RouterOS VLANs

Zadání:

Bonding je technologie, která umožňuje agregaci více ethernetových rozhraní do jediného virtuálního spojení, čímž je dosaženo vyšší přenosové rychlosti a zajištění selhání.

Řešení:

/interface ethernet set [ find default-name=ether1 ] name=ether1-PRIVOD
/interface ethernet set [ find default-name=ether2 ] name=ether2-PRIVOD
/interface bonding add name=bonding-PRIVOD slaves=ether1-PRIVOD,ether2-PRIVOD
 
/interface bridge add name=bridge-VLAN vlan-filtering=yes
/interface vlan add interface=bridge-VLAN name=vlan20 vlan-id=20
 
/ip pool add name=pool-mgmt ranges=192.168.88.10-192.168.88.50
/ip pool add name=pool-vlan30 ranges=192.168.30.50-192.168.30.100
/ip dhcp-server network add address=192.168.0.0/24 dns-server=192.168.0.1 gateway=192.168.0.1
/ip dhcp-server network add address=192.168.88.0/24 dns-server=8.8.8.8 gateway=192.168.88.1
/ip dhcp-server add address-pool=pool-mgmt disabled=no interface=ether10 name=dhcp-mgmt
/ip dhcp-client add disabled=no interface=bridge-VLAN
/ip dhcp-client add disabled=no interface=vlan20
 
/ip address add address=192.168.88.1 interface=ether10 network=255.255.255.0
 
/interface bridge port add bridge=bridge-VLAN interface=bonding-PRIVOD
/interface bridge port add bridge=bridge-VLAN interface=ether3
/interface bridge port add bridge=bridge-VLAN disabled=yes interface=ether4
/interface bridge port add bridge=bridge-VLAN disabled=yes interface=ether5
/interface bridge port add bridge=bridge-VLAN interface=ether6 pvid=20
/interface bridge port add bridge=bridge-VLAN disabled=yes interface=ether7 pvid=20
/interface bridge port add bridge=bridge-VLAN disabled=yes interface=ether8 pvid=20
/interface bridge port add bridge=bridge-VLAN frame-types=admit-only-untagged-and-priority-tagged interface=ether9 pvid=20
 
/interface bridge vlan add bridge=bridge-VLAN tagged=bonding-PRIVOD,bridge-VLAN untagged=ether6,ether7,ether8 vlan-ids=20
/interface bridge vlan add bridge=bridge-VLAN tagged=bonding-PRIVOD untagged=bridge-VLAN,ether3,ether4,ether5 vlan-ids=1
 
/system clock set time-zone-name=Europe/Prague
/system identity set name=RouterOS-VLANs
 
/ip service set telnet disabled=yes
/ip service set ftp disabled=yes
/ip service set www disabled=yes
/ip service set ssh disabled=yes
/ip service set www-ssl address=192.168.88.0/24 disabled=no
/ip service set api disabled=yes
/ip service set winbox address=192.168.88.0/24
/ip service set api-ssl disabled=yes