Help setting up VLANs

Googler · Wed Sep 12, 2018 2:39 am

Hi all,

I need help (re)configuring my home network, i'm planning on adding additional Mikrotik AP and I would like to reconfigure my current setup:

ISP ONT <---> HAP AC <---> STB
ISPs ONT is connected to HAPs ether1, where i've created 2 vlans, one for pppoe connection (vlan 100) and another for IPTV (vlan 500)
i've bridged eth3-eth5 & wifi for internet access (bridge:Local) and created another bridge for eth2 and vlan 500, where i've got connected STB via powerline adapters

/interface bridge
add admin-mac=6C:3B:6B:19:C0:61 auto-mac=no comment=IPTV name=IPTV
add admin-mac=6C:3B:6B:19:C0:61 auto-mac=no comment="ether3 - ether5" name=\
    Local protocol-mode=none

/interface ethernet
set [ find default-name=ether1 ] comment=WAN speed=100Mbps
set [ find default-name=ether2 ] comment="IP TV" speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps
set [ find default-name=sfp1 ] advertise=\
    10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full disabled=yes

/interface vlan
add interface=ether1 name=ether1.100 vlan-id=100
add interface=ether1 name=ether1.500 vlan-id=500
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether1.100 name=pppoe-out \
    user=myispusername

/interface bridge port
add bridge=Local interface=wlan1
add bridge=Local interface=wlan2
add bridge=Local interface=ether3
add bridge=Local interface=ether4
add bridge=Local interface=ether5
add bridge=IPTV interface=ether1.500
add bridge=IPTV interface=ether2

I would like to reconfigure this setup into something like this, using single cable between HAP AC2 and HAP AC:
ISP ONT <---> HAP AC2 <---> HAP AC <---> STB

I know i should use bridge vlan tagging function, but i'm not sure how to set it up correctly :/

Thanks!

Googler · Wed Sep 12, 2018 11:23 pm

i've found solution:
Router connected to ISP's ONT config:
created two bridges:
Local - for wifi and local computers (eth2-eth5)
IPTV - where i've added iptv vlan500 from eth1 and newly created vlan500 at eth2

similar thing i've done at router connected to STB:
local bridge - eth1 - eth4
iptv bridge vlan500 at eth1 and eth5 - where i've connected STB

i think this could also be done with bridge vlan options, but i had problems setting it up :/

mkx · Thu Sep 13, 2018 9:13 am

i think this could also be done with bridge vlan options, but i had problems setting it up :/

It sure could be done using single bridge and VLAN filtering (you wouldn't have HW offload) or using single bridge and using switch chip VLAN config (if your RB features decent enough switch chip). However there's a gotcha: this way you'd get both WAN (untagged towards ONT) and LAN (untagged local) to the same bridge which is not OK. So you'd have to configure ether1 port as hybrid and tag WAN connection on ingress to some fiction VLAN (e.g. 13) - and untag it on egress. Then you'd create vlan interface with vlan-id=13 on bridge and use this interface for whatever you're doing now on ether1 natively (run DHCP client, use WAN filters on firewall, ...). You could do similar with local LAN as well to get rid of untagged traffic on the bridge but I guess it isn't necessary.

Help setting up VLANs

Help setting up VLANs

Re: Help setting up VLANs

Re: Help setting up VLANs