I have vlan 10 and I setup an IP address on the interface of 192.168.10.254. The main VLAN is 21 and it has IP. 192.168.21.251 which I can telnet into it and from the command prompt I can ping 192.168.10.254. I setup a DHCP-Relay for Vlan10 and I am getting the correct IP's from that vlan, but from within VLAN 10 I cant ping 192.168.10.254. From VLAN 21 everything is working fine

I have vlan 10 and I setup an IP address on the interface of 192.168.10.254. The main VLAN is 21 and it has IP. 192.168.21.251 which I can telnet into it and from the command prompt I can ping 192.168.10.254. I setup a DHCP-Relay for Vlan10 and I am getting the correct IP's from that vlan, but from within VLAN 10 I cant ping 192.168.10.254. From VLAN 21 everything is working fine

Code: Select all

 # mar/15/2014 15:48:51 by RouterOS 5.14
   # software id = FP7P-M89C
   #

   /interface bridge
   add name=bridge-phones
   add l2mtu=1598 name=bridge-network

   /interface vlan
   add interface=bridge-phones l2mtu=65531 name=vlan-10-phones vlan-id=10
   add interface=bridge-network l2mtu=1594 name=vlan-21-network vlan-id=21

   /interface bridge port
   add bridge=bridge-network interface=ether1
   add bridge=bridge-network interface=ether2
   add bridge=bridge-network interface=ether3
   add bridge=bridge-network interface=ether4
   add bridge=bridge-network interface=ether5
   add bridge=bridge-phones interface=ether6
   add bridge=bridge-phones interface=ether7
   add bridge=bridge-phones interface=ether8
   add bridge=bridge-network interface=ether9
   add bridge=bridge-network interface=ether10

   /ip address
   add address=192.168.10.254/24 interface=bridge-phones
   add address=192.168.21.251/24 interface=bridge-network

   /ip dhcp-relay
   add dhcp-server=192.168.21.254 disabled=no interface=bridge-phones local-address=192.168.10.254 name=Vlan10_DHCP

Post your whole export. Need to see the firewall config and routes especially.

This is the entire compact export.

What about your routing table?

Is all of your traffic on your network tagged?... because I'm not sure you are putting your VLAN in the correct place.

Diagram your network...

I have a router with IP 192.168.21.254 this is also the DHCP server for both VLANS. it is connected to port 1 on the MicroTik. All components are plugged into Vlan 21 and I have several IP phones that I would like to plug into Vlan 10 on ports 6-8. Right now VLAN21 is fully functional with internet and DHCP.

I have a router with IP 192.168.21.254 this is also the DHCP server for both VLANS. it is connected to port 1 on the MicroTik. All components are plugged into Vlan 21 and I have several IP phones that I would like to plug into Vlan 10 on ports 6-8.

Then you shouldn't be assigning things the way you are right now... by placing the VLANs on the bridge you are tagging ALL traffic to those ports...

I assume you more want port 1 to act as a trunk and the other ports as access ports correct?

Also what kind of hardware do you have? Depending on the hardware you may be able to do this with the switch chip.

My assumption is that ether1 should have two tagged VLANs... all of the other ports are untagged access ports to a specific VLAN.

-Eric

Port1 is a connected to a Cisco 871 Router. I would need port 1 to be a trunk port for both Vlan's. What I dont understand is that why cant I ping 192.168.10.254 from the same vlan? I get an IP of 192.168.10.54 from DHCP Server 192.168.21.254

Port1 is a connected to a Cisco 871 Router. I would need port 1 to be a trunk port for both Vlan's. What I dont understand is that why cant I ping 192.168.10.254 from the same vlan? I get an IP of 192.168.10.54 from DHCP Server 192.168.21.254

When you get that IP where are you plugged in... I think it is because your VLANs are not properly configured.

-Eric

When I plug into port 6 I get and IP from 192.168.10.0/24 range with default server of 254. But I cant ping 254. From the MicroTick command line I can ping 192.168.10.254. Right now I am plugged into port 10 and I have DHCP enabled and I get IP 192.168.21.77. There is only one DHCP-Server which is 192.168.21.254.

When I plug into port 6 I get and IP from 192.168.10.0/24 range with default server of 254. But I cant ping 254. From the MicroTick command line I can ping 192.168.10.254. Right now I am plugged into port 10 and I have DHCP enabled and I get IP 192.168.21.77. There is only one DHCP-Server which is 192.168.21.254.

I think you need to actually fix your configuration first... then troubleshoot the DHCP. Your VLANs are not properly configured. Right now you have tagged traffic for each vlan going everywhere...

Your config (assuming ether1 is trunk and the rest are access ports, meaning ether1 has only TAGGED vlans 10 and 21)

ros code

/interface bridge
   add name=bridge-phones
   add l2mtu=1598 name=bridge-network
  
   /interface vlan
   add interface=ether1 l2mtu=65531 name=vlan-10-phones vlan-id=10
   add interface=ether1 l2mtu=1594 name=vlan-21-network vlan-id=21
   
   /interface bridge port
   add bridge=bridge-network interface=ether1
   add bridge=bridge-network interface=ether2
   add bridge=bridge-network interface=ether3
   add bridge=bridge-network interface=ether4
   add bridge=bridge-network interface=ether5
   add bridge=bridge-phones interface=ether6
   add bridge=bridge-phones interface=ether7
   add bridge=bridge-phones interface=ether8
   add bridge=bridge-network interface=ether9
   add bridge=bridge-network interface=ether10
   
   /ip address
   add address=192.168.10.254/24 interface=bridge-phones
   add address=192.168.21.251/24 interface=bridge-network

Your config (assuming ether1 is trunk and the rest are access ports, meaning ether1 has only TAGGED vlans 10 and 21)

ros code

/interface bridge
   add name=bridge-phones
   add l2mtu=1598 name=bridge-network
  
   /interface vlan
   add interface=ether1 l2mtu=65531 name=vlan-10-phones vlan-id=10
   add interface=ether1 l2mtu=1594 name=vlan-21-network vlan-id=21
   
   /interface bridge port
   add bridge=bridge-network interface=ether1
   add bridge=bridge-network interface=ether2
   add bridge=bridge-network interface=ether3
   add bridge=bridge-network interface=ether4
   add bridge=bridge-network interface=ether5
   add bridge=bridge-phones interface=ether6
   add bridge=bridge-phones interface=ether7
   add bridge=bridge-phones interface=ether8
   add bridge=bridge-network interface=ether9
   add bridge=bridge-network interface=ether10
   
   /ip address
   add address=192.168.10.254/24 interface=bridge-phones
   add address=192.168.21.251/24 interface=bridge-network

And the reason you couldn't ping is because your tagged and untagged traffic was all confused....

Thanks

that worked

Thanks

that worked

I actually had a mistake in that...

Should be

ros code

/interface bridge
   add name=bridge-phones
   add l2mtu=1598 name=bridge-network
   
   /interface vlan
   add interface=ether1 l2mtu=65531 name=vlan-10-phones vlan-id=10
   add interface=ether1 l2mtu=1594 name=vlan-21-network vlan-id=21
    
   /interface bridge port
   add bridge=bridge-network interface=vlan-21-network
   add brige=bridge-phones interface=vlan-10-phones
   add bridge=bridge-network interface=ether2
   add bridge=bridge-network interface=ether3
   add bridge=bridge-network interface=ether4
   add bridge=bridge-network interface=ether5
   add bridge=bridge-phones interface=ether6
   add bridge=bridge-phones interface=ether7
   add bridge=bridge-phones interface=ether8
   add bridge=bridge-network interface=ether9
   add bridge=bridge-network interface=ether10
    
   /ip address
   add address=192.168.10.254/24 interface=bridge-phones
   add address=192.168.21.251/24 interface=bridge-network