Vlan Mirkotik

Vlans on Mikrotik environment

1

Vlans on Mikrotik environment
I will try to explain how to deal with vlans and qos on Mikrotik devices.
In switching technology, we have three modes of ports:Access, Trunk and Hybrid.
An access port should be used only with untagged packets. This kind of port is where you connect your PC to the
switch.
An trunk port is capable of receiving andforwarding packets from multiple vlans. This one is to interconnect
switchs.
An Hybrid port is a special mode that allow untagged and tagged packets on the same port. Imagine that you have a
Voip desktopphone, you will connect your PC to the phone and the phone to the switch. We will have a vlan for
voip and untagged data for the PC.
Vlan interfaces on Mikrotik devices should always be seen as "addtag on egress / remove tag from ingress".
Lets look at this network diagram:

To be able to achieve this setup we need eth1 and eth2 as access-ports and eth5 as trunk port.
To config the vlans onthe trunk port:
/interface vlan add name=vlan-10 vlan-id=10 interface=ether5 disabled=no
/interface vlan add name=vlan-20 vlan-id=20 interface=ether5 disabled=no
To be able to forward the packetsfrom access-ports to vlans we need bridges:
/interface bridge add name=br-vlan10 disabled=no
/interface bridge add name=br-vlan20 disabled=no
Now just add the ports to the bridges:
/interface/interface
/interface
/interface

bridge
bridge
bridge
bridge

port
port
port
port

add
add
add
add

interface="vlan-10" bridge="br-vlan10" disabled=no
interface="ether1"bridge="br-vlan10" disabled=no
interface="vlan-20" bridge="br-vlan20" disabled=no
interface="ether2" bridge="br-vlan20" disabled=no

Vlans on Mikrotik environment
It's done, only hosts on the same networkwill be able to communicate.
And if we have another switch in the middle of the trunk?

Configuration on SW1 and SW2 remains the same, on SW3 we need to:
/interface bridge add name=br-trunk...