MikroTik

I have two locations, A and B, connected together over a PtP link and now I need to set up a new network between A and B sharing the PtP link while keeping both networks logically separated.

I think VLAN is what I need. Could someone give me a basic setup -beyond of what the manual has?

Can I do this with just a MT router at each location or do I require a layer-2 switch?

I could sure use some help on this.

Thank you,
juibar

I would assume you would have a config such as this:

1. Add two VLAN interfaces to your PtP interface on both ends othe links (assume you are using Mikrotiks at both ends. Let's assume we are using ether3 for the PtP link. Add VLAN1 with ID 1 and Vlan 2 with ID2 to ether3.

2. Connect your two separate subnets to different interfaces on the Mikrotiks at each end of the PtP link. (i.e, ether1 = network1; ether2 = network2). Bridge ether1 with VLAN1 and bridge ether2 with VLAN2.

Only other thing to consider is queueing per VLAN and non-VLAN traffic depending on the PtP link bandwidth.

Sorry for not mentioning, but the PtP link is based on Proxim Tsunami radios and I am planning to add a MT router at each end to handle the two VLANs. Would this still be possible?

Thanks,
juibar

That radios shouldn't matter as long as they will pass VLAN traffic. (>1500 byte frames)

I set up the two MT routers as suggested, but now it turns out that I can ping stations out of the VLAN!

For instance, I can ping a station on vlan 2 at location B from a station on vlan 1 at location A.

What am I doing wrong?

Thanks,
juibar

Here is a drawing of my intended setup.



In black is the current network and in blue what I am trying to do, which is sharing a PtP link to provide wi-fi Internet hotspot service to users at location B from a broadband Internet connection at location A. The existing network shall not have Internet access through the cable modem.

So far, I created two VLANs, vlan1 and vlan2, on eth2 of each MT router and bridged them to eth1 and eth3, respectively.

One problem is that I can ping 192.168.1.x from any of the laptops at location B, which is something not desired.

Another problem is that I cannot get the laptops to ping further than eth1 of MT A. Even from MT B I cannot ping eth1 of MT A.

Anyone with a similar setup or any ideas?

Thanks,
juibar

Hi, firebad:

According to your setup, both ether1 and ether2 are untagged ports, and ether3 are tagged port with vlan id 1 and 2. What if there are already tagged traffic in network1, will those tagged traffic get dropped coming into ether1? Is there a way to make ether1 and ether2 tagged ports instead of untagged?

Hi, Juibar:

I did the vlan setup based on firebat's idea. It worked fine for me.

Hi, firebat:

If I trunk the two network traffic through ether3 with certain bandwidth, and I want to split the total bandwidth between two networks, i.e. 50% of bandwidth is allocated for one network, and the other 50% for the other network. How do I accomplish the bandwidth spliting for trunked two vlans?

jfan:

Can you post your configuration?

I appreciate it.

juibar

http://us.a2.yahoofs.com/users/sHNKPOJz ... aveas=vlan

my vlan configuration

jfan,

Please check the link, as it does not work.

Thank you,
juibar

It worked for me. Do you have an email address?

Jin

Please send it to jbibarra@gmail.com

Thanks,
juibar