Community discussions

MikroTik App
 
actomobile
just joined
Topic Author
Posts: 4
Joined: Mon Sep 04, 2023 9:29 am

DHCP Relay VS Bridge

Tue Feb 04, 2025 6:20 pm

I have a network setup with multiple buildings, each with its own router connected using fiber cable to the main router. Each router has its own DHCP server. I want to change it so that there is only one DHCP server in the main router, with dynamic VLAN assignment from RADIUS server.
To get users obtain IP address from the main DHCP server I can either use DHCP relay or I can just bridge all the interfaces and VLANs.
Which method works best in this case?
Which one is more secure?
I think using bridge is much simpler, but maybe there's a catch?
Please advise me on this. Thanks.
Last edited by actomobile on Wed Feb 05, 2025 5:29 am, edited 2 times in total.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 13266
Joined: Thu Mar 03, 2016 10:23 pm

Re: DHCP Relay VS Bridge

Tue Feb 04, 2025 6:59 pm

If you can use one VLAN per building ... and bring them to main router, then this would give you most flexibility ... building routers would become switches (bridges).

With bridge there might be more traffic on the connection towards main router (broadcasts mainly) then with routed traffic. If capacity of that/those connection(s) is not a limiting factor, then I'd go with bridge solution.
 
actomobile
just joined
Topic Author
Posts: 4
Joined: Mon Sep 04, 2023 9:29 am

Re: DHCP Relay VS Bridge

Wed Feb 05, 2025 5:37 am

If you can use one VLAN per building ... and bring them to main router, then this would give you most flexibility ... building routers would become switches (bridges).

With bridge there might be more traffic on the connection towards main router (broadcasts mainly) then with routed traffic. If capacity of that/those connection(s) is not a limiting factor, then I'd go with bridge solution.
I forgot to add that users will get dynamic VLAN assignemt from RADIUS server. So VLAN for user devices will be separated from access points, routers, etc.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 13266
Joined: Thu Mar 03, 2016 10:23 pm

Re: DHCP Relay VS Bridge

Wed Feb 05, 2025 10:30 am

I forgot to add that users will get dynamic VLAN assignemt from RADIUS server.

Which means that VLANs are in the mix already. IMO another point in favour of VLAN-enabled bridges (and against DHCP relay).