my plan is 1G with 3 Vlan
Vlan10 for internet
Vlan20 for IPTV
Vlan30 for VoIP
I replace Huawei HG8240T5 Gpon with LXT-010S-H from LEOX and I'm install it in to Mikrotik RB5009
from Mikrotik I setup Vlan10 and PPPoE for Internet and Its work and I got internet connection, but I couldn't figure out how to configure Vlan30 for VoIP
LXT-010S-H from LEOX and VoIP Vlan config
Last edited by qatar2022 on Sun Feb 18, 2024 5:22 am, edited 2 times in total.
Re: LXT-010S-H from LEOX and VoIP Vlan config
Could you give more details about your setup - which will be your trunk port and which your access ports? Also, why do you have so few firewall rules?
Re: LXT-010S-H from LEOX and VoIP Vlan config
this it
sfp gpon stick trunk port and grandstream ucm pbx on port 8
access ports bridge from port 1-7
sfp gpon stick trunk port and grandstream ucm pbx on port 8
access ports bridge from port 1-7
Re: LXT-010S-H from LEOX and VoIP Vlan config
If I understand correctly, ports 1-8 will be access ports and sfp port is trunk. So, you will add it to the bridge, after that you will assign pvid of 30 to the access ports, add a bridge VLAN entry for the trunk port and turn on VLAN filtering:
And I advise you to hide the pihole password from the export because it was visible
Code: Select all
/interface bridge port
add interface=sfp-WAN bridge=bridge frame-types=admit-only-vlan tagged
set [find interface=ether1-LAN1] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether2-LAN2] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether3-LAN3] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether4-LAN4] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether5-LAN5] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether6-LAN6] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether7-LAN7] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether8-LAN8] pvid=30 frame-types=admit-only-untagged-and-priority-tagged
/interface bridge vlan
add bridge=bridge tagged=sfp-WAN vlan-ids=30
/interface bridge set bridge vlan-filtering=yesRe: LXT-010S-H from LEOX and VoIP Vlan config
thank you broIf I understand correctly, ports 1-8 will be access ports and sfp port is trunk. So, you will add it to the bridge, after that you will assign pvid of 30 to the access ports, add a bridge VLAN entry for the trunk port and turn on VLAN filtering:
And I advise you to hide the pihole password from the export because it was visibleCode: Select all/interface bridge port add interface=sfp-WAN bridge=bridge frame-types=admit-only-vlan tagged set [find interface=ether1-LAN1] pvid=30 frame-types=admit-only-untagged-and-priority-tagged set [find interface=ether2-LAN2] pvid=30 frame-types=admit-only-untagged-and-priority-tagged set [find interface=ether3-LAN3] pvid=30 frame-types=admit-only-untagged-and-priority-tagged set [find interface=ether4-LAN4] pvid=30 frame-types=admit-only-untagged-and-priority-tagged set [find interface=ether5-LAN5] pvid=30 frame-types=admit-only-untagged-and-priority-tagged set [find interface=ether6-LAN6] pvid=30 frame-types=admit-only-untagged-and-priority-tagged set [find interface=ether7-LAN7] pvid=30 frame-types=admit-only-untagged-and-priority-tagged set [find interface=ether8-LAN8] pvid=30 frame-types=admit-only-untagged-and-priority-tagged /interface bridge vlan add bridge=bridge tagged=sfp-WAN vlan-ids=30 /interface bridge set bridge vlan-filtering=yes
I try it but it's not working and even I can't login to mikrotik anymore to I reset it to default setting and restore backup
Re: LXT-010S-H from LEOX and VoIP Vlan config
Okay, I saw a flaw in my plan - a management VLAN. The following configuration should do the trick:
Hopefully this time it'll work, if not, I will suggest VLAN from another menu - the Switch menu, and will help you with configuring it
Code: Select all
/interface bridge port
add bridge=bridge interface=sfp-WAN frame-types=admit-only-vlan-tagged
set [find interface=ether1-LAN1] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether2-LAN2] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether3-LAN3] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether4-LAN4] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether5-LAN5] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether6-LAN6] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether7-LAN7] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=ether8-LAN8] pvid=30,99 frame-types=admit-only-untagged-and-priority-tagged
/interface bridge vlan
add bridge=bridge tagged=sfp-WAN vlan-ids=30
add bridge=bridge tagged=bridge untagged=ether1-LAN1,ether2-LAN2,ether3-LAN3,ether4-LAN4,ether5-LAN5,ether6-LAN6,ether7-LAN7,ether8-LAN8 vlan-ids=99
/interface vlan
add interface=bridge name=MGMT vlan-id=99
/ip address
set [find interface=bridge] interface=MGMT
/interface bridge set bridge vlan-filtering=yesRe: LXT-010S-H from LEOX and VoIP Vlan config
I try it but it's not working and even I can't login to mikrotik anymore, so I do reset it to default setting and restore backup.
why i have to add sfp wan interface to bridge? I think this is why i can't login to MT
why i have to add sfp wan interface to bridge? I think this is why i can't login to MT
Re: LXT-010S-H from LEOX and VoIP Vlan config
Then I'll suggest a more easy approach: create a VLAN interface with vlan-id 30 and add it to the bridge which will consequently (hopefully) setup the desired VLAN
Code: Select all
/interace vlan add name=VLAN30 vlan-id=30 interface=sfp-WAN
/interface bridge port add bridge=bridge interface=VLAN30Who is online
Users browsing this forum: raiser, techcomtecnico and 14 guests