Community discussions

MikroTik App
 
orangetekcy
just joined
Topic Author
Posts: 3
Joined: Mon Apr 18, 2022 10:10 pm

Vlan help needed

Mon Apr 18, 2022 10:16 pm

Hi all. The configuration below (CRS309) works fine. Can anyone help me change this to the new style on vlan so that i can hardware offload it?

Image

Regards
Andy
 
orangetekcy
just joined
Topic Author
Posts: 3
Joined: Mon Apr 18, 2022 10:10 pm

Re: Vlan help needed

Tue Apr 19, 2022 2:39 pm

anyone?
 
erlinden
Forum Guru
Forum Guru
Posts: 1900
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: Vlan help needed

Tue Apr 19, 2022 3:12 pm

Have you seen this topic?
viewtopic.php?f=23&t=143620

For help you have to share the config:
/export hide-sensitive file=anynameyoulike

And please post it in between code tags (to make it more readable).
 
orangetekcy
just joined
Topic Author
Posts: 3
Joined: Mon Apr 18, 2022 10:10 pm

Re: Vlan help needed

Sun Apr 24, 2022 9:43 am

/interface bridge
add ether-type=0x88a8 ingress-filtering=no name=bridge830 pvid=830 \
    vlan-filtering=yes
add ether-type=0x88a8 ingress-filtering=no name=bridge831 pvid=831 \
    vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] name=ether1-management
set [ find default-name=sfp-sfpplus1 ] name=sfp-sfpplus1 \
    rx-flow-control=auto tx-flow-control=auto
set [ find default-name=sfp-sfpplus2 ] name=sfp-sfpplus2
set [ find default-name=sfp-sfpplus3 ] name=sfp-sfpplus3
/interface vlan
add interface=sfp-sfpplus1 name=vlan16-kam vlan-id=16
add interface=sfp-sfpplus1 name=vlan21-mak vlan-id=21
add interface=sfp-sfpplus1 name=vlan47-lca vlan-id=47
add interface=vlan16-kam name=vlan950-16 vlan-id=950
add interface=vlan21-mak name=vlan950-21 vlan-id=950
add interface=vlan47-lca name=vlan950-47 vlan-id=950
add interface=vlan950-16 name=vlan830-16 vlan-id=830
add interface=vlan950-47 name=vlan830-47 vlan-id=830
add interface=vlan950-21 name=vlan831-21 vlan-id=831
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
set 1 name=serial1
/interface bridge port
add bridge=bridge831 interface=sfp-sfpplus3
add bridge=bridge831 interface=vlan831-21
add bridge=bridge830 interface=sfp-sfpplus2
add bridge=bridge830 horizon=1 interface=vlan830-16
add bridge=bridge830 horizon=1 interface=vlan830-47
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface bridge vlan
add bridge=bridge831 untagged=sfp-sfpplus3 vlan-ids=831
add bridge=bridge830 untagged=sfp-sfpplus2 vlan-ids=830
/interface ovpn-server server
set auth=sha1,md5
/ip dhcp-client
add interface=ether1-management
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system package update
set channel=long-term
/system resource irq rps
set ether1-management disabled=no
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11383
Joined: Thu Mar 03, 2016 10:23 pm

Re: Vlan help needed

Sun Apr 24, 2022 12:45 pm

Your current setup is mostly wrong. Go through this tutorial to get an idea. If you will have problems afterwards, come back for advice.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 18958
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Vlan help needed

Sun Apr 24, 2022 4:37 pm

(1) orangekey, DONT Set any vlan on the bridge itself.
It needs to be set back to the default of 1.
(2) ONLY ONE bridge is needed.


Conceptually................
List all the subnets on your router.
Go to interfaces and create vlans for each subnet, with the interface setting on those set to the bridge.
Then assign IP pool, IP address, dhcp-server, dhcp-server-network to each vlan.

Then identify which ports are trunk ports and which are access ports etc via /interface bridge ports.
Then identify the tagging and untagging of ports required via /interface bridge vlans.

Adjust firewall rules on the input and forward chain accordingly.
 
User avatar
Buckeye
Forum Veteran
Forum Veteran
Posts: 883
Joined: Tue Sep 11, 2018 2:03 am
Location: Ohio, USA

Re: Vlan help needed

Sun Apr 24, 2022 5:55 pm

While you should understand what is in this tutorial that has been offered, what it covers is quite basic compared to the Q-in-Q-in-Q config you posted.

@orangetekcy can you explain what the intent is?

Are you just relaying frames that happen to have stacked frames from one sfp to another?

Before you get your hopes up, I won't be able to help, as I have never used Q-in-Q, and the only MikroTik router I have is a low end hEX S (5 port + 1 SPF). But I can recognize that this config is more complex than those help articles deal with.

What version of ROS is running on the CRS309?

My suggestion is to go straight to the Official Help
Bridge VLAN Filtering good overview
Bridge VLAN Table very detailed information, although there are some places where they don't specify whether bridge vlan or bridge port command should be used, but you can determine this by trying and using tab completion to see possible completions.

These youtube videos may be helpful, I would start with the first, then the second.

Mikrotik VLANs - CRS3XX Step by Step - Mikrotik Tutorial The Network Trip youtube video.

Switching, VLAN, QinQ in ROS 6.41 Onwards and their application to CRS 3.xx models. MUM India 2018 slides

Who is online

Users browsing this forum: ItchyAnkle, menyarito and 86 guests