Community discussions

MikroTik App
 
kaydee
just joined
Topic Author
Posts: 10
Joined: Fri Apr 12, 2019 1:02 pm

How to implement VLAN and transparent on a single switch

Thu Jan 12, 2023 2:11 pm

Hello,
Below is my network diagram,
After CRS112 Transparent OLT is working Fine but can't seen to work the 2nd OLT as that olt can only take VLAN334 but I have tried everything but can't connect that OLT via VLAN

please Help
net.JPG
You do not have the required permissions to view the files attached to this post.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11593
Joined: Thu Mar 03, 2016 10:23 pm

Re: How to implement VLAN and transparent on a single switch

Thu Jan 12, 2023 3:51 pm

After CRS112 Transparent OLT is working Fine but can't seen to work the 2nd OLT as that olt can only take VLAN334 but I have tried everything but can't connect that OLT via VLAN
I hope those OLTs are not connected to same physical port of CRS112 (situation digram can be understood as if they are).

So what exactly is covered by "I have tried everything"? Please share config of CRS112 (textual export) so we can see the bigger picture and then we might get some idea of how to fix the config.
 
kaydee
just joined
Topic Author
Posts: 10
Joined: Fri Apr 12, 2019 1:02 pm

Re: How to implement VLAN and transparent on a single switch

Thu Jan 12, 2023 4:01 pm

I hope those OLTs are not connected to same physical port of CRS112 (situation digram can be understood as if they are).
Both OLTs are on different port
# jan/12/2023 19:28:32 by RouterOS 6.49

/interface ethernet
set [ find default-name=ether1 ] name=ether1-MGMNT
set [ find default-name=ether2 ] name=ether2-OLT1
set [ find default-name=ether3 ] name=ether3-OLT2
set [ find default-name=ether4 ] name=ether4-Input
set [ find default-name=ether5 ] name=ether5
set [ find default-name=ether6 ] name=ether6
set [ find default-name=ether8 ] poe-out=off
set [ find default-name=sfp9 ] name=sfp9
set [ find default-name=sfp10 ] name=sfp10
set [ find default-name=sfp12 ] auto-negotiation=no
/interface bridge
add name=VlanBridge vlan-filtering=yes
/interface vlan
add interface=ether3-OLT2 name=vlan334 vlan-id=334
/interface list
add name=WAN
add name=LAN
/interface bridge port
add bridge=VlanBridge interface=ether3-OLT2 pvid=334
add bridge=VlanBridge interface=ether2-OLT1
add bridge=VlanBridge interface=ether4-Input
/ip address
add address=104.148.144.6/27 interface=ether1-MGMNT network=104.148.144.0
add address=10.22.22.1/24 disabled=yes interface=VlanBridge network=\
    10.22.22.0
/ip dns
set servers=8.8.8.8
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
/ip route
add distance=1 gateway=104.148.144.1
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11593
Joined: Thu Mar 03, 2016 10:23 pm

Re: How to implement VLAN and transparent on a single switch

Thu Jan 12, 2023 4:12 pm

Don't use bridge VLAN filtering on CRS112 ... this switch can't offload such setup to hardware and you will end up with loading CPU. You should configure VLAN on switch chip. See these manual pages to see, how it should be done:

https://wiki.mikrotik.com/wiki/Manual:C ... s_switches
https://wiki.mikrotik.com/wiki/Manual:C ... s_examples

Conceptually you want to have ether3 tagged outside of switch and untagged inside the switch. Which is the other way around from what usually is (tagged inside device, untagged outside ... that's where PVID comes into play). I'm not sure if your problem can be solved by settings on ether3 port only, could be you'll have to set same VLAN ID on all of involved switch ports (from config posted I assume that's ether2, ether3 and ether4) ... with PVID set on untagged ports (ether2 and ether4) and keeping port ether3 tagged.
 
kaydee
just joined
Topic Author
Posts: 10
Joined: Fri Apr 12, 2019 1:02 pm

Re: How to implement VLAN and transparent on a single switch

Fri Jan 13, 2023 9:04 am

Conceptually you want to have ether3 tagged outside of switch and untagged inside the switch. Which is the other way around from what usually is (tagged inside device, untagged outside ... that's where PVID comes into play). I'm not sure if your problem can be solved by settings on ether3 port only, could be you'll have to set same VLAN ID on all of involved switch ports (from config posted I assume that's ether2, ether3 and ether4) ... with PVID set on untagged ports (ether2 and ether4) and keeping port ether3 tagged.
I am quite new in networking and routerOS, Can you please let me know How can I achieve that?
/interface ethernet
set [ find default-name=ether1 ] name=ether1-MGMNT
set [ find default-name=ether8 ] poe-out=off
set [ find default-name=sfp12 ] auto-negotiation=no
/interface bridge
add name=bridge1
/interface vlan
add interface=ether3 name=vlan334 vlan-id=334
/interface list
add name=WAN
add name=LAN
/interface bridge port
add bridge=bridge1 interface=vlan334
add bridge=bridge1 interface=ether2
/interface bridge vlan
add bridge=bridge1 tagged=vlan334 vlan-ids=334
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11593
Joined: Thu Mar 03, 2016 10:23 pm

Re: How to implement VLAN and transparent on a single switch

Fri Jan 13, 2023 2:31 pm

I'm sorry, I don't have any CRS1xx device so I can't write you exact recipe for what you need. Either some good soul with 1st hand experience on CRS1xx passing by might help you. Or you can dive in the ocean of networking with Mikrotik (experienced forum members will help you with this). Or you can hire a consultant to do it for you.

Who is online

Users browsing this forum: Semrush [Bot] and 86 guests