Community discussions

MikroTik App
 
RedHatKiwi
just joined
Topic Author
Posts: 1
Joined: Fri Mar 17, 2023 10:51 am

Basic VLAN config

Fri Mar 17, 2023 11:48 am

Hello Mikrotik community,
I have been messing with RB4011iGS+ lately and upgraded RouterOS to the latest version. It seems that from that point on something in my config is a little off. No matter if I restore the config using backup file which worked untill recently.

The RB is connected to a trunk port on another switch which allows all communication to pass through. VLAN 100 is supposed to be used as both LAN and management. VLAN 20 has its own DHCP server on the network yet no device connected to eth 10 gets IP.

I'm used to working with Cisco-like CLIs so both the Winbox and the Mikrotik command line are somewhat confusing to me, as well as the approach with using bridges.

Is there something wrong with my configuration or is it more likely that the problem is elsewhere?



[admin@MT26] > export hide-sensitive
# jan/03/1970 20:14:38 by RouterOS 7.8rc3
# software id = 4LII-BEMD
#
# model = RB4011iGS+
# serial number = <hidden>

/interface bridge
add ingress-filtering=no name=bridge vlan-filtering=yes
/interface vlan
add interface=bridge name=vlan100 vlan-id=100

/interface list
add name=WAN
add name=LAN
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
set 1 name=serial1

/interface bridge port
add bridge=bridge ingress-filtering=no interface=ether1
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether2 pvid=100
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether3 pvid=100
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether4 pvid=100
add bridge=bridge ingress-filtering=no interface=ether5
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether6 pvid=40
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether7 pvid=100
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether8 pvid=100
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether9 pvid=100
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether10 pvid=20
add bridge=bridge ingress-filtering=no interface=sfp-sfpplus1

/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192

/interface bridge vlan
add bridge=bridge tagged=ether1,bridge untagged=ether2,ether3,ether4,ether7,ether8,ether9 vlan-ids=100
add bridge=bridge tagged=ether1 untagged=ether6 vlan-ids=40
add bridge=bridge tagged=ether1 untagged=ether10 vlan-ids=20

/interface list member
add interface=ether1 list=WAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=ether9 list=LAN
add interface=ether10 list=LAN
add interface=sfp-sfpplus1 list=LAN

/interface ovpn-server server
set auth=sha1,md5
/ip address
add address=10.198.69.26/21 interface=vlan100 network=10.198.64.0
/ip dns
set servers=8.8.8.8
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=10.198.64.1
/system identity
set name=MT26
/system ntp client servers
add address=<hidden>
add address=<hidden>
/system package update
set channel=testing
/system resource irq rps
set sfp-sfpplus1 disabled=no
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19099
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Basic VLAN config

Fri Mar 17, 2023 3:36 pm

Nothing is clear, network diagram needed!
Is RB4011 main router attached to internet and switch is behind the router
OR
is RB4011 simply a switch within a nework etc......

Who is online

Users browsing this forum: bkuyk1, erlinden, Majestic-12 [Bot], reinerotto and 41 guests