Russian Users MikroTik | Форум пользователей MikroTik

Форум поддержи и обмена опытом пользователей оборудования RouterBOARD и операционной системы RouterOS Латвийского производителя MikroTik
https://forummikrotik.ru/

Mikrotik CRS125-24G-15-2HnD-IN, VLAN и WiFi

https://forummikrotik.ru/viewtopic.php?t=10915

Страница 1 из 1

Mikrotik CRS125-24G-15-2HnD-IN, VLAN и WiFi

Добавлено: 28 окт 2019, 11:11
dinosaur
Добрый день, корифеи

Загнал меня в тупик CRS не могу WiFi запустить. Суть идеи - есть RB750Gr3, ether1 которого получает интернет от провайдера, а ether2-ether5 объединены в bonding (на него навешены vlan'ы) и соединены с ether21-ether24 объединенными в транк. при подключении клиентов к определенным портам или сетям wifi они должны попадать в соответствующий vlan. Настраивал по этому мануалу - https://wiki.mikrotik.com/wiki/Manual:C ... ith_Trunks, с проводными клиентами все получилось, при подключении к порту на CRS клиент попадает в соответствующий vlan и получает адрес с RB, а вот как по этой методике запустить в vlanы беспроводных клиентов сообразить не могу (через switch интерфейс wlan не виден). Подскажите в какую сторону копать плиз.

На всякий случай конфиги:

роутер:

Код: Выделить всё

# jan/02/1970 04:47:57 by RouterOS 6.45.6
# software id = DEBE-Q8VG
#
# model = RouterBOARD 750 r2
# serial number = 63BD05919C88
/interface ethernet
set [ find default-name=ether3 ] mac-address=E4:8D:8C:C9:16:44
set [ find default-name=ether4 ] mac-address=E4:8D:8C:C9:16:44
set [ find default-name=ether5 ] mac-address=E4:8D:8C:C9:16:44
/interface bonding
add mode=balance-xor name=bonding-to-vol-87-sw1 slaves=\
    ether2,ether3,ether4,ether5 transmit-hash-policy=layer-2-and-3
/interface vlan
add arp=reply-only interface=bonding-to-vol-87-sw1 name="VLAN10 - SWEETHOME" \
    vlan-id=10
add arp=reply-only interface=bonding-to-vol-87-sw1 name="VLAN20 - DSS" \
    vlan-id=20
add arp=reply-only interface=bonding-to-vol-87-sw1 name="VLAN30 - TWONKY" \
    vlan-id=30
add arp=reply-only interface=bonding-to-vol-87-sw1 name="VLAN40 - WTC" \
    vlan-id=40
add arp=reply-only interface=bonding-to-vol-87-sw1 name="VLAN100 - WELCOME" \
    vlan-id=100
add interface=bonding-to-vol-87-sw1 name="VLAN110 - CONTROL" vlan-id=110
/ip pool
add name=pool_sweethome ranges=192.168.10.2-192.168.10.20
add name=pool_dss ranges=192.168.20.2-192.168.20.10
add name=pool_twonky ranges=192.168.30.2-192.168.30.10
add name=pool_wtc ranges=192.168.40.2-192.168.40.10
add name=pool_welcome ranges=172.16.100.2-172.16.100.20
add name=pool_control ranges=172.16.110.10-172.16.110.20
/ip dhcp-server
add add-arp=yes address-pool=pool_welcome bootp-lease-time=lease-time \
    bootp-support=dynamic disabled=no interface="VLAN100 - WELCOME" name=\
    dhcp_welcome
add add-arp=yes address-pool=pool_sweethome bootp-lease-time=lease-time \
    bootp-support=dynamic disabled=no interface="VLAN10 - SWEETHOME" name=\
    dhcp_sweethome
add add-arp=yes address-pool=pool_dss bootp-lease-time=lease-time \
    bootp-support=dynamic disabled=no interface="VLAN20 - DSS" name=dhcp_dss
add add-arp=yes address-pool=pool_twonky bootp-lease-time=lease-time \
    bootp-support=dynamic disabled=no interface="VLAN30 - TWONKY" name=\
    dhcp_twonky
add add-arp=yes address-pool=pool_wtc bootp-lease-time=lease-time \
    bootp-support=dynamic disabled=no interface="VLAN40 - WTC" name=dhcp_wtc
add add-arp=yes address-pool=pool_control bootp-lease-time=lease-time \
    bootp-support=dynamic disabled=no interface="VLAN110 - CONTROL" name=\
    dss_control
/ip address
add address=172.16.110.1/24 interface="VLAN110 - CONTROL" network=\
    172.16.110.0
add address=192.168.10.1/24 interface="VLAN10 - SWEETHOME" network=\
    192.168.10.0
add address=192.168.20.1/24 interface="VLAN20 - DSS" network=192.168.20.0
add address=192.168.30.1/24 interface="VLAN30 - TWONKY" network=192.168.30.0
add address=192.168.40.1/24 interface="VLAN40 - WTC" network=192.168.40.0
add address=172.16.100.1/24 interface="VLAN100 - WELCOME" network=\
    172.16.100.0
/ip dhcp-server network
add address=172.16.100.0/24 dns-server=172.16.100.1 domain=WELCOME gateway=\
    172.16.100.1 netmask=24 ntp-server=172.16.100.1
add address=192.168.10.0/24 dns-server=192.168.10.1 domain=SWEETHOME gateway=\
    192.168.10.1 netmask=24 ntp-server=192.168.10.1
add address=192.168.20.0/24 dns-server=192.168.20.1 domain=DSS gateway=\
    192.168.20.1 ntp-server=192.168.20.1
add address=192.168.30.0/24 dns-server=192.168.30.1 domain=TWONKY gateway=\
    192.168.30.1 ntp-server=192.168.30.1
add address=192.168.40.0/24 dns-server=192.168.40.1 domain=WTC gateway=\
    192.168.40.1 ntp-server=192.168.40.1
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system identity
set name=vol-87-gw1
коммутатор

Код: Выделить всё

# jan/02/1970 02:22:24 by RouterOS 6.45.6
# software id = LNE1-3RJP
#
# model = CRS125-24G-1S-2HnD
# serial number = 523A05F469A8
/interface bridge
add name=bridge protocol-mode=none
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
    country=russia2 disabled=no distance=indoors frequency=auto \
    frequency-mode=regulatory-domain installation=indoor mode=ap-bridge name=\
    wlan-sweethome ssid=!SWEETHOME vlan-id=10 vlan-mode=use-tag wps-mode=\
    disabled
add arp=reply-only disabled=no keepalive-frames=disabled mac-address=\
    E6:8D:8C:80:E6:A1 master-interface=wlan-sweethome multicast-buffering=\
    disabled name=wlan-twonky ssid=!TWONKY vlan-id=30 vlan-mode=use-tag \
    wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add arp=reply-only disabled=no keepalive-frames=disabled mac-address=\
    E6:8D:8C:80:E6:A0 master-interface=wlan-sweethome multicast-buffering=\
    disabled name=wlan-welcome ssid=!WELCOME vlan-id=100 vlan-mode=use-tag \
    wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/interface ethernet
set [ find default-name=sfp1 ] disabled=yes
/interface vlan
add interface=bridge name="VLAN110 - CONTROL" vlan-id=110
/interface ethernet switch
set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports="ether1,ether2,eth\
    er3,ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ethe\
    r13,ether14,ether15,ether16,ether17,ether18,ether19,ether20,ether21,ether2\
    2,ether23,ether24,sfp1"
/interface ethernet switch trunk
add member-ports=ether21,ether22,ether23,ether24 name=trunk-to-vol-87-gw1
add member-ports=ether1,ether2 name=trunk-to-hpe
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge interface=ether1
add bridge=bridge interface=ether2
add bridge=bridge interface=ether3
add bridge=bridge interface=ether4
add bridge=bridge interface=ether5
add bridge=bridge interface=ether6
add bridge=bridge interface=ether7
add bridge=bridge interface=ether8
add bridge=bridge interface=ether9
add bridge=bridge interface=ether10
add bridge=bridge interface=ether11
add bridge=bridge interface=ether12
add bridge=bridge interface=ether13
add bridge=bridge interface=ether14
add bridge=bridge interface=ether15
add bridge=bridge interface=ether16
add bridge=bridge interface=ether17
add bridge=bridge interface=ether18
add bridge=bridge interface=ether19
add bridge=bridge interface=ether20
add bridge=bridge interface=ether21
add bridge=bridge interface=ether22
add bridge=bridge interface=ether23
add bridge=bridge interface=ether24
add bridge=bridge interface=sfp1
add bridge=bridge interface=wlan-sweethome pvid=10
add bridge=bridge interface=wlan-welcome pvid=100
add bridge=bridge interface=wlan-twonky pvid=30
/interface ethernet switch egress-vlan-tag
add tagged-ports=trunk-to-vol-87-gw1,trunk-to-hpe vlan-id=10
add tagged-ports=trunk-to-vol-87-gw1,trunk-to-hpe vlan-id=20
add tagged-ports=trunk-to-vol-87-gw1,trunk-to-hpe vlan-id=30
add tagged-ports=trunk-to-vol-87-gw1,trunk-to-hpe vlan-id=40
add tagged-ports=trunk-to-vol-87-gw1 vlan-id=100
add disabled=yes tagged-ports=trunk-to-hpe,switch1-cpu vlan-id=110
/interface ethernet switch ingress-vlan-translation
add new-customer-vid=30 ports=\
    ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16
add new-customer-vid=10 ports=\
    trunk-to-hpe,ether3,ether4,ether5,ether6,ether7,ether8
add new-customer-vid=110 ports=ether17,ether18
add customer-vid=0 new-customer-vid=10 new-service-vid=0 ports=trunk-to-hpe
/interface ethernet switch vlan
add ports="trunk-to-vol-87-gw1,trunk-to-hpe,ether3,ether4,ether5,ether6,ether7\
    ,ether8" vlan-id=10
add ports=trunk-to-vol-87-gw1,trunk-to-hpe vlan-id=20
add ports="trunk-to-vol-87-gw1,trunk-to-hpe,ether9,ether10,ether11,ether12,eth\
    er13,ether14,ether15,ether16" vlan-id=30
add ports=trunk-to-vol-87-gw1,trunk-to-hpe vlan-id=40
add ports=trunk-to-vol-87-gw1 vlan-id=100
add ports=trunk-to-vol-87-gw1,ether17,ether18,switch1-cpu vlan-id=110
/ip address
add address=172.16.110.2/24 interface="VLAN110 - CONTROL" network=\
    172.16.110.0
/ip dns
set servers=172.16.110.1
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
/ip route
add distance=1 gateway=172.16.110.1
/lcd interface pages
set 0 interfaces=wlan-sweethome
/system identity
set name=vol-87-sw1

Re: Mikrotik CRS125-24G-15-2HnD-IN, VLAN и WiFi

Добавлено: 28 окт 2019, 12:02
algerka
dinosaur писал(а): ↑28 окт 2019, 11:11 как по этой методике запустить в vlanы беспроводных клиентов сообразить не могу (через switch интерфейс wlan не виден). Подскажите в какую сторону копать плиз.

На всякий случай конфиги:
Читали https://habr.com/ru/post/425493/

Код: Выделить всё

/interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyn disabled=no mode=ap-bridge ssid=MyWifiName vlan-id=20 vlan-mode=use-tag wireless-protocol=802.11 wps-mode=disabled
пример для 20 vlan


Попробуйте это убрать

Код: Выделить всё

add bridge=bridge interface=wlan-sweethome pvid=10
add bridge=bridge interface=wlan-welcome pvid=100
add bridge=bridge interface=wlan-twonky pvid=30
и добавить switch1-cpu к vlan на wifi
ну и "поиграйтесь" с set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports=

Re: Mikrotik CRS125-24G-15-2HnD-IN, VLAN и WiFi

Добавлено: 28 окт 2019, 13:29
dinosaur
В общем сделал через бридж:

Код: Выделить всё

# jan/02/1970 03:31:42 by RouterOS 6.45.6
# software id = LNE1-3RJP
#
# model = CRS125-24G-1S-2HnD
# serial number = 523A05F469A8
/interface bridge
add name=bridge protocol-mode=none vlan-filtering=yes
/interface wireless
set [ find default-name=wlan1 ] arp=reply-only band=2ghz-b/g/n channel-width=\
    20/40mhz-XX country=russia2 disabled=no distance=indoors frequency=auto \
    frequency-mode=regulatory-domain installation=indoor mode=ap-bridge name=\
    wlan-sweethome ssid=!SWEETHOME vlan-id=10 vlan-mode=use-tag wps-mode=\
    disabled
add arp=reply-only disabled=no keepalive-frames=disabled mac-address=\
    E6:8D:8C:80:E6:A1 master-interface=wlan-sweethome multicast-buffering=\
    disabled name=wlan-twonky ssid=!TWONKY vlan-id=30 vlan-mode=use-tag \
    wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add arp=reply-only disabled=no keepalive-frames=disabled mac-address=\
    E6:8D:8C:80:E6:A0 master-interface=wlan-sweethome multicast-buffering=\
    disabled name=wlan-welcome ssid=!WELCOME vlan-id=100 vlan-mode=use-tag \
    wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/interface ethernet
set [ find default-name=sfp1 ] disabled=yes
/interface vlan
add interface=bridge name="VLAN110 - CONTROL" vlan-id=110
/interface ethernet switch trunk
add member-ports=ether21,ether22,ether23,ether24 name=trunk-to-vol-87-gw1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge interface=ether1
add bridge=bridge interface=ether2
add bridge=bridge interface=ether3
add bridge=bridge interface=ether4
add bridge=bridge interface=ether5
add bridge=bridge interface=ether6
add bridge=bridge interface=ether7
add bridge=bridge interface=ether8
add bridge=bridge interface=ether9
add bridge=bridge interface=ether10
add bridge=bridge interface=ether11
add bridge=bridge interface=ether12
add bridge=bridge interface=ether13
add bridge=bridge interface=ether14
add bridge=bridge interface=ether15
add bridge=bridge interface=ether16
add bridge=bridge interface=ether17
add bridge=bridge interface=ether18
add bridge=bridge interface=ether21
add bridge=bridge interface=ether22
add bridge=bridge interface=ether23
add bridge=bridge interface=ether24
add bridge=bridge interface=sfp1
add bridge=bridge interface=wlan-sweethome
add bridge=bridge interface=wlan-twonky
add bridge=bridge interface=ether19
add bridge=bridge interface=ether20
add bridge=bridge interface=wlan-welcome
/interface bridge vlan
add bridge=bridge tagged="bridge,ether1,ether2,ether3,ether4,ether5,ether6,eth\
    er7,ether8,ether21,ether22,ether23,ether24,wlan-sweethome" vlan-ids=10
add bridge=bridge tagged=bridge,ether21,ether22,ether23,ether24,wlan-welcome \
    vlan-ids=100
add bridge=bridge tagged="bridge,ether21,ether22,ether23,ether24,ether9,ether1\
    0,ether11,ether12,ether13,ether14,ether15,ether16,wlan-twonky" vlan-ids=\
    30
add bridge=bridge tagged=\
    bridge,ether17,ether18,ether21,ether22,ether23,ether24 vlan-ids=110
/interface ethernet switch egress-vlan-tag
add tagged-ports=trunk-to-vol-87-gw1,switch1-cpu vlan-id=10
add disabled=yes tagged-ports=trunk-to-vol-87-gw1,switch1-cpu vlan-id=20
add tagged-ports=trunk-to-vol-87-gw1,switch1-cpu vlan-id=30
add disabled=yes tagged-ports=trunk-to-vol-87-gw1,switch1-cpu vlan-id=40
add tagged-ports=trunk-to-vol-87-gw1,switch1-cpu vlan-id=100
/interface ethernet switch ingress-vlan-translation
add new-customer-vid=30 ports=\
    ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16
add new-customer-vid=10 ports=\
    ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8
add new-customer-vid=110 ports=ether17,ether18
add customer-vid=0 disabled=yes new-customer-vid=10 ports=ether1,ether2
/interface ethernet switch vlan
add ports="trunk-to-vol-87-gw1,ether1,ether2,ether3,ether4,ether5,ether6,ether\
    7,ether8,switch1-cpu" vlan-id=10
add disabled=yes ports=trunk-to-vol-87-gw1,ether1,ether2 vlan-id=20
add ports="trunk-to-vol-87-gw1,ether9,ether10,ether11,ether12,ether13,ether14,\
    ether15,ether16,switch1-cpu" vlan-id=30
add disabled=yes ports=trunk-to-vol-87-gw1,ether1,ether2 vlan-id=40
add ports=trunk-to-vol-87-gw1,switch1-cpu vlan-id=100
add ports=trunk-to-vol-87-gw1,ether17,ether18,switch1-cpu vlan-id=110
/ip address
add address=172.16.110.2/24 interface="VLAN110 - CONTROL" network=\
    172.16.110.0
/ip dns
set servers=172.16.110.1
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
/ip route
add distance=1 gateway=172.16.110.1
/lcd interface pages
set 0 interfaces=wlan-sweethome
/system identity
set name=vol-87-sw1
Смущает момент что в конфигурации свитч-чипа пишем:

Код: Выделить всё

/interface ethernet switch trunk
add member-ports=ether21,ether22,ether23,ether24 name=trunk-to-vol-87-gw1
Но в то же время vlanами на бридже рулим по каждому физическому порту отдельно (потому что бридж не видит интерфейс trunk-to-vol-87-gw1):

Код: Выделить всё

/interface bridge vlan
add bridge=bridge tagged="bridge,ether1,ether2,ether3,ether4,ether5,ether6,eth\
    er7,ether8,ether21,ether22,ether23,ether24,wlan-sweethome" vlan-ids=10
add bridge=bridge tagged=bridge,ether21,ether22,ether23,ether24,wlan-welcome \
    vlan-ids=100
add bridge=bridge tagged="bridge,ether21,ether22,ether23,ether24,ether9,ether1\
    0,ether11,ether12,ether13,ether14,ether15,ether16,wlan-twonky" vlan-ids=\
    30
add bridge=bridge tagged=\
    bridge,ether17,ether18,ether21,ether22,ether23,ether24 vlan-ids=110
Чувствую в этот моменте какую-то засаду... Знатоки, подскажите как агрегацию портов (цель - увеличение скорости канала) сделать?
Часовой пояс: UTC+03:00
Страница 1 из 1

Создано на основе phpBB® Forum Software © phpBB Limited

Русская поддержка phpBB