Community discussions

MikroTik App
 
User avatar
enderst
just joined
Topic Author
Posts: 6
Joined: Fri Aug 28, 2020 4:29 am

VLAN help

Fri Aug 28, 2020 4:43 am

New to Mikrotik.
I have a CRS354-48G-4S+2Q+ trying to create VLANs but I get errors when following the docs.
Following https://wiki.mikrotik.com/wiki/Manual:C ... with_Bonds and other links in the wiki and beating my head for hours trying to sort this out but the docs don't seem to work on this switch.
From what I gather I need to configure port switching and trunks. Coming from the Cisco world it's not a problem but this has me cross eyed.
After a reset and no other settings made I get the following:
[admin@MikroTik] > /interface bridge
[admin@MikroTik] /interface bridge> add name=bridge vlan-filtering=no
failure: already have interface with such name
[admin@MikroTik] /interface bridge> /interface bridge port
[admin@MikroTik] /interface bridge port> add bridge=bridge interface=ether1 pvid=10 hw=yes
failure: device already added as bridge port
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 12623
Joined: Thu Mar 03, 2016 10:23 pm

Re: VLAN help

Fri Aug 28, 2020 6:17 pm

Wiki examples assume no pre-existing config. When you start off with device which already has some config, it is indeed a bit tougher. In your case, where ether1 is already member of a bridge, you should simply set [ find interface=ether1 ] pvid=10 .. Etc.
 
User avatar
enderst
just joined
Topic Author
Posts: 6
Joined: Fri Aug 28, 2020 4:29 am

Re: VLAN help

Fri Aug 28, 2020 6:47 pm

Wiki examples assume no pre-existing config. When you start off with device which already has some config, it is indeed a bit tougher. In your case, where ether1 is already member of a bridge, you should simply set [ find interface=ether1 ] pvid=10 .. Etc.
Thanks, I'll give it a shot. This is a new CRS354-48G-4S+2Q+ no pre-exisitng config this is default and I've reset it several times after trying different things from the wiki.
 
User avatar
IPAsupport
Frequent Visitor
Frequent Visitor
Posts: 62
Joined: Fri Sep 20, 2019 4:02 pm

Re: VLAN help

Fri Aug 28, 2020 8:21 pm

If you understand Cisco VLANs, this document will help you

https://stubarea51.net/2019/02/06/cisco ... and-vlans/

And plese fell free to ask me questions
 
User avatar
enderst
just joined
Topic Author
Posts: 6
Joined: Fri Aug 28, 2020 4:29 am

Re: VLAN help

Sat Aug 29, 2020 5:53 am

Thank you I'll check it out.
 
User avatar
enderst
just joined
Topic Author
Posts: 6
Joined: Fri Aug 28, 2020 4:29 am

Re: VLAN help

Tue Sep 01, 2020 1:27 am

Still fighting this.
IPAsupport: Great link but it follows the wiki and the CRS354-48G-4S+2Q+ doesn't seem play along. All of the interfaces seem to be a member to a bridge out of the box.

Read something that said I needed to slave all of the interfaces to the uplink:
[admin@MikroTik] /interface ethernet> set [ find default-name=ether48 ] master-port=sfp-sfpplus1
expected end of command (line 1 column 35)
Everything I've read just gives me errors. Not even trying to config it to my needs just following along in the wiki.
What I need to do is create vlans and some trunks with one trunk uplink going to a router.

Access interfaces
int 1 vlan 100
int 2 vlan 100
int 3 vlan 100
int 4 vlan 110
int 5 vlan 120
int 6 vlan 130

Trunk interfaces
int 7 vlan 200
int 8 vlan 300,400
int 9 vlan 500,600

Uplink trunk
int 49

I don't know if that makes any sense.
 
User avatar
IPAsupport
Frequent Visitor
Frequent Visitor
Posts: 62
Joined: Fri Sep 20, 2019 4:02 pm

Re: VLAN help

Wed Sep 02, 2020 6:04 pm

To create a VLAN go to the /interface vlan menu


use the following command
[admin@MikroTik] /interface vlan>
add name=vlan100 vlan-id=100 interface=ether1 
This is the tricky part in MikroTik, the vlan will become an interface. In order to comunicate between VLANs assign IP addresses to each one of them, go to /ip address
[admin@MikroTik] ip address>
 add address=10.10.100.1/24 interface=vlan100
 
tdw
Forum Guru
Forum Guru
Posts: 2004
Joined: Sat May 05, 2018 11:55 am

Re: VLAN help

Thu Sep 03, 2020 1:04 pm

Read something that said I needed to slave all of the interfaces to the uplink:
[admin@MikroTik] /interface ethernet> set [ find default-name=ether48 ] master-port=sfp-sfpplus1
expected end of command (line 1 column 35)
Everything I've read just gives me errors. Not even trying to config it to my needs just following along in the wiki.
You must have wandered into the historic section of the wiki (or the numerous out-of-date third-party examples around the web) as master-port= hardware switching mechanism was removed from RouterOS in version 6.41 (released Dec 2017). https://wiki.mikrotik.com/wiki/Manual:I ... _Filtering should cover everything you need.

What I need to do is create vlans and some trunks with one trunk uplink going to a router.

Access interfaces
int 1 vlan 100
int 2 vlan 100
int 3 vlan 100
int 4 vlan 110
int 5 vlan 120
int 6 vlan 130

Trunk interfaces
int 7 vlan 200
int 8 vlan 300,400
int 9 vlan 500,600

Uplink trunk
int 49
There isn't a Mikrotik equivalent to 'trunk all VLANs', you have to specify them. So fragments for your example would be

/interface bridge
add name=bridge vlan-filtering=yes

/interface bridge port
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether1 pvid=100
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether2 pvid=100
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether3 pvid=100
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether4 pvid=110
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether5 pvid=120
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether6 pvid=130
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=ether7
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=ether8
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=ether9
...
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=sfp-sfpplus1
(assuming that is the name of the SFP port)

/interface bridge vlan
add bridge=bridge tagged=sfp-sfpplus1 vlan-ids=100
add bridge=bridge tagged=sfp-sfpplus1 vlan-ids=110
add bridge=bridge tagged=sfp-sfpplus1 vlan-ids=120
add bridge=bridge tagged=sfp-sfpplus1 vlan-ids=130
add bridge=bridge tagged=sfp-sfpplus1,ether7 vlan-ids=200
add bridge=bridge tagged=sfp-sfpplus1,ether8 vlan-ids=300
add bridge=bridge tagged=sfp-sfpplus1,ether8 vlan-ids=400
add bridge=bridge tagged=sfp-sfpplus1,ether9 vlan-ids=500
add bridge=bridge tagged=sfp-sfpplus1,ether9 vlan-ids=600


As you have existing bridge and bridge ports you can use set rather than add as mentioned by mkx, or use the Winbox GUI - more clicking but hides you from the CLI syntax.
 
User avatar
enderst
just joined
Topic Author
Posts: 6
Joined: Fri Aug 28, 2020 4:29 am

Re: VLAN help

Thu Sep 10, 2020 7:04 pm

Makes sense I was wading in old docs and lots of old info while googling.
I take it there is no such thing as a native vlan just untagged vlans?

Off topic but is there any Mikrotik training online or is all of it in person?

Thanks everyone that helped out!

Who is online

Users browsing this forum: epanig, Google [Bot], proteinrobot, rizan and 39 guests