Difference between revisions of "SWITCH-mikrotik"
(→Config) |
(→Config) |
||
| Line 137: | Line 137: | ||
== Config == | == Config == | ||
work in progress... | work in progress... | ||
| + | |||
| + | |||
| + | /interface vlan | ||
| + | add name=FIXME-NAT vlan-id=130 interface=ether23 | ||
| + | add name=FIXME-PUBLIC vlan-id=135 interface=ether24 | ||
| + | |||
/interface ethernet | /interface ethernet | ||
Revision as of 22:49, 11 December 2023
SW-FIXME-MIKROTIK
VLANs
- 130: FIXME-NAT
- 135: FIXME-PUBLIC
Ports / VLAN
| Port | VLAN | Equipement |
| 1 | FIXME-NAT | |
| 2 | FIXME-PUBLIC | |
| 3 | FIXME-NAT | |
| 4 | FIXME-PUBLIC | |
| 5 | FIXME-NAT | |
| 6 | FIXME-PUBLIC | |
| 7 | FIXME-NAT | |
| 8 | FIXME-PUBLIC | |
| 9 | FIXME-NAT | |
| 10 | FIXME-PUBLIC | |
| 11 | FIXME-NAT | |
| 12 | FIXME-PUBLIC | |
| 13 | FIXME-NAT | |
| 14 | FIXME-PUBLIC | |
| 15 | FIXME-NAT | |
| 16 | FIXME-PUBLIC | |
| 17 | FIXME-NAT | |
| 18 | FIXME-PUBLIC | |
| 19 | FIXME-NAT | DON'T USE! |
| 20 | FIXME-PUBLIC | DON'T USE! |
| 21 | FIXME-NAT | DON'T USE! |
| 22 | FIXME-PUBLIC | DON'T USE! |
| 23 | TRUNK-NAT | DON'T USE! |
| 24 | TRUNK-PUBLIC | DON'T USE! |
Config
work in progress...
/interface vlan
add name=FIXME-NAT vlan-id=130 interface=ether23
add name=FIXME-PUBLIC vlan-id=135 interface=ether24
/interface ethernet
set ether3 vlan-mode=use-tag vlan-id=130
/interface ethernet print detail
https://wiki.mikrotik.com/wiki/Manual:Basic_VLAN_switching
old:
hostname SW-FIXME-02
snmp-server location CH LSN FIXME SERV 1
snmp-server contact FIXME
snmp-server community FIXME ro
username admin access-level 15
username admin password 7 XXXXXXXXXXXXXXXXXXXXXXXXXX
username guest access-level 0
username guest password 7 XXXXXXXXXXXXXXXXXXXXXXXXXX
enable password level 15 7 XXXXXXXXXXXXXXXXXXXXXXXXXX
vlan database
vlan 1 name DefaultVlan media ethernet state active
vlan 130 name FIXME-NAT media ethernet state active
vlan 135 name FIXME-PUBLIC media ethernet state active
interface ethernet 1/1
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/2
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/3
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/4
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/5
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/6
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/7
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/8
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/9
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/10
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/11
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/12
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/13
switchport allowed vlan add 130 untagged
switchport native vlan 130
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/14
switchport allowed vlan add 130 untagged
switchport native vlan 130
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/15
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/16
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/17
switchport allowed vlan add 130,135 untagged
switchport native vlan 130
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/18
switchport allowed vlan add 130,135 untagged
switchport native vlan 130
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/19
switchport allowed vlan add 130,135 untagged
switchport native vlan 130
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/20
switchport allowed vlan add 130,135 untagged
switchport native vlan 130
switchport allowed vlan remove 1
spanning-tree edge-port
interface ethernet 1/21
switchport allowed vlan add 1 untagged
switchport native vlan 1
switchport allowed vlan add 130,135 tagged
interface ethernet 1/22
switchport allowed vlan add 1 untagged
switchport native vlan 1
switchport allowed vlan add 130,135 tagged
interface ethernet 1/23
switchport allowed vlan add 1 untagged
switchport native vlan 1
switchport allowed vlan add 130,135 tagged
interface ethernet 1/24
switchport allowed vlan add 1 untagged
switchport native vlan 1
switchport allowed vlan add 130,135 tagged
interface vlan 130
ip address 192.168.130.252 255.255.255.0
no ip http secure-server
spanning-tree mode stp
line console
line vty
end