SKFREE
Mikrotik™ Podpora - CRS a vlan
cobain - 02.03.2015 - 11:46
Post subject: CRS a vlan
Ahojte,
par dni sa uz snazim nastavit mikrotik switch aby pracoval s vlanami, ale nedari sa
na routri mam spravne vsetko nastavene, ale ten switch nie a nie prinutit aby vlan id 1001 untagol na porte 6 a vlanu id 1002 na porte 7. nemate niekto rozchodene normalne vlany na tomto switchi?
na porte 6 servisny NB a na porte 7 siet
dakujem vopred za pomoc
cobain - 02.03.2015 - 13:00
Post subject:
ak by niekoho zaujimal konfig tak tu je >
/interface ethernet
set [ find default-name=ether3 ] master-port=ether1
set [ find default-name=ether5 ] master-port=ether1
set [ find default-name=ether6 ] master-port=ether2
set [ find default-name=ether7 ] master-port=ether2
set [ find default-name=ether8 ] master-port=ether2
set [ find default-name=ether4 ] master-port=ether1 name=ether
/port
set 0 name=serial0
/interface ethernet switch egress-vlan-tag
add tagged-ports=ether2 vlan-id=200
add tagged-ports=ether2 vlan-id=300
add tagged-ports=ether2 vlan-id=400
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=300 ports=ether7 sa-learning=yes
add customer-vid=0 new-customer-vid=400 ports=ether8 sa-learning=yes
add customer-vid=0 new-customer-vid=200 ports=ether6 sa-learning=yes
/interface ethernet switch vlan
add ports=ether2,ether6 vlan-id=200
add ports=ether2,ether7 vlan-id=300
add ports=ether2,ether8 vlan-id=400
/ip address
add address=192.168.88.2/24 comment="default configuration" interface=ether1 network=192.168.88.0
skusal som aj podla tohoto
http://wiki.mikrotik.com/wiki/Manual:CR ... AN_Routing
example1
a aj podla tohoto
http://www.imxpert.co/Blog?id=3
topology 1
cobain - 03.03.2015 - 09:08
Post subject:
tu su nastavenia oboch zariadeni ak niekoho nieco napadne co mam zle budem vdacny za pomoc. predpokladam ze vlany nebudu prelozene na tom switchovacom cude.
CCR-1016
/interface vlan
add interface=ether11 l2mtu=1586 name=vlan1 vlan-id=200
add interface=ether11 l2mtu=1586 name=vlan2 vlan-id=300
add interface=ether11 l2mtu=1586 name=vlan3 vlan-id=400
/ip pool
add name=dhcp_pool2 ranges=192.168.20.2-192.168.20.254
add name=dhcp_pool3 ranges=192.168.30.2-192.168.30.254
add name=dhcp_pool1 ranges=10.10.0.2-10.10.0.254
/ip dhcp-server
add address-pool=dhcp_pool2 disabled=no interface=vlan1 name=dhcp2
add address-pool=dhcp_pool3 disabled=no interface=vlan2 name=dhcp3
add address-pool=dhcp_pool1 disabled=no interface=ether10 name=dhcp1
/ip address
add address=10.0.0.2/24 comment="default configuration" interface=ether1 network=10.0.0.0
add address=192.168.88.1/24 interface=ether11 network=192.168.88.0
add address=192.168.20.1/24 interface=vlan1 network=192.168.20.0
add address=192.168.30.1/24 interface=vlan2 network=192.168.30.0
add address=192.168.40.1/24 interface=vlan3 network=192.168.40.0
add address=10.10.0.1/24 interface=ether10 network=10.10.0.0
/ip dhcp-server network
add address=10.10.0.0/24 dns-server=8.8.8.8 gateway=10.10.0.1
add address=192.168.1.0/24 dns-server=8.8.8.8 gateway=192.168.1.1
add address=192.168.20.0/24 dns-server=8.8.8.8 gateway=192.168.20.1
add address=192.168.30.0/24 dns-server=8.8.8.8 gateway=192.168.30.1
add address=192.168.88.0/24 dns-server=8.8.8.8 gateway=192.168.88.1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/ip route
add distance=1 gateway=10.0.0.1
CRS125-24G-1S-RM
/interface ethernet
set [ find default-name=ether3 ] master-port=ether2
set [ find default-name=ether4 ] master-port=ether2
set [ find default-name=ether5 ] master-port=ether2
set [ find default-name=ether6 ] master-port=ether2
set [ find default-name=ether7 ] master-port=ether2
set [ find default-name=ether8 ] master-port=ether2
set [ find default-name=ether9 ] master-port=ether2
set [ find default-name=ether10 ] master-port=ether2
set [ find default-name=ether11 ] master-port=ether2
set [ find default-name=ether12 ] master-port=ether2
set [ find default-name=ether13 ] master-port=ether2
set [ find default-name=ether14 ] master-port=ether2
set [ find default-name=ether15 ] master-port=ether2
set [ find default-name=ether16 ] master-port=ether2
set [ find default-name=ether17 ] master-port=ether2
set [ find default-name=ether18 ] master-port=ether2
set [ find default-name=ether19 ] master-port=ether2
set [ find default-name=ether20 ] master-port=ether2
set [ find default-name=ether21 ] master-port=ether2
set [ find default-name=ether22 ] master-port=ether2
set [ find default-name=ether23 ] master-port=ether2
set [ find default-name=ether24 ] master-port=ether2
set [ find default-name=sfp1 ] master-port=ether2
/interface vlan
add interface=ether2 l2mtu=1584 name=vlan99 vlan-id=99
/interface ethernet switch
set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports=ether2,ether6,ether7,ether8
/port
set 0 name=serial0
/interface ethernet switch egress-vlan-tag
add tagged-ports=switch1-cpu vlan-id=99
add tagged-ports=ether2 vlan-id=200
add tagged-ports=ether2 vlan-id=300
add tagged-ports=ether2 vlan-id=400
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=200 ports=ether6 sa-learning=yes
add customer-vid=0 new-customer-vid=300 ports=ether7 sa-learning=yes
add customer-vid=0 new-customer-vid=400 ports=ether8 sa-learning=yes
/interface ethernet switch vlan
add ports=ether2,ether6 vlan-id=200
add ports=ether2,ether7 vlan-id=300
add ports=ether2,ether8 vlan-id=400
/ip address
add address=192.168.88.2/24 comment="default configuration" interface=ether2 network=192.168.88.0
add address=192.168.88.2/24 interface=vlan99 network=192.168.88.0
⁃
Thomas - 03.03.2015 - 11:50
Post subject:
Skús tam pricapnúť toto :
Code: › /interface ethernet switch egress-vlan-translation
add customer-vid=200 new-customer-vid=0 ports=ether6 sa-learning=yes
add customer-vid=300 new-customer-vid=0 ports=ether7 sa-learning=yes
add customer-vid=400 new-customer-vid=0 ports=ether8 sa-learning=yes
cobain - 03.03.2015 - 15:07
Post subject:
skusal som ale to tam nedostanem
[admin@MikroTik] /interface ethernet switch egress-vlan-translation> add customer-vid=200 new-customer-vid=0 ports=ether6 sa-learning=yes
expected end of command (line 1 column 54)sa-learning=yes
[admin@MikroTik] /interface ethernet switch egress-vlan-translation> add customer-vid=300 new-customer-vid=0 ports=ether7 sa-learning=yes
expected end of command (line 1 column 54)sa-learning=yes
[admin@MikroTik] /interface ethernet switch egress-vlan-translation> add customer-vid=400 new-customer-vid=0 ports=ether8 sa-learning=yes
expected end of command (line 1 column 54)sa-learning=yes
Thomas - 03.03.2015 - 15:31
Post subject:
Code: › /interface ethernet switch egress-vlan-translation
add customer-vid=200 new-customer-vid=0 ports=ether6
add customer-vid=300 new-customer-vid=0 ports=ether7
add customer-vid=400 new-customer-vid=0 ports=ether8
sory píšem to spamäti momentálne som neni pri žiadnom crsku aby som sa pozrel ako som to tam presne nastavoval .
Skratka ide o to že síce tam tag k paketu pribastlíš , ale na výstupe z ifacu tam ostáva .
Mali by byť tagy len naethernetoch ktoré definuješ tu /interface ethernet switch egress-vlan-tag ale ked tam nič nenastavíš tak si to taguje aj tak
V CRSkách je to úplne inak ako v switch chipoch na ostatných mikrotikoch alebo RB250/260
A v dokumentácii toho viac nieje ako je na túto tému.
cobain - 03.03.2015 - 15:37
Post subject:
to ma napadlo ale nepomohlo to moc.
PS kukni PM
cobain - 04.03.2015 - 13:43
Post subject:
Thomas dakujem.
nakoniec sa to podarilo spojazdnit. Je vidiet ze som bol par rokov mimo mikrotik a hrajkal sa na niecom inom. Dalo to zabrat ale uz to ide ako som potreboval a musim povedat, ze nastavit to bolo potom na par klikov
.......
Code: › /interface ethernet switch egress-vlan-tag
add tagged-ports=ether2 vlan-id=200
add tagged-ports=ether2 vlan-id=300
/interface ethernet switch ingress-vlan-translation
add customer-vlan-format=untagged-or-tagged new-customer-vid=200 ports=ether7 sa-learning=yes service-vlan-format=untagged-or-tagged
add customer-vlan-format=untagged-or-tagged new-customer-vid=300 ports=ether9 sa-learning=yes service-vlan-format=untagged-or-tagged
/interface ethernet switch vlan
add ports=ether2,ether7 vlan-id=200
add ports=ether2,ether9 vlan-id=300
/ip upnp
set allow-disable-external-interface=no
Thomas - 04.03.2015 - 20:11
Post subject:
Tiež som to dnes pozeral na jednom kúsku , v podstate je tamto čo som posielal link na to forum bez customer-vid=0 ,
ale je tam customer-vlan-format=untagged-or-tagged
Asi to bude ten problém ,aj ked v manuáli je že default hodnota je any.
Čo switch tak to originálne riešenie vlan , staré dobrá cisco tam sa to tuká asi najjednoduchšie .
cobain - 05.03.2015 - 09:44
Post subject:
inca tie swit che su nic moc ocakaval som vacsiu priepustnost na tom ale bandwitch test v tcp dal v prvych sekundach cca 300Mbps a po par sekundach to klesa dole do pol min je to na 100Mbps a po asi 3.az5 min 30-60Mbps. a pritom CPU na CCR routroch sa dost flakaju