Hey all,
I'm new to the world of MikroTik, and I've got the job to setup the network in our amateur theatre. So far we just used every switch / router we got donated, but now we need a stable network for the online ticket software / security cameras / etc.

The current setup looks like this:

• ISP router (Speedport W724V) with VDSL Modem at 192.168.1.1, DHCP Server for the whole network
  Mikrotik CRS125-24G-1S currently in pure switch mode (as far as i can tell / understand) at 192.168.1.10
  Multiple RB260GS in switch mode
  ~ 50 Clients (15 PCs, some cameras, some event equipment, some home automation) with mostly static IP's
  Multiple WiFi-AP's RB951G-2HnD with individual DHCP

This setup is not really satisfying, and since I work here only voluntarily, I can't really put days of trial&error into this project. What I need is:

• Decoupling the DHCP from the ISP Router into the CRS125 (I have the feeling that the Speedport DHCP doesn't work reliable
  CRS125 as gateway, not the Speedport - maybe in the future backup gateway through hsdpa-stick?
  VPN Server on the CRS125 - till now I could not create a connection with simple setup

That is enough for the moment. I'm not sure how to switch the CRS125 from the pure switch mode to a "router-mode", where one port function is gateway and the rest is the inner network. I already tried to change the master port for all ports to have the gateway port (ether01) having no master port, and the rest having master port ether02, but it didn't end well.

End result should be:

Internet <--> Speedport (192.168.10.1) <--> (192.168.10.2 @ ether01) CRS125 <--> Inner network (192.168.1.0/24)

Standard Gateway: 192.168.1.254
DHCP Server @ CRS125: 192.168.1.10 - 192.168.1.50
OpenVPN Server @ CRS125
Webserver @ 192.168.1.1:80

The next thing would be to let the WiFi-network work properly, but not now.

Thanks in advance, I would appreciate your answer

This setup is not really satisfying, and since I work here only voluntarily, I can't really put days of trial&error into this project. What I need is:

• Decoupling the DHCP from the ISP Router into the CRS125 (I have the feeling that the Speedport DHCP doesn't work reliable
  CRS125 as gateway, not the Speedport - maybe in the future backup gateway through hsdpa-stick?
  VPN Server on the CRS125 - till now I could not create a connection with simple setup

That is enough for the moment. I'm not sure how to switch the CRS125 from the pure switch mode to a "router-mode", where one port function is gateway and the rest is the inner network. I already tried to change the master port for all ports to have the gateway port (ether01) having no master port, and the rest having master port ether02, but it didn't end well.

End result should be:

Internet <--> Speedport (192.168.10.1) <--> (192.168.10.2 @ ether01) CRS125 <--> Inner network (192.168.1.0/24)

Standard Gateway: 192.168.1.254
DHCP Server @ CRS125: 192.168.1.10 - 192.168.1.50
OpenVPN Server @ CRS125
Webserver @ 192.168.1.1:80

The next thing would be to let the WiFi-network work properly, but not now.

Thanks in advance, I would appreciate your answer

Perhaps you might be better off trying to find a local company who has the experience with the gear and offer them something in exchange for assisting you with getting this working right. Since you don't have the time to learn this and perform yourself. Might be best to just barter services from a local company who could do it in a few hours of work.

Remove the master ports from all ports settings. Just this releases the ports from switch and the ports become independent interfaces you can freely use for routing.

Hi,

first things first
*Can you reconfigure your modem to bridge mode, and then do all "intelligent" things on MT?( i'm guessing you are getting public IP via PPPoE from your ISP)
*If yes, then all services ( like DHCP, Firewall, etc will be on MT, not on DSL modem) which will increase overall network performance
*Regarding your question about MT config, lets say your eth1 will be connected to DSL modem, and will run PPPoE client, so rest of your ports will be your private network. Like you said, eth1 should not have master port, your eth2 should be master port for all other ports. You should set bridge interface for your private network, and then assign only eth2 to that bridge interface. After that, you should set DHCP server on bridge interface you created 2 steps before. Finally, you need to setup masquerade for your private network. After this all should be good.

If you need to access your DSL router you need to make one more thing. First you should assgn IP from modem's IP pool to eth1. Then create a masquerade for that network. All written above could not be 100% accurate, because i'm just guessing you are using PPPoE as authentication to your ISP