Quantcast
Channel: MikroTik
Viewing all articles
Browse latest Browse all 15133

Beginner Basics • Question about ingress VLAN translation

$
0
0
I have a couple of VLANs in a network comprising CRS326 and MT router. I have set up VLANs and inter-VLAN routing with firewall rules on the router, all working as expected.

However, I would like to route some inter-VLAN connections directly in the switch to avoid a sizeable amount of traffic going to the router and back again. It seems this should be possible with simple switch rules (before e.g. even trying HW L3 offloading)

In my set up on the switch I have access port for VLAN_10 (ether_1) and a trunk port (ether_2) that includes VLAN_20 (among others). I would like to apply VLAN routing in the switch to HTTP connections originating from VLAN_10 to a host in VLAN_20. (I understand this would require two switch rules, from ether_1 to ether_2, and back again.)

I tried VLAN translation on the switch with:
Code:
/interface ethernet switch rule switch=sw1 ports=ether_1 vlan_id=10 src-address=192.168.20.17/24 dst-address=192.168.30.17/24 protocol=tcp dst-port=80 new-dst-ports=ether_2 new-vlan-id=20switch=sw1 ports=ether_2 vlan_id=20 src-address=192.168.30.17/24 dst=address=192.168.20.17/24 protocol=tcp new-dst-ports=ether_1 new-vlan-id=10
But once the rules are enabled they stop connections getting through between the VLANs (that previously did via the router).

I’d appreciate any pointers and suggestions.

Thanks

Statistics: Posted by apandi — Tue Feb 27, 2024 10:01 pm



Viewing all articles
Browse latest Browse all 15133

Trending Articles