Community discussions

MikroTik App
 
mortenb
just joined
Topic Author
Posts: 9
Joined: Mon Apr 11, 2011 6:53 pm

VLAN Setup

Tue Sep 18, 2012 1:05 am

Hi all

I have a setup with a Procurve 2910al and RB1200

The procurve has a few vlans, the RB is connected to Port4 on the procurve, which has a Tagged VLAN 101, with ip 10.176.1.1/28

The mt is connected to the procurve on port 8, I have configured a VLAN 101 interface on port8 and assigned IP 10.176.1.14/28

Should this not be enough to get access ? I cannot Ping any of the IP's from any of the units, anyone got an idea ?

admin@MikroTik] > /ip address print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 10.100.50.1/24 10.100.50.0 ether10_vlan50
1 192.168.10.4/24 192.168.10.0 ether1
2 X 10.110.145.2/24 10.110.145.0 ether10_vlan154
3 10.100.70.1/24 10.100.70.0 ether10_vlan70
4 10.176.1.14/28 10.176.1.0 ether8vlan101
[admin@MikroTik] > /ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 192.168.10.1 1
1 ADC 10.100.50.0/24 10.100.50.1 ether10_vlan50 0
2 ADC 10.100.70.0/24 10.100.70.1 ether10_vlan70 0
3 ADC 192.168.10.0/24 192.168.10.4 ether1 0
4 ADC 10.176.1.0/28 10.176.1.14 ether8vlan101 0
[admin@MikroTik] >

Please excuse my limited visio skills :)
image001.png
You do not have the required permissions to view the files attached to this post.
 
User avatar
cbrown
Trainer
Trainer
Posts: 1839
Joined: Thu Oct 14, 2010 8:57 pm
Contact:

Re: VLAN Setup

Tue Sep 18, 2012 3:55 pm

Can you post /export compact ?
 
mortenb
just joined
Topic Author
Posts: 9
Joined: Mon Apr 11, 2011 6:53 pm

Re: VLAN Setup

Tue Sep 18, 2012 10:25 pm

-------------------------------------------------------
Last edited by mortenb on Wed Sep 19, 2012 3:11 pm, edited 1 time in total.
 
mortenb
just joined
Topic Author
Posts: 9
Joined: Mon Apr 11, 2011 6:53 pm

Re: VLAN Setup

Wed Sep 19, 2012 3:10 pm

Can you post /export compact ?
[admin@MikroTik] > /export compact
# sep/18/2012 19:23:23 by RouterOS 5.20
# software id = SIQR-JA9V
#
/interface ethernet
set 0 speed=1Gbps
/interface vlan
add interface=ether10 l2mtu=1596 name=ether10_vlan50 vlan-id=50
add disabled=yes interface=ether10 name=ether10_vlan154 vlan-id=154
add interface=ether10 l2mtu=1596 name=ether10_vlan70 vlan-id=70
add interface=ether8 l2mtu=1596 name=ether8vlan101 vlan-id=101
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
/ip pool
add name=dhcp_pool1 ranges=10.100.70.50-10.100.70.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=ether10_vlan70 name=dhcp1 \
relay=10.100.70.1
/queue simple
add limit-at=8M/8M max-limit=8M/8M name=VLAN_210_8Mbit
/ip address
add address=10.100.50.1/24 interface=ether10_vlan50
add address=192.168.10.4/24 interface=ether1
add address=10.110.145.2/24 disabled=yes interface=ether10_vlan154
add address=10.100.70.1/24 interface=ether10_vlan70
add address=10.176.1.14/28 interface=ether8vlan101
/ip dhcp-relay
add dhcp-server=192.168.10.10 disabled=no interface=ether10_vlan50 name=\
relay_vlan50
add dhcp-server=192.168.10.10 interface=ether10_vlan154 name=relay_vlan154
/ip dhcp-server network
add address=10.100.70.0/24 gateway=10.100.70.1
/ip dns
set max-udp-packet-size=512 servers=192.168.10.9,192.168.10.10
/ip firewall address-list
add address=192.168.10.0 list=company-lan
/ip firewall filter
add chain=forward protocol=icmp
add action=reject chain=forward protocol=icmp reject-with=icmp-admin-prohibited
/ip neighbor discovery
set ether10_vlan50 disabled=yes
set ether10_vlan70 disabled=yes
set ether8vlan101 disabled=yes
/ip route
add distance=1 gateway=192.168.10.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
/queue interface
set ether10 queue=ethernet-default
set ether9 queue=ethernet-default
set ether7 queue=ethernet-default
set ether8 queue=ethernet-default
set ether6 queue=ethernet-default
set ether5 queue=ethernet-default
set ether4 queue=ethernet-default
set ether3 queue=ethernet-default
set ether2 queue=ethernet-default
set ether1 queue=ethernet-default
/system ntp client
set enabled=yes mode=unicast primary-ntp=192.168.10.10
[admin@MikroTik] >
 
User avatar
cbrown
Trainer
Trainer
Posts: 1839
Joined: Thu Oct 14, 2010 8:57 pm
Contact:

Re: VLAN Setup

Wed Sep 19, 2012 9:11 pm

Are you trying to ping from the router to the switch or from your computer connected to the router?
 
mortenb
just joined
Topic Author
Posts: 9
Joined: Mon Apr 11, 2011 6:53 pm

Re: VLAN Setup

Thu Sep 20, 2012 12:06 am

Are you trying to ping from the router to the switch or from your computer connected to the router?
From the router to the switch, via the ether8vlan interface
 
mortenb
just joined
Topic Author
Posts: 9
Joined: Mon Apr 11, 2011 6:53 pm

Re: VLAN Setup

Wed Sep 26, 2012 1:10 pm

Are you trying to ping from the router to the switch or from your computer connected to the router?
From the router to the switch, via the ether8vlan interface

Any one got a clue to why I cannot reach my VLAN's between MT and HP ?


Morten
 
burkni
newbie
Posts: 29
Joined: Tue Mar 29, 2011 1:55 pm

Re: VLAN Setup

Thu Sep 27, 2012 12:57 pm

You need to set the state of the port to secure and add-if-missing in vlan-header.
So if it's port 4 then this should probably be the setup:
/interface ethernet switch port
set 3 vlan-header=add-if-missing vlan-mode=secure

This is taken from RB750G, I guess it's similar in your case.
 
mortenb
just joined
Topic Author
Posts: 9
Joined: Mon Apr 11, 2011 6:53 pm

Re: VLAN Setup

Sat Sep 29, 2012 10:47 am

You need to set the state of the port to secure and add-if-missing in vlan-header.
So if it's port 4 then this should probably be the setup:
/interface ethernet switch port
set 3 vlan-header=add-if-missing vlan-mode=secure

This is taken from RB750G, I guess it's similar in your case.

Thank you, well it is kind of similar, I am running a rb1200 and would like to use the ports that are not part of the internal switch for VLAN routing. I cannot find these settings on the ports.

Some other settings I need to complete on these ports maybe ?
 
burkni
newbie
Posts: 29
Joined: Tue Mar 29, 2011 1:55 pm

Re: VLAN Setup

Sat Sep 29, 2012 10:58 am

Did you try the config line I provided? There might be two other lines you need to add, will take a look when I open my computer, I don't have it in my head. ;)
 
burkni
newbie
Posts: 29
Joined: Tue Mar 29, 2011 1:55 pm

Re: VLAN Setup

Mon Nov 26, 2012 12:16 pm

Did you solve this?
 
mortenb
just joined
Topic Author
Posts: 9
Joined: Mon Apr 11, 2011 6:53 pm

Re: VLAN Setup

Wed Dec 12, 2012 4:46 pm

No not at all, still struggeling with this part.
 
User avatar
jmedinagu
just joined
Posts: 8
Joined: Sun Dec 23, 2012 12:19 pm

Re: VLAN Setup

Sun Dec 23, 2012 11:31 pm

Resolved? I have some similar problem.......

Who is online

Users browsing this forum: cstrong, jaclaz and 85 guests