MikroTik

New to Mikrotik.
I have a CRS354-48G-4S+2Q+ trying to create VLANs but I get errors when following the docs.
Following https://wiki.mikrotik.com/wiki/Manual:C ... with_Bonds and other links in the wiki and beating my head for hours trying to sort this out but the docs don't seem to work on this switch.
From what I gather I need to configure port switching and trunks. Coming from the Cisco world it's not a problem but this has me cross eyed.
After a reset and no other settings made I get the following:

Wiki examples assume no pre-existing config. When you start off with device which already has some config, it is indeed a bit tougher. In your case, where ether1 is already member of a bridge, you should simply set [ find interface=ether1 ] pvid=10 .. Etc.

Wiki examples assume no pre-existing config. When you start off with device which already has some config, it is indeed a bit tougher. In your case, where ether1 is already member of a bridge, you should simply set [ find interface=ether1 ] pvid=10 .. Etc.

Thanks, I'll give it a shot. This is a new CRS354-48G-4S+2Q+ no pre-exisitng config this is default and I've reset it several times after trying different things from the wiki.

If you understand Cisco VLANs, this document will help you

https://stubarea51.net/2019/02/06/cisco ... and-vlans/

And plese fell free to ask me questions

Thank you I'll check it out.

Still fighting this.
IPAsupport: Great link but it follows the wiki and the CRS354-48G-4S+2Q+ doesn't seem play along. All of the interfaces seem to be a member to a bridge out of the box.

Read something that said I needed to slave all of the interfaces to the uplink: Everything I've read just gives me errors. Not even trying to config it to my needs just following along in the wiki.
What I need to do is create vlans and some trunks with one trunk uplink going to a router.

Access interfaces
int 1 vlan 100
int 2 vlan 100
int 3 vlan 100
int 4 vlan 110
int 5 vlan 120
int 6 vlan 130

Trunk interfaces
int 7 vlan 200
int 8 vlan 300,400
int 9 vlan 500,600

Uplink trunk
int 49

I don't know if that makes any sense.

To create a VLAN go to the /interface vlan menu


use the following command
This is the tricky part in MikroTik, the vlan will become an interface. In order to comunicate between VLANs assign IP addresses to each one of them, go to /ip address

Read something that said I needed to slave all of the interfaces to the uplink:

Code: Select all

[admin@MikroTik] /interface ethernet> set [ find default-name=ether48 ] master-port=sfp-sfpplus1
expected end of command (line 1 column 35)

Everything I've read just gives me errors. Not even trying to config it to my needs just following along in the wiki.

You must have wandered into the historic section of the wiki (or the numerous out-of-date third-party examples around the web) as master-port= hardware switching mechanism was removed from RouterOS in version 6.41 (released Dec 2017). https://wiki.mikrotik.com/wiki/Manual:I ... _Filtering should cover everything you need.

What I need to do is create vlans and some trunks with one trunk uplink going to a router.

Access interfaces
int 1 vlan 100
int 2 vlan 100
int 3 vlan 100
int 4 vlan 110
int 5 vlan 120
int 6 vlan 130

Trunk interfaces
int 7 vlan 200
int 8 vlan 300,400
int 9 vlan 500,600

Uplink trunk
int 49

There isn't a Mikrotik equivalent to 'trunk all VLANs', you have to specify them. So fragments for your example would be

/interface bridge
add name=bridge vlan-filtering=yes

/interface bridge port
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether1 pvid=100
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether2 pvid=100
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether3 pvid=100
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether4 pvid=110
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether5 pvid=120
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether6 pvid=130
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=ether7
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=ether8
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=ether9
...
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=sfp-sfpplus1 (assuming that is the name of the SFP port)

/interface bridge vlan
add bridge=bridge tagged=sfp-sfpplus1 vlan-ids=100
add bridge=bridge tagged=sfp-sfpplus1 vlan-ids=110
add bridge=bridge tagged=sfp-sfpplus1 vlan-ids=120
add bridge=bridge tagged=sfp-sfpplus1 vlan-ids=130
add bridge=bridge tagged=sfp-sfpplus1,ether7 vlan-ids=200
add bridge=bridge tagged=sfp-sfpplus1,ether8 vlan-ids=300
add bridge=bridge tagged=sfp-sfpplus1,ether8 vlan-ids=400
add bridge=bridge tagged=sfp-sfpplus1,ether9 vlan-ids=500
add bridge=bridge tagged=sfp-sfpplus1,ether9 vlan-ids=600


As you have existing bridge and bridge ports you can use set rather than add as mentioned by mkx, or use the Winbox GUI - more clicking but hides you from the CLI syntax.

Makes sense I was wading in old docs and lots of old info while googling.
I take it there is no such thing as a native vlan just untagged vlans?

Off topic but is there any Mikrotik training online or is all of it in person?

Thanks everyone that helped out!