Community discussions

MikroTik App
 
lbarnett
just joined
Topic Author
Posts: 2
Joined: Mon Mar 20, 2023 7:12 am

Inter VLAN routing

Mon Mar 20, 2023 7:32 am

I'm trying to get inter-VLAN routing working on my CRS309-1G-8S+.

I have 3 VLANs (43-45) configured at my main router and on the switch.

I then have a CSS326-24G-2S+ connected on port 8 and the route back to my router on port 7.

On the CSS326 I have a tagged port for my security camera (45) and my desktop is also connected untagged (1), loading up the camera feed I can still see packets being routed back to my main router and not via the bridge so I don't think vlan bridging is configured? (technically through another switch but that's currently just L2).

I've created the 3 VLANs as interfaces and as Bridge VLANs. I've added all of the ports as tagged ports, along with bridge.

I then also set up DHCP clients for each VLAN interface which all recieved IP addresses (static DHCP listings). I can also see the pref source dynamic routes in the routes table on the switch. So I believe that should all be configured correctly? But something has to be missing as my understanding would be that my route between my desktop would bounce up to the switch and then route back to the camera on the separate VLAN? On my desktop, I don't see any routes in the route table mentioning anything about the L3 switch.

What am I missing? Is my understanding of L3 routing wrong and that's not how it's supposed to work?
 
lbarnett
just joined
Topic Author
Posts: 2
Joined: Mon Mar 20, 2023 7:12 am

Re: Inter VLAN routing

Mon Mar 20, 2023 7:35 am

# mar/20/2023 18:33:43 by RouterOS 6.49.7
# software id = VZQ6-6CSQ
#
# model = CRS309-1G-8S+
/interface bridge
add admin-mac=18:FD:74:B2:E9:EC auto-mac=no comment=defconf name=bridge vlan-filtering=yes
/interface vlan
add interface=bridge name=SecurityNoInternet vlan-id=45
add interface=bridge name=Trusted vlan-id=43
add interface=bridge name=UntrustedNoInternet vlan-id=44
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=sfp-sfpplus1 pvid=43
add bridge=bridge comment=defconf interface=sfp-sfpplus2
add bridge=bridge comment=defconf interface=sfp-sfpplus3
add bridge=bridge comment=defconf interface=sfp-sfpplus4
add bridge=bridge comment=defconf interface=sfp-sfpplus5
add bridge=bridge comment=defconf interface=sfp-sfpplus6
add bridge=bridge comment=defconf interface=sfp-sfpplus7
add bridge=bridge comment=defconf interface=sfp-sfpplus8
/interface bridge vlan
add bridge=bridge tagged=bridge,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4,sfp-sfpplus5,sfp-sfpplus6,sfp-sfpplus7,sfp-sfpplus8 vlan-ids=43
add bridge=bridge tagged=bridge,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4,sfp-sfpplus5,sfp-sfpplus6,sfp-sfpplus7,sfp-sfpplus8 vlan-ids=44
add bridge=bridge tagged=bridge,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4,sfp-sfpplus5,sfp-sfpplus6,sfp-sfpplus7,sfp-sfpplus8 vlan-ids=45
/interface list member
add interface=ether1 list=WAN
add interface=sfp-sfpplus1 list=LAN
add interface=sfp-sfpplus2 list=LAN
add interface=sfp-sfpplus3 list=LAN
add interface=sfp-sfpplus4 list=LAN
add interface=sfp-sfpplus5 list=LAN
add interface=sfp-sfpplus6 list=LAN
add interface=sfp-sfpplus7 list=LAN
add interface=sfp-sfpplus8 list=LAN
/ip dhcp-client
add disabled=no interface=bridge
add disabled=no interface=Trusted
add disabled=no interface=SecurityNoInternet
add disabled=no interface=UntrustedNoInternet

Who is online

Users browsing this forum: Ahrefs [Bot], Amazon [Bot], cmmike and 48 guests