[RouterOS] 實作 VLAN Trunk 讓 MOD 流量通過 Switch 並隔離其他上網流量

架構圖

說明

• Home Gateway 到 MOD 只有一條線，想要在那條線後接除了 MOD 外的設備
• 將 RB750GL 當成網管型 Switch 使用
• MOD 為 VLAN 100，其餘設備皆為 VLAN 1

操作

MikroTik hEX

/interface ethernet

set [ find default-name=ether1 ] master-port=none name=ether1-gateway

set [ find default-name=ether2 ] master-port=none name=ether2-master-local

set [ find default-name=ether3 ] master-port=ether2-master-local name=ether3-slave-local

set [ find default-name=ether4 ] master-port=ether2-master-local name=ether4-slave-local

set [ find default-name=ether5 ] master-port=none name=ether5-Hinet-MOD

/interface ethernet switch port

set 0 vlan-mode=disabled vlan-header=leave-as-is default-vlan-id=auto 

set 1 vlan-mode=disabled vlan-header=leave-as-is default-vlan-id=auto 

set 2 vlan-mode=disabled vlan-header=leave-as-is default-vlan-id=auto 

set 3 vlan-mode=disabled vlan-header=leave-as-is default-vlan-id=auto 

set 4 vlan-mode=disabled vlan-header=leave-as-is default-vlan-id=auto 

set 5 vlan-mode=disabled vlan-header=leave-as-is default-vlan-id=auto 

/interface vlan

add interface=ether5-Hinet-MOD name=eth5_vlan100_MOD vlan-id=100

add interface=ether5-Hinet-MOD name=eth5_vlan1_LAN vlan-id=1

/interface bridge

add name=bridge_vlan1

add name=bridge_vlan100

/interface bridge port

add bridge=bridge_vlan1 interface=ether2-master-local

add bridge=bridge_vlan1 interface=eth5_vlan1_LAN

add bridge=bridge_vlan100 interface=eth5_vlan100_MOD

add bridge=bridge_vlan100 interface=ether1-gateway

PPPoE 撥號介面請改為 bridge_vlan100
DHCP Server / IPv4 Address 介面請改為 bridge_vlan1

MikroTik RB750GL

/interface ethernet switch port

set 0 vlan-mode=disabled vlan-header=leave-as-is default-vlan-id=auto 

set 1 vlan-mode=disabled vlan-header=leave-as-is default-vlan-id=auto 

set 2 vlan-mode=disabled vlan-header=leave-as-is default-vlan-id=auto 

set 3 vlan-mode=disabled vlan-header=leave-as-is default-vlan-id=auto 

set 4 vlan-mode=disabled vlan-header=leave-as-is default-vlan-id=auto 

set 5 vlan-mode=disabled vlan-header=leave-as-is default-vlan-id=auto 

/interface ethernet
set [ find default-name=ether2 ] master-port=none name=ether2-RPI
set [ find default-name=ether3 ] master-port=none name=ether3-1043ND
set [ find default-name=ether4 ] master-port=none name=ether4-MOD
set [ find default-name=ether5 ] master-port=none name=ether5-hEX

/interface vlan
add interface=ether5-hEX name=eth5_vlan100_MOD vlan-id=100
add interface=ether5-hEX name=eth5_vlan1_LAN vlan-id=1

/interface bridge
add name=bridge_vlan1
add name=bridge_vlan100

/interface bridge port
add bridge=bridge_vlan100 interface=eth5_vlan100_MOD
add bridge=bridge_vlan100 interface=ether4-mod
add bridge=bridge_vlan1 interface=eth5_vlan1_LAN
add bridge=bridge_vlan1 interface=ether1
add bridge=bridge_vlan1 interface=ether2-RPI
add bridge=bridge_vlan1 interface=ether3-1043ND

參考資料

• Manual:Interface/VLAN
• 使用VLAN連接MOD Part 1
• [RouterOS] 透過BRIDGE(軟體式)作VLAN連接MOD 實做紀錄