAN 10 tag"
set [ find default-name=ether4 ] comment=\
"Creek AP - VLAN 9 Untag, VLAN 10 tag"
set [ find default-name=ether5 ] comment=\
"Road AP - VLAN 9 Untag, VLAN 10 tag"
set [ find default-name=ether6 ] comment="Old AP - VLAN 1"
set [ find default-name=ether7 ] comment="Old PTP Radio - VLAN 1"
/interface ethernet switch
set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports=ether1,ether2,ether3,ether4,ether5
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=sfp9
add bridge=bridge comment=defconf interface=sfp10
add bridge=bridge comment=defconf interface=sfp11
add bridge=bridge comment=defconf interface=sfp12
/interface ethernet switch egress-vlan-tag
add tagged-ports=ether3,ether4,ether5 vlan-id=10
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=9 ports=ether3
add customer-vid=0 new-customer-vid=9 ports=ether4
add customer-vid=0 new-customer-vid=9 ports=ether5
add customer-vid=0 new-customer-vid=10 ports=ether1
add customer-vid=0 new-customer-vid=9 ports=ether2
/interface ethernet switch vlan
add ports=ether2,ether3,ether4,ether5 vlan-id=9
add ports=ether1,ether3,ether4,ether5 vlan-id=10
/ip address
add address=172.30.0.30/29 comment="IP on VLAN 1 over Old PTP Radio" interface=bridge network=172.30.0.24
add address=172.31.0.110/16 comment="IP on VLAN 10 over Management Network" interface=bridge \
network=172.31.0.0
/ip dns
set servers=8.8.8.8,8.8.4.4
/ip route
add comment="Default route over Management Network" distance=1 gateway=172.31.0.1
add comment="Default route over Old PTP Radio" distance=2 gateway=172.30.0.25
/system clock
set time-zone-name=America/Los_Angeles
/system identity
set name="MikroTik"
/tool graphing interface
add
