SWITCH-mikrotik

SW-FIXME-MIKROTIK

VLANs

• 130: FIXME-NAT
• 135: FIXME-PUBLIC

Ports / VLAN

Port	VLAN	Equipement
1	FIXME-NAT
2	FIXME-PUBLIC
3	FIXME-NAT
4	FIXME-PUBLIC
5	FIXME-NAT
6	FIXME-PUBLIC
7	FIXME-NAT
8	FIXME-PUBLIC
9	FIXME-NAT
10	FIXME-PUBLIC
11	FIXME-NAT
12	FIXME-PUBLIC
13	FIXME-NAT
14	FIXME-PUBLIC
15	FIXME-NAT
16	FIXME-PUBLIC
17	FIXME-NAT
18	FIXME-PUBLIC
19	FIXME-NAT	DON'T USE!
20	FIXME-PUBLIC	DON'T USE!
21	FIXME-NAT	DON'T USE!
22	FIXME-PUBLIC	DON'T USE!
23	TRUNK-NAT	DON'T USE!
24	TRUNK-PUBLIC	DON'T USE!

Config

work in progress...

/interface vlan add name=FIXME-NAT vlan-id=130 interface=ether23 add name=FIXME-PUBLIC vlan-id=135 interface=ether24

/interface ethernet set ether3 vlan-mode=use-tag vlan-id=130

/interface ethernet print detail

https://wiki.mikrotik.com/wiki/Manual:Basic_VLAN_switching

https://help.mikrotik.com/docs/display/ROS/Bridging+and+Switching#BridgingandSwitching-BridgeVLANFiltering

https://www.youtube.com/watch?v=4BOYqtV4MCY&list=PLJ7SGFemsLl1QUNkgAbGj9ldlWRrr8zMj&ab_channel=TheNetworkBerg

old: hostname SW-FIXME-02
snmp-server location CH LSN FIXME SERV 1
snmp-server contact FIXME
snmp-server community FIXME ro

username admin access-level 15
username admin password 7 XXXXXXXXXXXXXXXXXXXXXXXXXX
username guest access-level 0
username guest password 7 XXXXXXXXXXXXXXXXXXXXXXXXXX
enable password level 15 7 XXXXXXXXXXXXXXXXXXXXXXXXXX


vlan database
vlan 1 name DefaultVlan media ethernet state active
vlan 130 name FIXME-NAT media ethernet state active
vlan 135 name FIXME-PUBLIC media ethernet state active


interface ethernet 1/1
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/2
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/3
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/4
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/5
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/6
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/7
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/8
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/9
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/10
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/11
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/12
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/13
switchport allowed vlan add 130 untagged
switchport native vlan 130
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/14
switchport allowed vlan add 130 untagged
switchport native vlan 130
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/15
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/16
switchport allowed vlan add 135 untagged
switchport native vlan 135
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/17
switchport allowed vlan add 130,135 untagged
switchport native vlan 130
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/18
switchport allowed vlan add 130,135 untagged
switchport native vlan 130
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/19
switchport allowed vlan add 130,135 untagged
switchport native vlan 130
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/20
switchport allowed vlan add 130,135 untagged
switchport native vlan 130
switchport allowed vlan remove 1
spanning-tree edge-port


interface ethernet 1/21
switchport allowed vlan add 1 untagged
switchport native vlan 1
switchport allowed vlan add 130,135 tagged


interface ethernet 1/22
switchport allowed vlan add 1 untagged
switchport native vlan 1
switchport allowed vlan add 130,135 tagged


interface ethernet 1/23
switchport allowed vlan add 1 untagged
switchport native vlan 1
switchport allowed vlan add 130,135 tagged


interface ethernet 1/24
switchport allowed vlan add 1 untagged
switchport native vlan 1
switchport allowed vlan add 130,135 tagged


interface vlan 130
ip address 192.168.130.252 255.255.255.0

no ip http secure-server
spanning-tree mode stp
line console
line vty
end