Community discussions

MikroTik App
 
tonny
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 54
Joined: Fri Oct 09, 2015 10:50 am

EoIP bridging different vlans from two sites

Wed May 10, 2023 11:56 am

Hi
For a VM migration i need to create three EoIP tunnels between two sites, but the vlan's at both sites have different ID's
site-a - vlan 344 <-- eoip --> site-b vlan 684
site-a - vlan 345 <-- eoip --> site-b vlan 685
site-a - vlan 346 <-- eoip --> site-b vlan 686
At both sites the vlans are configured at the SFP+ port leading to a cisco switch that also has the hosts in vmware
I activated promiscues mode in vm ware as well as MAC addres changes and forged transmits
Started step by step to build for one vlan ....

Site-a
/interface eoip add  name=eoip-tunnel-a remote-address=<ip-b> tunnel-id=344
/interface bridge add name=bridge-a vlan-filtering=yes
/interface bridge vlan add bridge=bridge-a tagged=sfp-sfpplus1 vlan-ids=344
/interface bridge port add bridge=bridge-a interface=sfp-sfpplus1
/interface bridge port add bridge=bridge-a interface=eoip-tunnel-a pvid=344
and on
Site-b
/interface eoip add  name=eoip-tunnel-b remote-address=<ip-a> tunnel-id=344
/ip address add address=10.10.10.11/24 interface=eoip-tunnel-b
I took a host at site A in vlan 344 (IP=10.10.10.10/24) and had it ping IP (10.10.10.11) and that works

then changed site b to:
/interface eoip add  name=eoip-tunnel-b remote-address=<ip-a> tunnel-id=344
/interface bridge add name=bridge-b 
/interface bridge port add bridge=bridge-b interface=eoip-tunnel-b
/ip address add address=10.10.10.11/24 interface=bridge-b
and the host could still ping 10.10.10.11

Then on to the final stage at Site-b (I removed the ip 10.10.10.11)
/interface eoip add  name=eoip-tunnel-b remote-address=<ip-a> tunnel-id=344
/interface bridge add name=bridge-b vlan-filtering=yes
/interface bridge vlan add bridge=bridge-b tagged=sfp-sfpplus1 vlan-ids=684
/interface bridge port add bridge=bridge-b interface=sfp-sfpplus1
/interface bridge port add bridge=bridge-b interface=eoip-tunnel-a pvid=684
Looking at both sites at the bridge/vlan status it shows the eoip active as untagged and the sfp+1 active as tagged, but still I'm unable to ping any host on site B.
I did try the reversed process to verify site b is okay too, but it has the same issue.

In the latest test I did see a message in the switch stating "Blocking Ethernet1/6 on VLAN684. Inconsistent local vlan."
What should be the right bridge config in this situation?
 
tonny
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 54
Joined: Fri Oct 09, 2015 10:50 am

Re: EoIP bridging different vlans from two sites

Wed May 10, 2023 2:09 pm

found *the* (or at least a) solution to be to have same vlan i mikrotiks and do the vlan translation in cisco nexus

Who is online

Users browsing this forum: mtskreyns, pfturner and 43 guests