Community discussions

MikroTik App
 
Jimmy
Member Candidate
Member Candidate
Topic Author
Posts: 111
Joined: Thu Sep 29, 2011 11:42 pm
Location: Denmark
Contact:

Router 1 wan 6 vlan help plz

Wed May 23, 2018 12:46 pm

hi all
I am trying to setup a router with 1 wan (ether1) end 6 Vlan, and i am relly lost now :(
All the VLAN need to have internet access and vlan 1 and 3 need to send DHCP.
My setup is a 2011UAS-2HnD setup as Router vith vlan and the rest of my Network is Cisco sw that is why ether 5 is trunk. Cisco is setup with trunk to port 5 with native 999 and all that is woking.

I cant get internet on any of my WLAN :( I no there is a lot of post in here and i have try many Things now with out Lock :(
Can somone maybe try look at my settings and tell me whar i am doing worng?

Cheers
Jimmy
/interface bridge
add name=bridge-vlan1
add name=bridge-vlan2
add name=bridge-vlan3
add name=bridge-vlan4
add name=bridge-vlan5
add name=bridge-vlan10
add name=bridge-vlan999
/interface vlan
add interface=ether2 name=vlan1-ether2 vlan-id=1
add interface=ether5 name=vlan1-ether5 vlan-id=1
add interface=ether5 name=vlan2-ether5 vlan-id=2
add interface=ether3 name=vlan3-ether3 vlan-id=3
add interface=ether5 name=vlan3-ether5 vlan-id=3
add interface=ether5 name=vlan4-ether5 vlan-id=4
add interface=ether5 name=vlan5-ether5 vlan-id=5
add interface=ether5 name=vlan10-ether5 vlan-id=10
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" management-protection=\
allowed mode=dynamic-keys name=test supplicant-identity="" \
wpa2-pre-shared-key=12345678
add authentication-types=wpa2-psk eap-methods="" management-protection=\
allowed mode=dynamic-keys name=test2 supplicant-identity="" \
wpa2-pre-shared-key=12345678
/interface wireless
set [ find default-name=wlan1 ] disabled=no mode=ap-bridge security-profile=\
VMCK ssid=VMCK wireless-protocol=802.11
add disabled=no keepalive-frames=disabled mac-address=D6:CA:6D:0A:55:AB \
master-interface=wlan1 multicast-buffering=disabled name=wlan2 \
security-profile=TTS ssid=TTS wds-cost-range=0 wds-default-cost=0 \
wps-mode=disabled
/interface vlan
add interface=wlan1 name=vlan1-wlan1 vlan-id=1
add interface=wlan2 name=vlan3-wlan2 vlan-id=3
/ip pool
add name=dhcp-vlan1 ranges=192.168.1.2-192.168.1.199
add name=dhcp-vlan3 ranges=192.168.0.200-192.168.0.254
/ip dhcp-server
add address-pool=dhcp-vlan1 disabled=no interface=bridge-vlan1 name=\
dhcp-vlan1
add address-pool=dhcp-vlan3 disabled=no interface=bridge-vlan3 name=\
dhcp-vlan3
/tool user-manager customer
set admin access=\
own-routers,own-users,own-profiles,own-limits,config-payment-gw
/interface bridge port
add bridge=bridge-vlan1 interface=vlan1-ether2
add bridge=bridge-vlan1 interface=vlan1-ether5
add bridge=bridge-vlan2 interface=vlan2-ether5
add bridge=bridge-vlan3 interface=vlan3-ether5
add bridge=bridge-vlan4 interface=vlan4-ether5
add bridge=bridge-vlan5 interface=vlan5-ether5
add bridge=bridge-vlan10 interface=vlan10-ether5
/ip address
add address=192.168.1.1 interface=bridge-vlan1 network=255.255.255.0
add address=192.168.0.1 interface=bridge-vlan3 network=255.255.255.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.0.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=192.168.0.1
add address=192.168.1.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=192.168.1.1
/ip dns
set servers=8.8.8.8,8.8.4.4
/ip firewall filter
add action=accept chain=forward disabled=yes in-interface=bridge-vlan1 \
out-interface=ether1
add action=accept chain=forward disabled=yes in-interface=bridge-vlan3 \
out-interface=ether1
add action=accept chain=forward disabled=yes in-interface=bridge-vlan2 \
out-interface=ether1
add action=accept chain=forward disabled=yes in-interface=bridge-vlan4 \
out-interface=ether1
add action=accept chain=forward disabled=yes in-interface=bridge-vlan5 \
out-interface=ether1
add action=drop chain=forward disabled=yes
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/ip route
add distance=1 gateway=ether1
/system clock
set time-zone-name=Europe/Copenhagen
/system identity
set name="VMCK Marster Router"
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=yes display-time=5s
set resources disabled=yes display-time=5s
set uptime disabled=yes display-time=5s
set packets disabled=yes display-time=5s
set bits disabled=yes display-time=5s
set version disabled=yes display-time=5s
set identity disabled=yes display-time=5s
set bridge-vlan1 disabled=yes display-time=5s
set bridge-vlan2 disabled=yes display-time=5s
set bridge-vlan3 disabled=yes display-time=5s
set bridge-vlan4 disabled=yes display-time=5s
set bridge-vlan5 disabled=yes display-time=5s
set bridge-vlan10 disabled=yes display-time=5s
set bridge-vlan999 disabled=yes display-time=5s
set wlan1 disabled=yes display-time=5s
set sfp1 disabled=yes display-time=5s
set ether1 disabled=yes display-time=5s
set ether2 disabled=yes display-time=5s
set ether3 disabled=yes display-time=5s
set ether4 disabled=yes display-time=5s
set ether5 disabled=yes display-time=5s
set ether6 disabled=yes display-time=5s
set ether7 disabled=yes display-time=5s
set ether8 disabled=yes display-time=5s
set ether9 disabled=yes display-time=5s
set ether10 disabled=yes display-time=5s
set wlan2 disabled=yes display-time=5s
set vlan1-wlan1 disabled=yes display-time=5s
set vlan3-wlan2 disabled=yes display-time=5s
set vlan1-ether5 disabled=yes display-time=5s
set vlan2-ether5 disabled=yes display-time=5s
set vlan3-ether5 disabled=yes display-time=5s
set vlan4-ether5 disabled=yes display-time=5s
set vlan5-ether5 disabled=yes display-time=5s
set vlan10-ether5 disabled=yes display-time=5s
set vlan1-ether2 disabled=yes display-time=5s
set vlan3-ether3 disabled=yes display-time=5s
/system routerboard settings
set silent-boot=no
/tool user-manager database
set db-path=user-manager
 
User avatar
CZFan
Forum Guru
Forum Guru
Posts: 2098
Joined: Sun Oct 09, 2016 8:25 pm
Location: South Africa, Krugersdorp (Home town of Brad Binder)
Contact:

Re: Router 1 wan 6 vlan help plz

Wed May 23, 2018 1:35 pm

First we need to know what ROS version is on the 2011 as there are different ways to configure VLAN's.

Also, if you have switches for the LAN, then your VLAN's should live on the switches, with one Trunk uplink to the router for routing between VLAN's
 
Jimmy
Member Candidate
Member Candidate
Topic Author
Posts: 111
Joined: Thu Sep 29, 2011 11:42 pm
Location: Denmark
Contact:

Re: Router 1 wan 6 vlan help plz

Wed May 23, 2018 2:22 pm

Hi CZFan
The ROS is: RouterOS 6.42.2

i am running Cisco on my lan with trunk to ether5 all that is working with no problem.

Right now i am only testing with the router no sw on and i am using wifi and ether 2 for testning to kiip all problem as lowest i can, and Again no internet on any vlan/port.
The dhcp is working both on port and wifi only problem is i got no internet there is comming in at ether1 ?

Cheers
Jimmy
 
User avatar
CZFan
Forum Guru
Forum Guru
Posts: 2098
Joined: Sun Oct 09, 2016 8:25 pm
Location: South Africa, Krugersdorp (Home town of Brad Binder)
Contact:

Re: Router 1 wan 6 vlan help plz

Wed May 23, 2018 8:07 pm

The correct config is the link below:

https://wiki.mikrotik.com/wiki/Manual:I ... _Filtering

Who is online

Users browsing this forum: No registered users and 11 guests