Mikrotik VLANs - CRS1xx & CRS2xx - Mikrotik Tutorial

Learn to configure VLANS on Mikrotik CSR3XX step by step.
This process applies only to switches from the families CRS1xx and CRS2xx. If you wan to configure a CRS3xx please follow the following procedure:
• Mikrotik VLANs - CRS3X...
#MikrotikTutorial #MikrotikVLANs #ConfigureVLANsMikrotik
EXAMPLE: CONFIGURATION ON S-2
STEP 1
/interface bridge
add name=bridge
STEP 2
/interface bridge port
add bridge=bridge interface=sfp1
add bridge=bridge interface=sfp2
add bridge=bridge interface=sfp3
STEP 3
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=20 ports=sfp2,sfp3
STEP 4
/interface ethernet switch egress-vlan-tag
add tagged-ports=sfp1 vlan-id=20
add tagged-ports=switch1-cpu,sfp1 vlan-id=99
STEP 5
/interface vlan
add interface=bridge name=vlan-99 vlan-id=99
/ip address
add address=172.16.99.3/24 interface=vlan-99 network=172.16.99.0
/ip route
add distance=1 gateway=172.16.99.1
STEP 6
/interface ethernet switch vlan
add ports=sfp2,sfp1,sfp3 vlan-id=20
add ports=switch1-cpu,sfp1 vlan-id=99
STEP 7
/interface ethernet switch
set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports=sfp1,sfp2,sfp3

[@TheNetworkTrip]

Do you have any CRS1xx or CRS2xx in your topology?

[@Vinothmanick]

Yes , please include switch os videos too

[@LuisAngelChacon]

Tengo un CRS326

[@keletk]

Thanks for this video. i have a rb450gx4 (arm) the procedure is different?

[@beavonator]

this was the first video that actually helped me understand and configure vlans on mikrotik. thank you

[@milohoffman274]

This is the BEST explanation I have found. Good job.

[@shokowillard]

By far the best Mikrotik VLAN configuration video. Please may also do a tutorial of capsman and vlans. Keep up the good work

[@TheNetworkTrip]

Thanks, great suggestion!

[@craig3737]

Thank you for making these videos! Very helpful and you are great at explaining things in a logical step by step manor.

[@TheNetworkTrip]

Thank! It’s a pleasure!

[@kissferenc2050]

Perfect explanation, thank you! :)

[@TheNetworkTrip]

Glad it was helpful!

[@mrdaniellemke]

Thanks for the video, this really cut through the noise for me.

[@jm3west770]

You're a big one MikroTik-guy!! I follow you from Germany. Another please

[@ocheretnyi]

Отличное видео, хороший мануал по настройке CRS 1XX. На русскоязычной части толкового ничего нет по этим моделям, все копируют инфу друг с друга, не вдаваясь в детали

[@progotimultimedia535]

Very helpful and I have completed my configuration

[@TheNetworkTrip]

Glad to hear that!

[@Joshv918]

You are the best!

[@TheNetworkTrip]

Thank you!! 😀

[@qammars1977]

Great Video, cleared alot of issues we were facing. One thing want to know that if in case we have to use it as a Access Switch only then what kind of settings we may need? Do we need to add all the ports to the Ing-Vlan as well ?

[@alejandroperezbraun4351]

muy buen video, pregunto en el paso 5, cuando se crea la vlan table, los puertos para la vlan 10 y 20 son exactamente los mismos. mi pregunta es: no deberia tenes los puertos trunk y de acceso especificos para cada Vlan ? Saludos

[@BekoIQ]

the best technical man 🌹

[@TheNetworkTrip]

Thanks, I appreciate your comment

[@benjaminejike7523]

@@TheNetworkTrip am also having the same problem. have you been able to find a solution to this? kindly reply. i have a mikrotik crs125 acting as a router and a trunk connection to a cisco switch. i followed the video but still it didn't work

[@zeljkomikrotik]

Great learning process! Thank you! For my config i would need to pass on the first CRS112 where you have two vlans also mgmt vlan in order to connect two AP's with two SSID: in your case IT and Marketing. Lets say i would need to have them on sfp7 and sfp8. What additional setup do i need to add to your config? Tx

[@Luke-jv8oh]

HI Wilmer, iis it possible set " all in one" on CRS 1xxx ? I mean router + switch ( with few vlan's ?) I try do this but without good results.. btw very good video !!!

[@RavingMad]

Thanks for this video. I've followed this exactly then added some of my creativity to have an awesome performing router switch combo. However I'm not sure how to associate the WLAN radio SSIDs on my crs109 switch to the VLANs. Tutorials I found talk about doing it in bridge with bridge VLAN filtering. But it's not how you did the VLANs for crs212, which I followed for crs109. Any suggestions would be much appreciated. Thanks again.

[@slavisadisk3861]

Hello, thank you for this, it works good. I cant find tutorial to add wireless wlan1 in separate VLAN (without ethernet access port in same vlan). Some forum mention making VirtualAP and bridging with eth-trunk, but that bridge could not be added to Switch/VLAN table. So it could not be propagated further through trunk port...

[@MindSparqTrivia]

Great sir. . may I request english tutorial also on vlans + ospf sir. Thank you

[@TheNetworkTrip]

Hi Michael, coming soon

[@Red1Wollip]

I have a MIKROTIK RB3011 and two Mikrotik CSS326-24G-2S-RM switches. I would be very interested to discover the proper method of configuration of The Router with 5 VLANS on a trunk to SW1 and 5 VLANS to SW2. It is a setup similar to yours but with a much different set of switches. Would you be open to creating a video to do this?

[@jorgelopeznic]

Hello CRS310-1G-5S-4S+ vlan tutorial?

[@TheNetworkTrip]

Hello! I have another video for CRS3xx

[@aakashrajput6309]

Hi Sir, can you guide how to set up trunk with LCAP bond between S1 and S2 both being CRS112?

[@aakashrajput6309]

In this my case of crs1xx vlan with Bonding should I offload lcap to hardware and configure vlan on CPU or there is a better way?

[@SiBex_ovh]

no, CCR1009/CCR1036 in all DataCenter, who not have Switch and no work the CRS3xx way of vlans. This means old way Bridge + interface\vlan works only. Router on stick !

[@akant74]

I have a CRS125 (v6.49) and I am able to configure vlans the sameway you do on a CRS3xx .... what makes this method different? I assume I have no hardware offload with a CRS125 since I am using vlans...

[@progotimultimedia535]

Sir Good Day, I have configured my Switch crs106 but failed to pass access port

[@881167c2]

Hola Wilmer, esto mismo, lo tendrás en español. Cariños profe.

[@LuisAngelChacon]

Buen dia Inge, Un Excelente video, por casualidad lo tendra en español?

[@TheNetworkTrip]

Muy pronto en Español!

[@mariofuentes4947]

@@TheNetworkTrip Hola, Lo tendrás en español

[@lahorastube]

Hola, Wilmer, descrubri este contenido y me parece excelente se encuentra disponible tambien en los cursos con suscripcion?, hace un tiempo que estoy evaluando adquirir los cursos, de aprenda redes on line, pero no vi este curso disponible cuando estuve viendo esa pagina.-

[@TheNetworkTrip]

Hola Ariel, Aqui hay 72 clases en este curso de Switching Avanzado www.aprenderedes.online/courses/switching Saludos

[@peterkovacs233]

What is SA learning and where it's necessary?

[@TheNetworkTrip]

Hi Peter, SA Learning (Source Address Learning) is the process used by switches to dynamically build the mac-address table. If we disable the SA learning, we would have to manually add the MAC addresses to the table.

[@CiscoNetX-YT]

Donde puedo encontrar las imagen que utilizo en el video

[@williamcasallasrueda1112]

Hola , esta información está en español ... Gracias 😊

[@vasjabatareikin6016]

How you pass untagged VLAN through thunks , between two mikrotiks CRS 112 ? I being having trouble with it. Although tagged traffic works fine. Upstream switch is set in my case native vlan 1151 tagged 1150 1149 1148.

[@TheNetworkTrip]

Hi Vasja, You need to things: 1) Change the PVID (from 1 to the new vlan-id) 2) Add the port as untagged for that particular Vlan.

[@michaelmauer1385]

I did send you a consulting request via e-mail on your KZbin profile. Not sure if your received it?

[@pamelaveras7806]

Why do we not configure Vlans in the Bridge Vlans menu in this case?

[@TheNetworkTrip]

Hi Ronald, CRS1XX & CRS2XX have a different method as I explained in the video. Check the official documentation for more details: help.mikrotik.com/docs/pages/viewpage.action?pageId=103841836#CRS1xx/2xxseriesswitchesexamples-PortBasedVLAN If you use bridge/vlans, everything will be software based, no hardware based.

[@pamelaveras7806]

@@TheNetworkTrip Got it. Thanks for replying.

[@xuxamelo]

Thank you for the great content. I would like to know if it's possible to block rogue dhcp servers on CRS1XX and CRS2XX series. I know they don't support dhcp snooping so I can only think of switch port overrride. If you know a way of doing it please share. This doesn't work with vlans! /interface ethernet switch port set ether2 isolation-leakage-profile-override=2 set ether4 isolation-leakage-profile-override=2 /interface ethernet switch port-isolation add port-profile=2 protocol-type=dhcpv4 type=dst forwarding-type=bridged ports=ether1 registration-status="" traffic-type=""

[@mahmoodbello1258]

I did this configure on a CRS112 that is connected to a cisco switch, it didnt work. Any suggestions.

[@benjaminejike7523]

am also having the same problem. have you been able to find a solution to this? kindly reply. i have a mikrotik crs125 acting as a router and a trunk connection to a cisco switch. i followed the video but still it didn't work

[@mahmoodbello1258]

@@benjaminejike7523 I think you cant configure the CRS125 as a router in this situation. It has to be a switch (Bridge Mode). I am experimenting with it again so hopefully it works.