VLAN Documentation / References: VLAN Interfaces: wiki.mikrotik.com/wiki/Manual:Interface/VLAN Bridge VLAN Table: wiki.mikrotik.com/wiki/Manual:Bridge_VLAN_Table Switch Chip: wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features Hardware Offloading: wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_Hardware_Offloading help.mikrotik.com/docs/display/ROS/L3+Hardware+Offloading

This is by far the cleanest and most comprehensive explanation I've found. By a lot. I've lost track of how many times I've read through pcunite's guide and all MT's documentation. None of it has managed to hit on the methodology in an effective way. This, sir, is glorious. Thank you.

@TheNetworkBerg

Жыл бұрын

Thank you so much for nice comment, and thanks for watching the video!

@DJAndomor

Жыл бұрын

I was just want write same comment. At last I fully understand vlans on mikrotik. Thank you

@stoppostingaboutballer64

Жыл бұрын

Indeed

Thank you for this. New to the mikrotik ecosystem. Your videos have been incredibly helpful

awesome video, very few guys understand how this works, very well explained here!

This was awesome, I needed a simple way to do the vlans based on Cisco's concept. The last method was easy and clean. Thanks.

Man, gotta say. Thank you for your content. it rocks.

Thank you for the explaination, I'm new to Mikrotik and this video has been really helpful

This is absolutely incredible explanation and training material! Thank you for taking the time to go and create this material.

Thank you again. Your vids are one of a kind. Appreciate the help. Looking forward to the next

@TheNetworkBerg

2 жыл бұрын

Glad you like them!

Very complete explanation! Thanks.

That is a great resource ! This will help with my homelab setup.

My friend, you're the best!

Excellent video, your teaching skills are superb, can't wait for another video.

@TheNetworkBerg

2 жыл бұрын

Thank you very much!

Great video, thanks! Wait for a video with vlan on one bridge with all of mikrotik interfaces. Thanks a lot, it's very helpfull

It's great video. Thank you.

2:12 - "... and what 80102.q allows you to do ..." :D Yeah, sometimes standards are a mouthful. :) Cheers, brother, I adore your channel!!!

@TheNetworkBerg

2 жыл бұрын

Hahaha they definitely can be, especially if you are a bit dyslexic.

The best explanation I have seen. Thank you

@TheNetworkBerg

2 жыл бұрын

Wow, thanks!

Great Video, thanks man, you are a genius on Mikrotik.

This is very smart publicity work by Mikrotik. These are exceptionally powerful pieces of equipment. But their native manuals and documentation fail catastrophically to convey this in terms of making them accessible to people like myself with only a very basic level of understanding, but who want to dive deeper with out spending thousands on training courses. What that translates to for Mikrotik is more sales - much more. Because content like this opens the door for so many people into just how powerful this equipment is. I'm using a Routerboard 1100 in my house and am only now just dipping my toes into the water of what it is capable of (I bought it over 3 years ago). But even with the small amount I already know, I wouldn't use anything else.

@TheNetworkBerg

Жыл бұрын

This is not done by MikroTik, they are not endorsing me in any manner and have never reached out to me for any sort of publicity. This is my own personal project where I wanted to make information like this more accessible to everyone in the community. I will take this as a compliment though ^^ And feel free to leave any suggestions or comment on the work that I have done.

@johnrauner2515

Жыл бұрын

@@TheNetworkBerg Well in that case good on you. Shame Mikrotik still haven't woken up to this. Even when I wrote that I was thinking it was a bit of a shock to see them finally doing this - something they should have been doing for some time.

Respect to your good work, thanks a lot

@TheNetworkBerg

Жыл бұрын

Much appreciated!

Thank you very much! Mikrotik docs are very hard to understand especially when using winbox. I have been trying to set up VLANs on my Mikrotik Router for hours. But everything works out great now :).

I'm subbing on Patreon. This in incredible and I can't wait for the rest of the videos

@TheNetworkBerg

2 жыл бұрын

Thank you very much David, it is definitely not expected but I do appreciate it very much!

just found your channel and went over your VLAN and bridging videos on mikrotik as a refresher, very awesome material!! good pace and easily digestible, thank you for creating this content! If I can request a video suggestion for the future on how to create a span port, have searched high and low for this topic and to no avail. Am basically attempting to practice auditing my own home network traffic via a pcap capture but having trouble trying to learn how start with configuring simple span port/interface etc. Cheers!

@TheNetworkBerg

Жыл бұрын

Thank you for the kind words, I do not currently have a video covering port spanning/mirroring but I will definitely consider it. I have thought about creating a video series covering more layer 2 concepts and reached out to my community on KZread regarding it. I am just waiting to see if someone is willing to provide me with a couple of switches to better demonstrate things, but if not I may just use some small routeboards for the demonstrations as well :)

Thank You, for explanations can you please create same scenario for Native VLANs on MikroTik.

Thanks so much for your Video. I have trouble to install VLANs on my Network with the Microtik Router OS. Put now everything works fine.😅

thanks for this. and I'd recognize Night City anywhere, lol.

Thank You, for explaining this in different ways. I have a question - is there a way to setup multiple vlans on single port(in Mikrotik2) and then statically assign IP adresses for next host(Mikrotik4 or Mikrotik5) from whichever vlan IP pool? For example: Mikrotik1(eth1 trunk, both vlan=10,20) Mikrotik2 (eth2 trunk, both vlan=10,20) --> Mikrotik2 (eth3 access, PVID=10) --> default vlan for device from eth3 will be vlan10, but with possibility to join vlan20 subnet(statically assign IP?). Essentially multiple vlans on single port from next device(managable switch) after initial router.

good job😎

Thanks dude

Hi brother, salute off Kazakhstan

As always, the way you explain about topic is awesome, i like that you break whole video into different sets and third set was most difficult to understand cause i am at learning stage, better if you can provide an identity to router which can be visible in winbox window while you are doing configuration on it. so that we can understand on which router we are currently working. i would like to thank you for making such a informative and wonderful videos which makes learning a fun. Thank you.

@tariq4846

6 ай бұрын

You picked up words of my mouth.

Love IT!

19:30 For R1, usually I just create a bridge, add ether2 and ether3 to that bridge, then add the VLAN interface to the bridge. Much more simple than adding multiple VLAN interface to specific port then bridging vlan interface. You have 2 interfaces, let say you have 8...

@Darkk6969

2 жыл бұрын

That's basically what I did with mine since all the ports are attached to the bridge.

@michaelculley8790

Жыл бұрын

Plus having 2 bridges you end up not being able to use hardware offloading on one bridge, at least on my device.

Thanks man

Thank you for this video. Can you also make video about multiple VLANs over EoIP, please?

Your explanations are much better than most written online resources and easier to understand than Mikrotik's own documentation. Thanks for these videos!

@TheNetworkBerg

Жыл бұрын

Glad it was helpful!

Huge thanks for the shared knowledge. I enjoy watching the channel. Can you tell, please which environment is used for the simulation?

Great guide thank you! 6:35 if I implement capsman local forwarding in a network with vlans, the vlan configuration on the AP must be on the cpu (bridge) instead of the switch chip. Is this correct?

This video is really helpful, thank you. How would one use the untag feature for a CAP assigned to a particular datapath?

Next time you do lab please change default names of routers to avoid confusion, and thank you for sharing your knowlage

@TheNetworkBerg

Жыл бұрын

I totally agree and this was a whoopsie from my side ^^

awesome..

watched edgerunners and wanted to watch vlan stuff to get it off my mind lmao. saw the intro and everything flashed back

@TheNetworkBerg

Жыл бұрын

Sorry fabi, this is a netrunner channel 😁

New to Mikrotik and your videos have been so very helpful. Either I am not catching it or I simply can't find a video to explain how to handle the following. zt1, Ether1 - WAN, Ether3-hybrid 'trunk' to switch (VLANS untagged(1), tagged 10, tagged 20, tagged 30). Do you need to bridge this and use pvid to change the default untagged to a VLAN for any reason to allow LAN traffic to the zertotier? maybe a diagram might make this easier than text :)

Great video. Had to slow it down for the 'third' way you covered. Still seems like the MT way way of doing things on layer two is overly complicated. But you do a great job of explaining it.

@TheNetworkBerg

Жыл бұрын

Thanks you for the kind words, yeah I agree MikroTik is definitely something different when it comes to L2 networking. I've seen many people on Reddit or Facebook groups generally asking about VLANs because it seems to be the most confusing subject regarding MikroTik. My videos covering VLANs are also the most viewed on my channel so it's definitely something a lot of people look into that they feel they need help with.

Great job! Thanks. What network drawing tool do you use?

waiting for your next content 😤

@TheNetworkBerg

2 жыл бұрын

Busy working on it :D!

Thanks!

@TheNetworkBerg

7 ай бұрын

You're welcome! Thank you for supporting the channel ^^!

The way I've created vlans (vlans for the router side, not Switch side) across multiple downlink/trunk interfaces is make a single bridge, add all the ports I want as trunks and create the VLANs on the bridge interface. First time I've seen it done that way (example 3). I'm assuming the way I do it is fine as well? Something I've learned in my time with mikrotik, you can make just about anything work that you want. The skill with mikrotik is making it work efficiently. Problem is, sometimes it's hard to tell if the way you did something is actually efficient or not. LOL the things I Set up and work fine in my lab may not necessarily work in an enterprise setting with 1000's of devices requesting dhcp and dns, etc.

Great video and excellent explanation!! Could you also cover setting up VLAN's with only one bridge and not having them separately for each VLAN? Tx

@TheNetworkBerg

2 жыл бұрын

Thank you for the kind words, I believe my third scenario illustrates how to setup a single bridge with multiple VLANs over it. Although I take it you are talking about creating multiple VLAN interface and just adding the interfaces to the same bridge like on the second scenario. That's definitely another viable option, similar to how you can create a VLAN interface and instead of binding it to a physical interface you bind it to the bridge and then any ports within the bridge will be tagged for all the VLANs inside of it. It's just kind of more ways how to accomplish the same thing on with different steps. I am still amazed at how many different and new ways that I wasn't even aware of before this video that you can also use to configure VLANs. Maybe MikroTik needs to revise how VLANs can be configured on their devices and standardize it to a single format for people to more easily understand and absorb. Although that might also take away some of the awesome custom solutions people come up with by using these different and unique ways of configuration.

@Soda88

2 жыл бұрын

@@TheNetworkBerg You definitely should've pointed out that the 3rd way is the optimal way of doing VLANs because it's the only way of preserving hardware offloading across all VLANs on devices with switch chip. It works for both switching CRS series and routing RB/CCR series of devices, obviously if said device has a switch chip, but even if it doesn't.

@TheNetworkBerg

2 жыл бұрын

@@Soda88 I think what I want to make clear in the next video is that the scope of how VLANs are being covered in the MTCRE is not quite in the same light as what many people's expectations are. Which is to implement VLANs on their LAN/DC networks on a switching layer. The MTCRE focuses more on using VLANs as a way of extending the network and routing traffic between devices. To optimally understand VLANs and many L2 concepts like port mirroring, STP, etc I would suggest looking at the MTCSWE certification which focuses more on the aspect of using MikroTik for switching purposes. My ultimate goal after the next video is for a user to be able to add a VLAN on a Routerboard/CCR/CHR/x86 device to span a L2 service from an edge to a CPE to deliver IP services and route traffic.

@makeitcloudy

2 жыл бұрын

@@Soda88 aha ! so 3rd way to preserve the hardware offloading, that was my question after watching this incredibly well explained material!

Thank you !!! Really well done. Unfortunately, the third method, which seems the best, I can't follow it. The second method works perfectly but I would like, of course :D, to try the third one.

hi thanks for the info but do you also have examples that are configured on one router.I want to create a separate network for my smart home products

Thanks for the explenation and video. Why dont you use vlan filtering on the bridge? You can only have one bridge with hw-offload. Kind regards

@TheNetworkBerg

2 жыл бұрын

Thank you for the kind words. I think my third example currently illustrates this where I have configured a single bridge with VLAN10/VLAN20 being done at a Layer 2 level on MikroTik 2 and MikroTik 3.

YOU ARE THE MAN!!! THE WHOLE DAY TODAY IVE BEEN TRYING TO FIGURE OUT HOW TO DO INTERVLAN IN MIKROTIK!!! SINCE IM USED TO CISCO. BUT BOY YOU MAKE ME REALIZED AND LEARN SOMETHING TODAY@!!! THANKS MAN1

Hi Thank you so much for the information you share. Great job. Very interesting, but do you also have videos on how to create a VLAN with a router/switch that has 2 switch chips. And the app eve that u use, is this an app specific for mikrotik virtual environment. for a test environment.

i am happy that i found this chanell, am still learning mtcna but am sure this mtcre videos will be my guide after classroom. whenever i want to further my studies. hi sir, do you think it a good idea to dive into mtcre right after mtcna?

@TheNetworkBerg

Жыл бұрын

Yes it is perfectly fine to go for the RE directly afterwards

Thank you for sharing your knowledge. I am new to VLAN; I have just on router, and one switch, I wish to configure 5VLANS on 5ports on the router, and then connect the same ports to my switch where APs can pick the IPs and broadcast to it's devices. Please help me

First of all thanks for the video! Maybe a stupid question but isn't it a Best Practice to have only one bridge on Switches with a Switch Chip (eg.CRS3XX) in order to use hardware offloading?

@TheNetworkBerg

2 жыл бұрын

Most probably, which is sort of what the third scenario in the video covers. I am also covering the MTCRE which treats VLANs a bit in a different light as we use it as a means for extending networks and spanning L2/L3 services while working on RouterBoards/CCRs/CHRs/x86's etc If you want to get more into best practices for how to configure a MikroTik as a switch on platforms like the CRS and implementing this in a LAN or DC then there is a completely different track covering that which is called the MTCSWE (MikroTik Certified Switching Engineer)

Hello. Very interesting video. Do you plan to elaborate a lab in EVENG, where you integrate Fortinet with Mikrotik in an Inter VLAN Routing environment, using both brands? Regards.

If I have a MikroTik CRS 328 and it connect to a Netgate 6100. Do I use a Bridge on the Switch or just setup vlan? Any help would be great. I am using the 1GE Wan for ISP and than the 10GE SFP for the Uplink port.

Great video!!! One QQ- At around 8:15 you said that most people wouldn’t need to know how to configure VLANs directly on the switch chip. I think you are implying that much of the new hardware is doing this on the bridge. But I have found that you still need to understand this legacy VLAN configuration for wireless (CAPsMAN) because of switch chip in the hAPs and cAPs… please confirm if time permits.

@TheNetworkBerg

2 жыл бұрын

Correct, most of the new hardware with the "Bridge" method with HW Offload and specifying /interface bridge ports is essentially telling the router to use the switch chip for which VLANs and which ports. This video is aimed at the MTCRE certification, and how to use VLANs on MikroTik routers. I really cannot comment on CAPsMAN or MikroTik APs as I do not use it or these devices. Perhaps in the future I will get a few APs and configure CAPsMAN to see if there is some reliance on setting tags up directly on the switch chip.

if i have a mikrotik router board, the trunks you talk about going to device 2,4,5 or can these all these be virtualized by the main router board or are these other physical devices?

Thank you for clearing these up! I set up the similar setting like this (with Mikrotik1 and Mikrotik2) Question: why my laptop (under Mikrotik2) on VLAN10, still can ping other device on VLAN20? Should the VLAN can not ping each other? Any hints? Thank you

@8scp9ub42

2 жыл бұрын

(I'm using the 'Bridged VLAN' method)

@tandikayetkwai1491

2 жыл бұрын

i have a same question about this

@TheNetworkBerg

2 жыл бұрын

If you have a L3 device configured with both vlans in the same routing table they will be able to communicate. You need to add Firewall Forward rules to restrict traffic between the VLANs

@8scp9ub42

2 жыл бұрын

@@TheNetworkBerg Ah okay. So by default the 'Mikrotik1' (who assign IP address using DHCP, to both VLAN) allow it to be communicating each other. So I have to add the Firewall Forward rules in the the 'Mikrotik1'. Am I right? Thank you

btw, very clear explanation.. thankss... btw, what app are you using for the presentation? (the clickable diagram) cheers..

@TheNetworkBerg

2 жыл бұрын

Thank you! I am using a network emulator, which is called EVE-NG. It allows you to add virtual equipment like CHRs to add into topologies and configure equipment. Which is awesome because this is REAL equipment on a virtual level so you get hands on experience without having to buy a physical MikroTik or even other devices.

@8scp9ub42

2 жыл бұрын

@@TheNetworkBerg Just About to ask the same thing abt ths. thanx

Sir when are going to integrate cisco switches with mikrotik for inter vlans with redius server?

If you use hardware, in most cases, it is better to use only one bridge interface. All actions like tagging, untagging interface creating are happening in that one bridge, tagging/untagging can be different, based on model and its switch chip features, but idea stays the same. PS: Great video, learned a lot from you and I hope to see ZT video on ROS.

@TheNetworkBerg

Жыл бұрын

Thank you for the comment and I agree with you if you are just going to be doing basic switching behind the MikroTik to a LAN/DMZ network. I actually covered ZeroTier back in December, it was one of my most viewed videos at the time. You can catch that video here: kzread.info/dash/bejne/l3p9l5ujepWzfZs.html Although the video was made during v7 Beta the principles are still exactly the same, only bad thing is that ZT on MikroTik is a bit outdated :C

@maigonis.elleris

Жыл бұрын

@@TheNetworkBerg Tnx, ill have a look.

your awesome

Do you have test romon or speedtest over vlans?

Nice content, We are just starting with VLANs in our school, as our flat network is not working with 4000 thousand IP addresses. If I may ask, what is the best way to use our Mikrotik CCR2004-16G-2S+ hardware or software vlans? I'm still trying to wrap my head around the whole VLAN network setup.

@TheNetworkBerg

4 ай бұрын

For a school network or general campus/dc setups I would highly suggest using the single bridge method. This is considered "The correct way" this documentation on MT's site really helped me get a better understanding of the setup: help.mikrotik.com/docs/display/ROS/CRS3xx%2C+CRS5xx%2C+CCR2116%2C+CCR2216+switch+chip+features

Hi Network Berg, how come I am seeing packets tagged with simply adding the vlans on a interface? Is there any actual need for bridging? Thanks for these awesome videos.

@TheNetworkBerg

2 жыл бұрын

When you use the bridge method and you add /interface bridge ports the configuration is actually injected into the Switch chip to handle hardware offloading and achieving higher speeds as this could potentially work at wire speeds. It's definitely not a requirement though. Especially if you want to do stuff like firewalling with your VLANs as that traffic will then need to be handled by the CPU regardless. So it sort of depends on your requirements and what you want to do with the VLANs

@ldavader2704

2 жыл бұрын

@@TheNetworkBerg thanks for the clear explanation!

My issue is the dhcp is not passing through the tonthe bridge. MT says I cannot apply client to a slave interface

This Mikrotik Cloud Router Switch is really confusing when it comes to VLAN's when you are use to real switches like Cisco and Alcatel-Lucent. Do you have a video where you actually configure a Mikrotik switch where you configure an access VLAN and then tagging for example on the Voice VLAN or even LLDP for Voice. I do not know what is the best way on doing this on the Mikrotik for all ports

Hello. Which version of MikroTik OS and file type did you use to get 10 interfaces? Each CHR I download only gives me 4 interfaces. Thank you for your uploads. That have been helping me extensively!

@TheNetworkBerg

Жыл бұрын

Hi there, depending on what emulator you use, you can add additional interfaces on the emulator itself. With EVE-NG when you import the nodes the default is set to 4 interfaces. You can change this to something different. I tend to either do 10, 12 or 24 interfaces.

@TMouse-hd5jb

Жыл бұрын

@@TheNetworkBerg, Thank you so much! I am glad it was something simple to change in the import.

Hi could you do a video about wifi setup especially with new wifi packages.

Thank you for the video, one thing though, If I do separate bridges for each VLAN on the main router, won't that mean that it wont have harware offloading turned off?

@TheNetworkBerg

Жыл бұрын

Yes, adding multiple bridges will have that type of impact and performance will be degraded. Adding a single bridge and doing your tagging/untagged on that bridge would be the best solution for hardware offloading and the best performance.

@SaifBinAdhed

Жыл бұрын

@@TheNetworkBerg I appreciate your reply, I tried doing it with a single bridge, but because these are slave interfaces I keep getting dhcp server cannot be set on slave interface message. I love that mikrotik has several ways of doing the same thing, but it is sometimes very confusing as well :)

Hi friend-i have ccr1036-8G-2S+ and on my router add 1 vlan with dhcp + 2 bounding which added to this bridge and on this network i have 1400 host.Uplink vlan i add to bridge and in this bridge add my uplink SFP+1.Then have 2 vlan which interface is SFP+2 and on this port i have 1000 host.In the evenings after 21:00 when all hosts is online,my router CPU up to 100%.What i do mistake? can i send screenshot to you mail ?i dont add tagged untagged on vlans and dont use vlan filtering..Thank you

@bushcraft.azerbaijan

Жыл бұрын

how you think,if after router i put Cisco 3750x or cisco 4948 and trunk all vlans to swich and delete bridges,then cpu use can down to 40-60 ?i now bridge use from cpu but i think cpu can up to 100% when i will ad 5-6 bridge((

Hello We have configured our Mikrotik router as a hotspot, connected through Cisco switches, and then connected from the switch to Cisco APs, the problem is just that when connected to the PC through the wireless after 10 minutes or less not work wireless but working Android no problem just the problem is PCs maybe the issue is NAT or filter rules

I am having issue with which method to use, i tried the bridge method without vlan filtering i can only communicate with some vlan and not other. I trying to add trunking to my exsi server

Hey ,sir can you help I have the question regarding accessing mikrotik to mikrotik through Mac address on a different broadcast domain How can I do that

Great content, is there a way to do the exam remotely?

@TheNetworkBerg

2 жыл бұрын

As far as I know you still need to go to a trainer for your initial certification, however, I have read and heard about people who recertify are able to arrange to do that remotely with their trainer. I would check up on the MikroTik forums regarding this.

Ok. got it right till the end. Everything works now. Would it be possible to upgrade your tutorial by adding firewall rules between VLANs? Say, I'd like VLAN10 and VLAN20 to get access to internet, VLAN10 get access to VLAN20 but not the other way round, expect for VLAN20 get access only to an IP in VLAN10, the printer's Ip for example. Thank you.

@TheNetworkBerg

2 жыл бұрын

In the new video kzread.info/dash/bejne/hnV7ucGRc9SpltY.html I cover how to setup ACLs for Inter-Vlan routing, give it a watch. There should be a timestamp for it too :)

@jeytis72

2 жыл бұрын

@@TheNetworkBerg oh yes, I see. Very useful as a start. Anyway, I hope you're going to delve a bit deeper into that with a dedicated tutorial. Thank you very much indeed.

@TheNetworkBerg

2 жыл бұрын

I will definitely consider a dedicated tutorial about the subject :)!

@jeytis72

2 жыл бұрын

@@TheNetworkBerg Thanks

may i know what is the application name that u use to draw the network diagram? very clearly and beautiful, thank u.

@TheNetworkBerg

Күн бұрын

It is called EVE-NG a network emulator

Bra, het iemand al gese jy lyk soos die dude van Linus Tech Tips haha, nice.

@TheNetworkBerg

Жыл бұрын

Hahahaaha dankie! Nee dit is 'n eerste :P!

Does this kind of procedure work also on CRS112? Thanks

@TheNetworkBerg

4 ай бұрын

Here is the most optimal way to configure VLANs on a CRS112 from MikroTIk: help.mikrotik.com/docs/pages/viewpage.action?pageId=103841836

Which is the best method to use for VLANs and VLAN trunks that would give the best performance. I assume the software VLANs, are going to go via the CPU, so the overall bandwidth would thus be throttled down to the CPU bandwidth.

@TheNetworkBerg

8 ай бұрын

Best performance would be creating a bridge and having the switch chip manage all the VLANs, but when it comes to the routing world and routing packets you will typically see and use software defined VLANs between networks. It's more about what you want to use VLANs for, if it's just on a LAN network or a Data Center then a single software bridge with all VLANs is the most ideal setup for max performance.

@turb0t

8 ай бұрын

@@TheNetworkBerg Thank you. I don't have plans on routing, I just need it to switch at L2

I'm not sure but it looks like there is a misconfig on your video at 21:28 according mikrotik documentation.

What would be the easiest way to block inter-vlan routing but allow for example my IT vlan to communicate with all of the VLAN's?

@TheNetworkBerg

Жыл бұрын

Firewall rules, you could in essence just drop all forward traffic between VLANs and only set Src=IT Dst=All other VLANs to be allowed. The firewall is stateful so return traffic will be allowed automatically.

I think Im overthinking VLANs. As in your lab on Mikrotik 1 with eth2 trunk, how do I make eth3 access port for VL10 and eth4 access port for VL20. Would you explain tagged and untagged a bit more please.

@TheNetworkBerg

2 жыл бұрын

The third option is what you want to make use of where you will configure a bridge and do the VLAN tagging through the bridge. So your configuration should look something like this: /interface bridge add name "Switch-Bridge" vlan-filtering=yes /interface bridge port add interface=ether2 bridge=Switch-Bridge /interface bridge port add interface=ether3 bridge=Switch-Bridge pvid=10 /interface bridge port add interface=ether4 bridge=Switch-Bridge pvid=20 /interface bridge vlan add interface=ether2 tagged=10,20 /interface bridge vlan add interface=ether3 untagged=10 interface bridge vlan add interface=ether4 untagged=20 You can also do this through the GUI obviously by just adding a bridge there, enabling VLAN filtering and then adding your bridge ports and bridge VLANs. This should in theory make ether2 a trunk port that will send VLAN10 & VLAN20 to the remote device as tagged frames while untagging ether3 for VLAN10 and ether4 for VLAN20.

@diegkol

2 жыл бұрын

@@TheNetworkBerg I got it now! I missed the obvious which you said so clearly "We are not going to set interfaces here when doing it as switch mode.." Waardeer jou antwoord baie.

Can we configure different ports of a single HexS router with different POE Connections and VLAN..

@deepaknagar4331

2 жыл бұрын

PppoE

@TheNetworkBerg

2 жыл бұрын

Well yes, if you remove the default configuration each port will be treated as a separate broadcast domain and can run its own set of VLANs or PPPoE connections.

What OS do you use? Ubuntu Desktop? Or other? Just a curiosity

@TheNetworkBerg

2 жыл бұрын

My main OS is Win11, although I tend to use Ubuntu Desktop for my labs since I enjoy the OS when it comes to Networking/Programming so I have that running on a VM on my actual machine. This is the host you usually see me configuring networks on :)

Hello I am interested in configuring a voice vlan and a data vlan for a voip phone can you help me?

L2 - frame L3 - packet L4 - datagram/segment

@TheNetworkBerg

2 жыл бұрын

Correct.

hi Im just vlanning on my mikrotik router only PC downstream!! will i be able to create a DHCP server on the Mikrotik_1 on the actual "VLAN" interface? seems that its telling me that can't have DHCP on a slave interface? basically I set the IP addresses on the VLAN, then bridged the ethernet port and the VLAN interface interface but had to set the actual Bridge as the DHCP server otherwise it didn't work am I doing something wrong? second question : on Mikrotik_2 you added the VLAN IPs for each VLAN , is this still necessary when Vlanning using the bridging method?

@TheNetworkBerg

3 ай бұрын

If you are using a single bridge to manage the vlans you must create a VLAN interface and bind it to the bridge then use that as the DHCP Server.

@antoniocerasuolo757

3 ай бұрын

@@TheNetworkBerg hi thanks i think the best way is as you explain to bind each VLAN to it's own bridge and set up DHCP on the bridge , it's cleaner and more logical right? the bridge that i created contains the VLAN interface and the eth port itself which i guess was not necessary to include correct?

@TheNetworkBerg

3 ай бұрын

@@antoniocerasuolo757 not exactly, multiple bridges cannot hardware offload. I'll see if I Can make a video on VLAN management and adding DHCP to those VLANs in an upcoming video so keep a lookout.

@antoniocerasuolo757

3 ай бұрын

@@TheNetworkBerg hi but that's exactly what you did in your VLAN introduction episode 1 at the end of the video you said that it was the standard way to create VLANS and you created 1 bridge for each VLAN interface on the Router? and then assigned the DHCP to the bridge? can you please clarify this last point?

@TheNetworkBerg

3 ай бұрын

​@@antoniocerasuolo757 This video is aimed at the MTCRE and uses VLANs in a routing concept to move traffic between networks and is more for seeing the different ways you can use VLANs and to gain knowledge to pass the MTCRE exam, the most optimal way for home or even data center use would be a single bridge where you configure all VLANs and bind all interfaces to. You can find more information in the documentation with this case study: help.mikrotik.com/docs/display/ROS/Basic+VLAN+switching This is why I want to create another video aimed more at pure switching.

When i add the dhcp server like this it shows as red in winbox?

@TheNetworkBerg

7 ай бұрын

Make sure your interface you are binding it to is not a slave interface you cannot add dhcp to a port in a bridge you either add it to the bridge or remove a port from a bridge and add it as a master port

Can you create a full course from scratch ? in order like: lesson 1 lesson 2 and so on, New subscriber

@TheNetworkBerg

2 жыл бұрын

Hello there, I am creating a playlist which will have all of the videos in a structure order to watch :)

Only one brdige at the same time can be HW offloaded, so why you have more bridge interfaces?

@TheNetworkBerg

7 ай бұрын

Because this is for the MTCRE and not the MTCSWE, it's just another method of using VLANs to route with and that traffic will most likely be used in the CPU.

Does he mistakenly say "set its tagged interface to vlan 1", and not "ether1", at 23:45?

@TheNetworkBerg

Жыл бұрын

Probably

A bit hard to follow which router is used at the moment and what we see on screen when you use winbox, it would be kind if you set up Identity of the router.

@TheNetworkBerg

2 жыл бұрын

Sorry it was a bit hard Peter, I have been working on labeling equipment in all my videos. Thank you for suggestion!

hi i will to know more about vlan on two to three route

And which way is recommended?

@TheNetworkBerg

8 ай бұрын

Depends on your requirement, if its for routing I would recommend a software defined vlan interface, if it is for pure L2 connectivity/switching then a single bridge managing all vlans will give you the best performance

God bless you for this effort.... can you please help me... can I receive vlan and send it to another router without use bridging 😇

@TheNetworkBerg

2 жыл бұрын

Thank you! Yes, you can just create a VLAN interface and tag it to the interface that will be connecting to the other router with the VLAN-ID you want to use. No bridging required.

@humamadel4946

2 жыл бұрын

@@TheNetworkBerg i know that... but I'm already receiving vlan tag and use it in my router and there is a new router connected i need to send the vlan tag to...... i add vlan to the interface go to the new router and make it bridges with vlan i receive to be same network.... this Scenario could be with out bridge?

@TheNetworkBerg

2 жыл бұрын

@@humamadel4946 No, that is exactly what bridges are designed for. Let's say you receive VLAN100 on ether1 from a provider and you also want to span VLAN100 out over ether2 to another router so that they can communicate with that provider over the same VLAN then bridging would make the most sense to implement.