Page 1 of 1

Extended network

Posted: Thu Oct 18, 2018 4:33 am
by ruiesteves
Hi, I have a network with a RB2011 managing 2 internet links (WAN_Fiber20 and WAN_Fiber100) and 3 internal VLANs (VLAN-Area1, VLAN-Area2 and VLAN-Wifi). The routing completely blocks accesses between different VLANs, but allows access to Internet.
Now the general manager decided to connect a new building using a couple of antennas (1x Ubiquiti NanoBean 16g on each building). On the new building he bought another RB2011, and wants to have computers connected to the VLAN-Area1, and other computers connected to a new VLAN. The file server is only on the original building and must be accessed from VLAN-Area1.
What is the best approach to configure both routers?
I thought about creating a new IP range just to connect between the 2 routers. And on the new router create 2 brand new vlans with new IP ranges: VLAN-Area3 only with access to Internet, and VLAN-Area4 with full routing to VLAN-Area1.
What pitfalls must I avoid, and what should I be aware of?
Attached I am sending the configuration of the current router.

Thank you

Re: Extended network

Posted: Sun Oct 21, 2018 11:59 pm
by ruiesteves
Probably my question was a little confusing.
What I want: To connect 2 buildings, each one with a Mikrotik RB2011 il-IN.
On router 1 I have the Internet connection, and 3 internal VLANs. This router is working for a while without major problems.
On router 2 I need to have 2 VLAN (VLANx and VLANy) and no direct Internet connection. This is a new router still to be configured.
There will be an Ethernet connection between the 2 routers.
I want that:
- VLANx only has access within that remote VLANx and also access to Internet (through the router 1).
- VLANy have full access to that remote VLANy, to Internet (through router 1) but also to one of router's 1 VLAN (where I have the servers)
Question 1: I believe that I should have 1 unique IP for the router interface. But should I configure 2 tunnels, 1 for each of the remote VLANs? Or don't I need to set it like that?
Question 2: How do I set a route that is controllable on both routers? (how can router1 findout that a machine is accessing from VLANy or VLANx of router2?)

Thank you.