Page 1 of 1
routing
Posted: Sat Mar 15, 2014 9:54 pm
by mrjoli021
I have vlan 10 and I setup an IP address on the interface of 192.168.10.254. The main VLAN is 21 and it has IP. 192.168.21.251 which I can telnet into it and from the command prompt I can ping 192.168.10.254. I setup a DHCP-Relay for Vlan10 and I am getting the correct IP's from that vlan, but from within VLAN 10 I cant ping 192.168.10.254. From VLAN 21 everything is working fine
# mar/15/2014 15:48:51 by RouterOS 5.14
# software id = FP7P-M89C
#
/interface bridge
add name=bridge-phones
add l2mtu=1598 name=bridge-network
/interface vlan
add interface=bridge-phones l2mtu=65531 name=vlan-10-phones vlan-id=10
add interface=bridge-network l2mtu=1594 name=vlan-21-network vlan-id=21
/interface bridge port
add bridge=bridge-network interface=ether1
add bridge=bridge-network interface=ether2
add bridge=bridge-network interface=ether3
add bridge=bridge-network interface=ether4
add bridge=bridge-network interface=ether5
add bridge=bridge-phones interface=ether6
add bridge=bridge-phones interface=ether7
add bridge=bridge-phones interface=ether8
add bridge=bridge-network interface=ether9
add bridge=bridge-network interface=ether10
/ip address
add address=192.168.10.254/24 interface=bridge-phones
add address=192.168.21.251/24 interface=bridge-network
/ip dhcp-relay
add dhcp-server=192.168.21.254 disabled=no interface=bridge-phones local-address=192.168.10.254 name=Vlan10_DHCP
Re: routing
Posted: Sat Mar 15, 2014 10:12 pm
by efaden
I have vlan 10 and I setup an IP address on the interface of 192.168.10.254. The main VLAN is 21 and it has IP. 192.168.21.251 which I can telnet into it and from the command prompt I can ping 192.168.10.254. I setup a DHCP-Relay for Vlan10 and I am getting the correct IP's from that vlan, but from within VLAN 10 I cant ping 192.168.10.254. From VLAN 21 everything is working fine
# mar/15/2014 15:48:51 by RouterOS 5.14
# software id = FP7P-M89C
#
/interface bridge
add name=bridge-phones
add l2mtu=1598 name=bridge-network
/interface vlan
add interface=bridge-phones l2mtu=65531 name=vlan-10-phones vlan-id=10
add interface=bridge-network l2mtu=1594 name=vlan-21-network vlan-id=21
/interface bridge port
add bridge=bridge-network interface=ether1
add bridge=bridge-network interface=ether2
add bridge=bridge-network interface=ether3
add bridge=bridge-network interface=ether4
add bridge=bridge-network interface=ether5
add bridge=bridge-phones interface=ether6
add bridge=bridge-phones interface=ether7
add bridge=bridge-phones interface=ether8
add bridge=bridge-network interface=ether9
add bridge=bridge-network interface=ether10
/ip address
add address=192.168.10.254/24 interface=bridge-phones
add address=192.168.21.251/24 interface=bridge-network
/ip dhcp-relay
add dhcp-server=192.168.21.254 disabled=no interface=bridge-phones local-address=192.168.10.254 name=Vlan10_DHCP
Post your whole export. Need to see the firewall config and routes especially.
Re: routing
Posted: Sun Mar 16, 2014 12:48 am
by mrjoli021
This is the entire compact export.
# mar/15/2014 15:48:51 by RouterOS 5.14
# software id = FP7P-M89C
#
/interface bridge
add name=bridge-phones
add l2mtu=1598 name=bridge-network
/interface vlan
add interface=bridge-phones l2mtu=65531 name=vlan-10-phones vlan-id=10
add interface=bridge-network l2mtu=1594 name=vlan-21-network vlan-id=21
/interface bridge port
add bridge=bridge-network interface=ether1
add bridge=bridge-network interface=ether2
add bridge=bridge-network interface=ether3
add bridge=bridge-network interface=ether4
add bridge=bridge-network interface=ether5
add bridge=bridge-phones interface=ether6
add bridge=bridge-phones interface=ether7
add bridge=bridge-phones interface=ether8
add bridge=bridge-network interface=ether9
add bridge=bridge-network interface=ether10
/ip address
add address=192.168.10.254/24 interface=bridge-phones
add address=192.168.21.251/24 interface=bridge-network
/ip dhcp-relay
add dhcp-server=192.168.21.254 disabled=no interface=bridge-phones local-address=192.168.10.254 name=Vlan10_DHCP
/ip dns
set allow-remote-requests=yes
/system clock
set time-zone-name=America/New_York
/system health
set use-fan=auxiliary
Re: routing
Posted: Sun Mar 16, 2014 12:57 am
by efaden
What about your routing table?
Is all of your traffic on your network tagged?... because I'm not sure you are putting your VLAN in the correct place.
Diagram your network...
Re: routing
Posted: Sun Mar 16, 2014 1:14 am
by mrjoli021
I have a router with IP 192.168.21.254 this is also the DHCP server for both VLANS. it is connected to port 1 on the MicroTik. All components are plugged into Vlan 21 and I have several IP phones that I would like to plug into Vlan 10 on ports 6-8. Right now VLAN21 is fully functional with internet and DHCP.
Re: routing
Posted: Sun Mar 16, 2014 1:18 am
by efaden
I have a router with IP 192.168.21.254 this is also the DHCP server for both VLANS. it is connected to port 1 on the MicroTik. All components are plugged into Vlan 21 and I have several IP phones that I would like to plug into Vlan 10 on ports 6-8.
Then you shouldn't be assigning things the way you are right now... by placing the VLANs on the bridge you are tagging ALL traffic to those ports...
I assume you more want port 1 to act as a trunk and the other ports as access ports correct?
Also what kind of hardware do you have? Depending on the hardware you may be able to do this with the switch chip.
My assumption is that ether1 should have two tagged VLANs... all of the other ports are untagged access ports to a specific VLAN.
-Eric
Re: routing
Posted: Sun Mar 16, 2014 1:30 am
by mrjoli021
Port1 is a connected to a Cisco 871 Router. I would need port 1 to be a trunk port for both Vlan's. What I dont understand is that why cant I ping 192.168.10.254 from the same vlan? I get an IP of 192.168.10.54 from DHCP Server 192.168.21.254
Re: routing
Posted: Sun Mar 16, 2014 1:41 am
by efaden
Port1 is a connected to a Cisco 871 Router. I would need port 1 to be a trunk port for both Vlan's. What I dont understand is that why cant I ping 192.168.10.254 from the same vlan? I get an IP of 192.168.10.54 from DHCP Server 192.168.21.254
When you get that IP where are you plugged in... I think it is because your VLANs are not properly configured.
-Eric
Re: routing
Posted: Sun Mar 16, 2014 1:54 am
by mrjoli021
When I plug into port 6 I get and IP from 192.168.10.0/24 range with default server of 254. But I cant ping 254. From the MicroTick command line I can ping 192.168.10.254. Right now I am plugged into port 10 and I have DHCP enabled and I get IP 192.168.21.77. There is only one DHCP-Server which is 192.168.21.254.
Re: routing
Posted: Sun Mar 16, 2014 1:57 am
by efaden
When I plug into port 6 I get and IP from 192.168.10.0/24 range with default server of 254. But I cant ping 254. From the MicroTick command line I can ping 192.168.10.254. Right now I am plugged into port 10 and I have DHCP enabled and I get IP 192.168.21.77. There is only one DHCP-Server which is 192.168.21.254.
I think you need to actually fix your configuration first... then troubleshoot the DHCP. Your VLANs are not properly configured. Right now you have tagged traffic for each vlan going everywhere...
Re: routing
Posted: Sun Mar 16, 2014 1:58 am
by efaden
Your config (assuming ether1 is trunk and the rest are access ports, meaning ether1 has only TAGGED vlans 10 and 21)
ros code
/interface bridge
add name=bridge-phones
add l2mtu=1598 name=bridge-network
/interface vlan
add interface=ether1 l2mtu=65531 name=vlan-10-phones vlan-id=10
add interface=ether1 l2mtu=1594 name=vlan-21-network vlan-id=21
/interface bridge port
add bridge=bridge-network interface=ether1
add bridge=bridge-network interface=ether2
add bridge=bridge-network interface=ether3
add bridge=bridge-network interface=ether4
add bridge=bridge-network interface=ether5
add bridge=bridge-phones interface=ether6
add bridge=bridge-phones interface=ether7
add bridge=bridge-phones interface=ether8
add bridge=bridge-network interface=ether9
add bridge=bridge-network interface=ether10
/ip address
add address=192.168.10.254/24 interface=bridge-phones
add address=192.168.21.251/24 interface=bridge-network
Re: routing
Posted: Sun Mar 16, 2014 2:19 am
by efaden
Your config (assuming ether1 is trunk and the rest are access ports, meaning ether1 has only TAGGED vlans 10 and 21)
ros code
/interface bridge
add name=bridge-phones
add l2mtu=1598 name=bridge-network
/interface vlan
add interface=ether1 l2mtu=65531 name=vlan-10-phones vlan-id=10
add interface=ether1 l2mtu=1594 name=vlan-21-network vlan-id=21
/interface bridge port
add bridge=bridge-network interface=ether1
add bridge=bridge-network interface=ether2
add bridge=bridge-network interface=ether3
add bridge=bridge-network interface=ether4
add bridge=bridge-network interface=ether5
add bridge=bridge-phones interface=ether6
add bridge=bridge-phones interface=ether7
add bridge=bridge-phones interface=ether8
add bridge=bridge-network interface=ether9
add bridge=bridge-network interface=ether10
/ip address
add address=192.168.10.254/24 interface=bridge-phones
add address=192.168.21.251/24 interface=bridge-network
And the reason you couldn't ping is because your tagged and untagged traffic was all confused....
Re: routing
Posted: Sun Mar 16, 2014 6:35 am
by mrjoli021
Thanks
that worked
Re: routing
Posted: Sun Mar 16, 2014 2:22 pm
by efaden
Thanks
that worked
I actually had a mistake in that...
Should be
ros code
/interface bridge
add name=bridge-phones
add l2mtu=1598 name=bridge-network
/interface vlan
add interface=ether1 l2mtu=65531 name=vlan-10-phones vlan-id=10
add interface=ether1 l2mtu=1594 name=vlan-21-network vlan-id=21
/interface bridge port
add bridge=bridge-network interface=vlan-21-network
add brige=bridge-phones interface=vlan-10-phones
add bridge=bridge-network interface=ether2
add bridge=bridge-network interface=ether3
add bridge=bridge-network interface=ether4
add bridge=bridge-network interface=ether5
add bridge=bridge-phones interface=ether6
add bridge=bridge-phones interface=ether7
add bridge=bridge-phones interface=ether8
add bridge=bridge-network interface=ether9
add bridge=bridge-network interface=ether10
/ip address
add address=192.168.10.254/24 interface=bridge-phones
add address=192.168.21.251/24 interface=bridge-network