Diskusi Inter-VLAN Routing pada General Networking | Mikrotik | Forum Mikrotik Indonesia : Disini ada yang tau gimana cara membuat inter VLAN routing menggunakan mikrotik router OS? Cantumkan ...

upe · #1 (**permalink**) 16-07-2007, 15:14

Disini ada yang tau gimana cara membuat inter VLAN routing menggunakan mikrotik router OS?
Cantumkan syntax / command nya ya...

Thanks....

Regards,
Peter James
System Administrator
BINUS Center Syahdan

[a] · #2 (**permalink**) 16-07-2007, 16:12

hai...

maaf yah, saya pindah threadnya dari scripting ke general, karena kayanya lebih appropriate disini...

mengenai masalah intervlan routing, so far blum pernah pake jadi ga bgitu ngerti konsepnya....mungkin klo lo bisa berbaik hati, justru bisa tolong dishare konsep dari intervlan routing atau bridging deh ke kita2 yang belum ngerti ini..

klo untuk intervlan bridging ada nih di forum.mikrotik.com

Quote:

I have tried:

1) assigning an IP address 192.168.1.2 to ether1, creating 2 VLANS 101 and 102 under ether1, creating a bridge, bridge1, and then adding the two vlans to the bridge ports

Bridging VLANs that reside on the same parent interface is usually a bad idea.

Many devices will get quite confused if they see a packet with a given source MAC address returning on the same physical port they sent it on (even with a different VLAN tag), if those devices keep only a single learn table, as most do.

If what you are trying to do is prevent hosts within the same subnet from communicating, then it can work.

The VLANs will need to be sub-interfaces of the ethernet port, and members of the bridge. You will need to assign the IP address to the bridge interface, and add a bridge firewall rule that drops everything in the forward chain for that bridge. This can produce a reasonable wired ethernet approximation of a "station-isolate" wireless network, or a PtMP ATM cloud.

For example:

Code:

/int vlan add name=V101 interface=ether1 disabled=no
/int vlan add name=V102 interface=ether1 disabled=no
/int bridge add name=bridge1 disabled=no
/int bridge filter add chain=forward in-bridge=bridge1 out-bridge=bridge1 action=drop
/int bridge port add interface=V101 bridge=bridge1
/int bridge port add interface=V102 bridge=bridge1
/ip address add address=192.168.1.2/24 interface=bridge1

There are still a number of things that can go wrong however, so be very careful.

Quote:

Originally Posted by noakley

2) assigning an IP address 192.168.1.2 to ether1, creating a bridge, bridge1, creating 2 VLAN's 101 and 102 under the bridge, also tried it with them added and not added as bridge ports

Unless the VLANs are created on the physical interface, or the ethernet port is a member of the bridge, there is nothing to associate the VLANs with the physical port. In addition, putting the VLANs on the bridge (assuming that the ethernet port is a member of the bridge) does nothing but abstract the interface back a level. There is rarely a use for a bridge interface with a single member port.

Also, using a VLAN as both a member of a bridge, and as sub-interface of that bridge, will create a recursive interface situation (VLAN->bridge->VLAN->bridge->etc...) which is a very bad thing.

Quote:

Originally Posted by noakley

3) same as 2 but no IP address on ether1 and assigning the IP address to the bridge

Same problems as number 2, excpet that you got the IP on the right interface.

Quote:

Originally Posted by noakley

I always get the same result can't access MT management and won't pass packets.

I have successfully tried adding the VLAN's to ether1 assigning them IP subnets and routing them

Thanks

I would suggest rethinking what you are trying to do here, bridging together VLANs on the same physical interface is an unusual configuration, and will rarely work correctly.

The only reason I have had to use such a setup, is to simulate a "partial mesh"-like network using ethernet, for testing OSPF PtMP mode. It works, but it is weird.

It is much easier to use distinct broadcast domains for each VLAN, with a separate subnet for each, and just route between them.

Good luck,
--Eric

source

Code:

http://forum.mikrotik.com/viewtopic.php?f=2&t=11583&p=54120&hilit=intervlan#p54120

c0nf · #3 (**permalink**) 16-07-2007, 17:23

vlan itu buat apa sih ?
kayak vpn atau gmn ?

[a] · #4 (**permalink**) 16-07-2007, 17:30

Quote:

A virtual LAN, commonly known as a vLAN or as a VLAN, is a method of creating independent logical networks within a physical network. Several VLANs can co-exist within such a network. This helps in reducing the broadcast domain and aids in network administration by separating logical segments of a LAN (like company departments) that should not exchange data using a LAN (they still can exchange data by routing).

A VLAN consists of a network of computers that behave as if connected to the same link layer network - even though they may actually be physically connected to different segments of a LAN. Network administrators configure VLANs through software rather than hardware, which makes them extremely flexible. One of the biggest advantages of VLANs emerges when physically moving a computer to another location: it can stay on the same VLAN without the need for any hardware reconfiguration.

more at

Code:

http://en.wikipedia.org/wiki/Vlan

nux · #5 (**permalink**) 16-07-2007, 20:37

Quote:

Originally Posted by [a]

mengenai masalah intervlan routing, so far blum pernah pake jadi ga bgitu ngerti konsepnya....mungkin klo lo bisa berbaik hati, justru bisa tolong dishare konsep dari intervlan routing atau bridging deh ke kita2 yang belum ngerti ini..

orang nanya malah dibalik tanya..

Quote:

Originally Posted by c0nf

vlan itu buat apa sih ?
kayak vpn atau gmn ?

ini juga...

btw, aku juga gak pernah denger intervlan, bener baru pertama ini...
bung upe jelasin konsepnya dong...

[a] · #6 (**permalink**) 16-07-2007, 21:46

udah jadi kebiasaan kok disini, orang nanya malah dibalik tanya

d3v4 · #7 (**permalink**) 16-07-2007, 23:43

biasanya sih klo orang nanya trus balik nanya karena yang nanya ngasih informasi nya kurang....

dukun aja pasti nanya tanggal lahir... pasaran hari lahir.... hari lahir... nama ibu dll dst..........

apa lagi kita bukan dukun........ wajar2 aja klo nannya lagi.........

jarang sih yang nanya dengan permasalahan yang jelas apa lagi menyertakan konfigurasi....
jaraaaaaaang banget..................... yang ada sih nannya nya model kek gini........

gw ada masalah ini pemecahannya gmn ya ??

ahahahahhaha

kan lebih enak klo nannya nya gini....

gw ada permasalahan seperti ini... dengan konfigurasi seperti ini, gambar jaringan kira2 seperti ini, yang udah di coba seperti ini.. kok masih ga bisa ya... apa ada yang salah ?

kan klo gitu enak