Quantcast
Channel: MikroTik
Viewing all articles
Browse latest Browse all 15133

Beginner Basics • Re: mikrotik vlan mgmt, access ptp connect

$
0
0
What your missing is that each smart device should get an IP from a management vlan.
Data vlans 17 and 89 are carried forward to each smart device as well.
Assuming that the ROUTER has its own internal LAN, wheras, the receiver/txitter are acting solely as AP/switches and do not need an internal LAN so to speak.


You forget as the last rule change to make bridge vlan-filtering=yes.
There is no such bridge or wlan port called LAN, so first entry in /interface bridge ports should be removed!!!!!
Bridge needs to be tagged in /interface bridge vlans
Ensure you identify the out interface for source nat.
WAN port is not normally on bridge.....
WHY on WHY do you have IP DHCP client set to LAN bridge.......
It looks like you are getting a private IP address from an upstream modem router.......... no need for dhcp client (aka disabled) if you have put a static IP address for it. You will also need to add a manual route......
Highly recommend you do config on each device OFF bridge -see next ( okay your two rx, tx devices only have a single port, make sure you use safe mode to make changes. )

OFF Bridge ( for all three MT devices for configuration and emergency access )
- take one port off the bridge
- give it an IP address anything add address=192.168.55.1/24 interface=etherportX network=192.168.55.0
- add it to MGMT Interface as a member
- put static ipv4 setting on pc as 192.168.55.5 for example and you should have access.
- I have ether1as being local LAN access port, ether2 is a local access port for management network, ether3 trunk port going to MT TX, ether4 off bridge, ether5 is WAN
.......
Main differences for RX/TX from router.
No dhcp,
Only management vlan is tagged on bridge
Only management vlan is defined
Every smart device gets its IP address on the management vlan
...........
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Code:
# model = RB750GL/interface bridgeadd admin-mac=4C:5E:0C:D7:C2:74 auto-mac=no comment=defconf name=LAN-Bridge vlan-filtering=yes/interface listadd name=WANadd name=LANadd name=MGMT/interface ethernetset [ find default-name=ether1 ] name=LAN1set [ find default-name=ether2 ] name=Mgmt2set [ find default-name=ether3 ] name=TRUNK3set [ find default-name=ether4 ] name=Off-Bridgeset [ find default-name=ether5 ] name=WAN5/interface vlanadd interface=LAN-Bridge name=vlan17 vlan-id=17add interface=LAN-Bridge name=vlan89 vlan-id=89add interface=LAN-Bridge name=Home20 vlan-id=20add interface=LAN-Bridge name=MGMT99  vlan-ids=99/ip neighbor discovery-settingsset discover-interface-list=MGMT/interface list memberadd  interface=Vlan-MGMT  list=MGMTadd  interface=Vlan-MGMT  list=LANadd interface=vlan17  list=LANadd interface=vlan89  list=LANadd interface=Home20  list=LANadd interface=WAN5 list=WAN/ip pooladd name=dhcp_vlan17 ranges=10.0.17.100-10.0.17.150add name=dhcp_vlan89 ranges=10.0.89.100-10.0.89.150add name=dhcp_vlan99 ranges=10.0.99.100-10.0.99.110add name=dhcp_main ranges=10.1.1.1-10.1.1.253/ip dhcp-serveradd address-pool=dhcp_vlan17 interface=vlan17 name=dhcp1add address-pool=dhcp_vlan89 interface=vlan89 name=dhcp2add address-pool=dhcp_vlan99 interface=MGMT99 name=dhcp99add address-pool=dhcp_main   interface=Home20 name=dhcp3/interface bridge portadd bridge=LAN-Bridge comment=defconf interface=LAN1  ingress-filtering=yes  frame-types=admit-only-priority-and-untagged  pvid=20add bridge=LAN-Bridge comment=defconf interface=Mgmt2  ingress-filtering=yes  frame-types=admit-only-priority-and-untagged  pvid=99add bridge=LAN-Bridge comment=defconf interface=TRUNK3  ingress-filtering=yes  frame-types=admit-only-vlan-tagged/interface bridge vlanadd bridge=LAN-Bridge tagged=LAN-Bridge  untagged=LAN1,  vlan-ids=20add bridge=LAN-Bridge tagged=LAN-Bridge,Trunk3  untagged=Mgmt2,  vlan-ids=99add bridge=LAN-Bridge tagged=LAN-Bridge,Trunk3  vlan-ids=17,89/ip addressadd address=10.109.3.80/24 interface=WAN5 network=10.109.3.0add address=10.1.1.254/24  interface=Main20 network=10.1.1.0add address=10.0.17.1/24 interface=vlan17 network=10.0.17.0add address=10.0.89.1/24 interface=vlan89 network=10.0.89.0add address=10.0.99.1/24 interface=MGMT99  network=10.0.99.0/ip dhcp-clientadd comment=defconf  disabled=yes/ip dhcp-server networkadd address=10.0.17.0/24 dns-server=10.0.17.1 gateway=10.0.17.1add address=10.0.89.0/24 dns-server=10.0.89.1 gateway=10.0.89.1add address=10.1.1.0/24 dns-server=10.1.1.254 gateway=10.1.1.254add address=10.0.99.0/24 dns-server=10.0.99.1 gateway=10.0.99.1/ip dnsset allow-remote-requests=yes servers=1.1.1.1,8.8.8.8/ip firewall natadd action=masquerade chain=srcnat out-interface-list=WAN/ip routeadd dst=0.0.0.0/0 gateway=10.109.3.1 routing-table=main/tool mac-serverset allowed-interface-list=MGMT/tool mac-server mac-winboxset allowed-interface-list=MGMT



...

Remove static IP DNS from default settings.
Remove any ipv6 noise
no need for firewall, nat any router stuff...........
.........

Transmitter:
# feb/23/2024 05:20:13 by RouterOS 6.49.8
#
Code:
# model = 911G-5HPacD/interface bridgeadd name=TX-Bridge vlan-filtering=yes/interface ethernetset [ find default-name=ether1 ] name=TrunkPort-TX/interface wireless security-profilesset [ find default=yes ] supplicant-identity=MikroTik/interface wirelessset [ find default-name=wlan1 ] antenna-gain=2 band=5ghz-onlyn channel-width=\20/40mhz-Ce country=poland disabled=no frequency=auto installation=\outdoor mode=bridge nv2-preshared-key=test1234 nv2-security=enabled \radio-name=JPII ssid=MikroTik wireless-protocol=nv2/interface vlanadd interface=TX-Bridge name=vlan-MGMT vlan-id=99/interface listadd name=MGMT/tool user-manager customerset admin access=\own-routers,own-users,own-profiles,own-limits,config-payment-gw/interface bridge portadd bridge=TX-Bridge interface=TrunkPort-TX ingress-filtering=yes  frame-types=admit-only-vlan-tagged add bridge=TX-Bridge  interface=wlan1 ingress-filtering=yes  frame-types=admit-only-vlan-tagged /ip neighbor discovery-settingsset discover-interface-list=MGMT/interface bridge vlanadd bridge=TX-Bridge  tagged=TX-Bridge,TrunkPort-TX,wlan1   vlan-ids=17,89,99/interface list memberadd  interface=Vlan-MGMT  list=MGMT/ip addressadd address=10.0.99.2./24 interface=vlan-MGMT network=10.0.99.0/ip dnsset allow-remote-requests=yes servers=10.0.99.1/ip routeadd dst-address=0.0.0.0/0 gateway=10.0.99.1  routing-table=main/tool mac-serverset allowed-interface-list=MGMT/tool mac-server mac-winboxset allowed-interface-list=MGMT
...........
As per above, VLANs are not etherport or WLAN ports and not set in /interface bridge ports
..................


Receiver (client side):
Code:
# feb/23/2024 04:47:20 by RouterOS 6.49.8## model = 911-5HnD/interface bridgeadd name=RX-Bridge vlan-filtering=yes/interface ethernetset [ find default-name=ether1 ] name=TrunkPort-RX/interface wireless security-profilesset [ find default=yes ] supplicant-identity=MikroTikadd authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys name=\mikrotik_conn supplicant-identity="" wpa-pre-shared-key="papie\BFak69!" \wpa2-pre-shared-key="papie\BFak69!"/interface wirelessset [ find default-name=wlan1 ] antenna-gain=2 band=5ghz-onlyn channel-width=\20/40mhz-Ce country=poland disabled=no frequency=auto installation=\outdoor mode=station-bridge nv2-preshared-key=test1234 nv2-security=\enabled radio-name=JP2 security-profile=mikrotik_conn ssid=MikroTik \wireless-protocol=nv2/interface vlanadd interface=RX-Bridge name=vlan-MGMT vlan-id=99/interface listadd name=MGMT/interface bridge portadd bridge=RX-Bridge  interface=TrunkPort-TX ingress-filtering=yes  frame-types=admit-only-vlan-tagged add bridge=RX-Bridge  interface=wlan1 ingress-filtering=yes  frame-types=admit-only-vlan-tagged /ip neighbor discovery-settingsset discover-interface-list=MGMT/interface bridge vlanadd bridge=RX-Bridge  tagged=RX-Bridge,TrunkPort-RX,wlan1   vlan-ids=17,89,99/interface list memberadd  interface=Vlan-MGMT  list=MGMT/ip addressadd address=10.0.99.3/24 interface=vlan-MGMT network=10.0.99.0/ip dnsset allow-remote-requests=yes servers=10.0.99.1/ip routeadd dst-address=0.0.0.0/0 gateway=10.0.99.1  routing-table=main/tool mac-serverset allowed-interface-list=MGMT/tool mac-server mac-winboxset allowed-interface-list=MGMT

Statistics: Posted by anav — Fri Mar 15, 2024 4:44 pm



Viewing all articles
Browse latest Browse all 15133

Trending Articles