BetaIT Bible Labs is new. Things may change or break while we improve it. Found a problem? Tell us in the community.

IT BIBLE LABS
← All labs
NetworkingintermediateAbout 40 minutes

Separate networks with VLANs on a MikroTik

Use one MikroTik bridge to split a router into separate Sales and Engineering networks, carry both over a trunk, and add a management VLAN.

Part of the path MikroTik routing (step 2 of 4), next: Protect a MikroTik router with a firewall

What you will do

9 tasks

  1. 1.Create the bridge

    One bridge can carry several VLANs.

  2. 2.Add the access ports

    ether2 is the Sales network and ether3 is Engineering.

  3. 3.Add the trunk port

    ether5 goes to another switch and has to carry both VLANs.

  4. 4.Define VLAN 10

    Tell the bridge how VLAN 10 leaves each port, with /interface bridge vlan add: vlan-ids=10, tagged on the bridge itself and on the trunk (tagged=bridge-vlan,eth...

  5. 5.Define VLAN 20

    Do the same for VLAN 20 and the Engineering port: vlan-ids=20, tagged=bridge-vlan,ether5 and untagged=ether3.

  6. 6.Add a management address

    To manage the router over a VLAN, give it an interface in that VLAN.

  7. 7.Carry the management VLAN

    VLAN 99 also needs an entry on the bridge.

  8. 8.Turn on VLAN filtering

    Everything is in place, so switch the VLAN rules on: /interface bridge set bridge-vlan vlan-filtering=yes.

  9. 9.Check your work

    Review the result: print the VLAN table with /interface bridge vlan print and the ports with /interface bridge port print, and check that each port is in the ri...