Community discussions

MikroTik App
  4. RouterOS
  5. Beginner Basics

Vlan for Voice

Post Reply
 
User avatar
qatar2022
Member Candidate
Member Candidate
Topic Author
Posts: 156
Joined: Mon Aug 24, 2020 11:12 am

Vlan for Voice

Mon Mar 04, 2024 4:20 pm

Hi
I replaced my Gpon Huawei router with ODI Realtek DFP-34X-2C2 and its work fine by creating Vlan10 for internet with PPPoE on sfp port.
am still suffering from configuration issue with Vlan30 for Voice or VoIP the scenario is:

Image

can you please help me to configure Vlan for Voice?
with regards
Top
 
User avatar
JazzMaster
Member Candidate
Member Candidate
Posts: 115
Joined: Wed Jan 16, 2019 7:18 pm
Location: Evansville, Indiana , USA

Re: Vlan for Voice

Tue Mar 05, 2024 12:06 am

Do you think you could post your config?
/export hide-sensitive file=anynameyoulike
Top
 
User avatar
qatar2022
Member Candidate
Member Candidate
Topic Author
Posts: 156
Joined: Mon Aug 24, 2020 11:12 am

Re: Vlan for Voice

Tue Mar 05, 2024 6:47 am

Do you think you could post your config?
/export hide-sensitive file=anynameyoulike
attached anynameyoulike

thanks JazzMaster

this is address list, dhcp, etc for your vlan30
IP Acquisition Mode:DHCP
IP Address/Subnet Mask:10.184.139.160/255.255.224.0
Gateway: 10.184.128.1
DNS Servers: 212.77.192.59,212.77.192.60
You do not have the required permissions to view the files attached to this post.
Top
 
TheCat12
Member Candidate
Member Candidate
Posts: 179
Joined: Fri Dec 31, 2021 9:13 pm

Re: Vlan for Voice

Tue Mar 05, 2024 5:19 pm

Presuming that the GrandStream can handle tagged VLAN traffic and based off my previous mistakes during your former topic, for which I apologize, I've come up with a hopefully working solution:

1. Create a VLAN 30 interface, assign it the given address and bind it with the bridge interface
2. Set VLAN 10 binded to the bridge interface and remove the address on the sfp-WAN
3. Set all ports in one bridge
4. Add PVIDs of 1 and 30 to the access ports (PVID 1 is so that you don't lose access to the router)
5. Create Bridge VLAN table with entries for the trunk ports and their respective VLANs
6. Turn on VLAN filtering
Code: Select all
/interface vlan
add interface=bridge name=vlan30 vlan-id=30
set [ find name=vlan10 ] interface=bridge

/ip address
add address=10.184.139.160/19 network=10.184.128.0 interface=vlan30
remove [ find interface=sfp-WAN ]

/interface bridge port
add bridge=bridge interface=sfp-WAN
add bridge=bridge interface=ether8-LAN8
set [ find interface=ether1-LAN1 ] pvid=1,30
set [ find interface=ether2-LAN2 ] pvid=1,30
set [ find interface=ether3-LAN3 ] pvid=1,30
set [ find interface=ether4-LAN4 ] pvid=1,30
set [ find interface=ether5-LAN5 ] pvid=1,30
set [ find interface=ether6-LAN6 ] pvid=1,30
set [ find interface=ether7-LAN7 ] pvid=1,30

/interface bridge vlan
add bridge=bridge tagged=bridge,sfp-WAN vlan-ids=10
add bridge=bridge tagged=bridge,sfp-WAN,ether8-LAN8 vlan-ids=30

/interface bridge set bridge vlan-filtering=yes
If ether8 should act as a access port only for VLAN 30, the only difference in the configuration would be to set PVID 30 for ether8-LAN8 and don't add it in the bridge VLAN table:
Code: Select all
/interface bridge port
add bridge=bridge interface=ether8-LAN8 pvid=30
Top
 
User avatar
qatar2022
Member Candidate
Member Candidate
Topic Author
Posts: 156
Joined: Mon Aug 24, 2020 11:12 am

Re: Vlan for Voice

Wed Mar 06, 2024 8:28 am

Presuming that the GrandStream can handle tagged VLAN traffic and based off my previous mistakes during your former topic, for which I apologize, I've come up with a hopefully working solution:

1. Create a VLAN 30 interface, assign it the given address and bind it with the bridge interface
2. Set VLAN 10 binded to the bridge interface and remove the address on the sfp-WAN
3. Set all ports in one bridge
4. Add PVIDs of 1 and 30 to the access ports (PVID 1 is so that you don't lose access to the router)
5. Create Bridge VLAN table with entries for the trunk ports and their respective VLANs
6. Turn on VLAN filtering
Code: Select all
/interface vlan
add interface=bridge name=vlan30 vlan-id=30
set [ find name=vlan10 ] interface=bridge

/ip address
add address=10.184.139.160/19 network=10.184.128.0 interface=vlan30
remove [ find interface=sfp-WAN ]

/interface bridge port
add bridge=bridge interface=sfp-WAN
add bridge=bridge interface=ether8-LAN8
set [ find interface=ether1-LAN1 ] pvid=1,30
set [ find interface=ether2-LAN2 ] pvid=1,30
set [ find interface=ether3-LAN3 ] pvid=1,30
set [ find interface=ether4-LAN4 ] pvid=1,30
set [ find interface=ether5-LAN5 ] pvid=1,30
set [ find interface=ether6-LAN6 ] pvid=1,30
set [ find interface=ether7-LAN7 ] pvid=1,30

/interface bridge vlan
add bridge=bridge tagged=bridge,sfp-WAN vlan-ids=10
add bridge=bridge tagged=bridge,sfp-WAN,ether8-LAN8 vlan-ids=30

/interface bridge set bridge vlan-filtering=yes
If ether8 should act as a access port only for VLAN 30, the only difference in the configuration would be to set PVID 30 for ether8-LAN8 and don't add it in the bridge VLAN table:
Code: Select all
/interface bridge port
add bridge=bridge interface=ether8-LAN8 pvid=30
These settings are not compatible with my device due to problems with connecting to the Internet, losing connection to the Internet, and not being able to access the device settings, which led me to doing a factory reset and starting to make settings from scratch.
Top
 
TheCat12
Member Candidate
Member Candidate
Posts: 179
Joined: Fri Dec 31, 2021 9:13 pm

Re: Vlan for Voice

Wed Mar 06, 2024 3:33 pm

Could you try adding the pppoe client to the bridge? Please excuse my stubbornness with this configuration but I can't think of any other working solution. If someone else could think of one, I would be very glad to hear it :)
Top
 
User avatar
JazzMaster
Member Candidate
Member Candidate
Posts: 115
Joined: Wed Jan 16, 2019 7:18 pm
Location: Evansville, Indiana , USA

Re: Vlan for Voice

Wed Mar 06, 2024 4:30 pm

Is your ISP providing VLAN 30?
Top
 
TheCat12
Member Candidate
Member Candidate
Posts: 179
Joined: Fri Dec 31, 2021 9:13 pm

Re: Vlan for Voice

Wed Mar 06, 2024 4:36 pm

Most probably yes because the OP states that he has replaced a Huawei GPON and these are commonly given by ISPs. Now that you mention it I'm curious how did they register in the first place on the optic network because ISPs are not very cooperative when it comes to replacing their equipment
Top
 
TheCat12
Member Candidate
Member Candidate
Posts: 179
Joined: Fri Dec 31, 2021 9:13 pm

Re: Vlan for Voice

Wed Mar 06, 2024 6:12 pm

Wait a second, can't you just add a VLAN30 interface, bridge it with the ether8 port and add a DHCP client if necessary? Why did I remain convinced that ether8 should be a trunk port? Now I feel as if I'd taken crazy pills
Code: Select all
/interface vlan
add interface=sfp-WAN name=vlan30 vlan-id=30

/interface bridge add name=bridge_vlan30

/interface bridge port
add bridge=bridge_vlan30 interface=ether8-LAN8
add bridge=bridge_vlan30 interface=vlan30

/ip dhcp-client
add interface=vlan30
Top
 
User avatar
qatar2022
Member Candidate
Member Candidate
Topic Author
Posts: 156
Joined: Mon Aug 24, 2020 11:12 am

Re: Vlan for Voice

Thu Apr 25, 2024 4:42 pm

Is your ISP providing VLAN 30?
yes
Top
 
User avatar
qatar2022
Member Candidate
Member Candidate
Topic Author
Posts: 156
Joined: Mon Aug 24, 2020 11:12 am

Re: Vlan for Voice

Thu Apr 25, 2024 4:43 pm

Wait a second, can't you just add a VLAN30 interface, bridge it with the ether8 port and add a DHCP client if necessary? Why did I remain convinced that ether8 should be a trunk port? Now I feel as if I'd taken crazy pills
Code: Select all
/interface vlan
add interface=sfp-WAN name=vlan30 vlan-id=30

/interface bridge add name=bridge_vlan30

/interface bridge port
add bridge=bridge_vlan30 interface=ether8-LAN8
add bridge=bridge_vlan30 interface=vlan30

/ip dhcp-client
add interface=vlan30
i couldn't add interface=vlan30
You do not have the required permissions to view the files attached to this post.
Top
 
TheCat12
Member Candidate
Member Candidate
Posts: 179
Joined: Fri Dec 31, 2021 9:13 pm

Re: Vlan for Voice

Fri Apr 26, 2024 11:43 pm

After a lot of headscratching, I think I've come up with a solution which won't lock you out of your router. If it happens anyway, please excuse me in advance.

1. Add SFP WAN and ether8 in the bridge and assign it the VLAN10 interface
2. Create a VLAN for the clients, for the management of the ONU and for the VoIP (applicable if there are any drop forward firewall rules)
3. Assign pvid of 30 to ether8
4. Add appropriate VLAN entries and the bridge VLAN table and enable VLAN filtering:
Code: Select all
/interface vlan
set [ find [name=vlan10 ] interface=bridge
add name=Clients interface=bridge vlan-id=99
add name=ONU interface=bridge vlan-id=98

/interface bridge port
add bridge=bridge interface=sfp-WAN pvid=98
set [ find interface=ether1-LAN1 ] pvid=99
set [ find interface=ether2-LAN2 ] pvid=99
set [ find interface=ether3-LAN3 ] pvid=99
set [ find interface=ether4-LAN4 ] pvid=99
set [ find interface=ether5-LAN5 ] pvid=99
set [ find interface=ether6-LAN6 ] pvid=99
set [ find interface=ether7-LAN7 ] pvid=99
add bridge=bridge interface=ether8-LAN8 pvid=30

/ip address
set [ find interface=bridge ] interface=Clients
set [ find interface=sfp-WAN ] interface=ONU

/ip dhcp-server set [ find interface=bridge ] interface=Clients

/ip arp
set [ find interface=bridge ] interface=Clients
set [ find interface=sfp-WAN ] interface=ONU

/interface bridge vlan
add bridge=bridge tagged=bridge,sfp-WAN vlan-ids=10
add bridge=bridge tagged=bridge,sfp-WAN vlan-ids=30
add bridge=bridge tagged=bridge vlan-ids=98
add bridge=bridge tagged=bridge vlan-ids=99

/interface bridge set bridge vlan-filtering=yes
If you have any drop forward firewall rules (I didn't see any), you should allow inter-VLAN communication between VLAN 99 and 98, 99 and 30 (you should add beforehand a VLAN 30 interface in /interface vlan) and 99 and 10
Top
 
User avatar
qatar2022
Member Candidate
Member Candidate
Topic Author
Posts: 156
Joined: Mon Aug 24, 2020 11:12 am

Re: Vlan for Voice

Sat Apr 27, 2024 4:33 pm

thank you @TheCat12 it is a headache
but have you read configuration file?
why i have to use vlan98,99 ? and i have to use IP Address/Subnet Mask:10.184.139.160/255.255.224.0 Gateway:10.184.128.1 DNS Servers:212.77.192.59,212.77.192.60 for voice
note:
each time i try to use your configuration you post i disconnect from internet and from mikrotik itself and i have to do restore gain
I appreciate your help
with regards
You do not have the required permissions to view the files attached to this post.
Top
 
TheCat12
Member Candidate
Member Candidate
Posts: 179
Joined: Fri Dec 31, 2021 9:13 pm

Re: Vlan for Voice

Sat Apr 27, 2024 6:19 pm

I found problems in my config, but this time before deploying it, I would wait for a second opinion from @anav or @mkx:

To the existing proposition for a VLAN config before enabling VLAN filtering add the following commands:
Code: Select all
/interface vlan
add interface=bridge name=vlan30 vlan-id=30

/ip address add address=10.184.139.160/19 interface=vlan30
 
/interface list member
add list=WAN interface=vlan10
add list=WAN interface=vlan30
As for your questions, because the bridge has enabled VLAN filtering you go all VLAN and that's where the necessity for two other VLANs - for the devices other than the Grandstream and for access to the ONU, comes for. And yes, I have read the configuration you posted and all my edits to it are based on it
Top
Post Reply

Who is online

Users browsing this forum: No registered users and 14 guests
  4. RouterOS
  5. Beginner Basics