Hei folkens!
Jeg har nylig satt opp en MikroTik RB3011 i tråd med
@Trrundes konfig fra
https://github.com/trrunde/routercon...rb4011-altibox . Fiber'n fra Altibox er satt rett inn i SFPen, og MikroTiken får offentlig IP på VLAN 102. Vanlig surfing fungerer fint.
Jeg får imidlertid ikke tildelt IP på VLAN 100 eller 101. Er noen kjent med dette problemet?
Når jeg debug-logger ser det ikke ut som om jeg får et eneste svar på noen av DHCP-forespørslene. Torch viser at det er innkommende trafikk på VLAN101-grensesnittet, så jeg har tro på at jeg har satt opp VLAN-grensesnittet riktig.
(PS: Har foreløpig ikke satt opp IPv6, fordi jeg vil holde antall feilkilder til et minimum. Håper ikke det er dette som klusser til for meg her?)
Kode
[admin@MikroTik 126 RB3011] > /export
# oct/23/2022 21:52:45 by RouterOS 7.6
#
# model = RB3011UiAS
/interface bridge
add igmp-snooping=yes name=bridgeLAN
/interface vlan
add interface=sfp1 name=sfp1-vlan100-voip vlan-id=100
add interface=sfp1 name=sfp1-vlan101-tv vlan-id=101
add interface=sfp1 name=sfp1-vlan102-internet vlan-id=102
/interface list
add name=interfaceListWAN
add exclude=interfaceListWAN include=all name=interfaceListLAN
/ip dhcp-client option
add code=60 name=vendor-class-identifier value=0x46542D503334313042
/ip dhcp-server option
add code=43 name=q22 value="'Altibox-TMS-Server-Address:https://tmc.services.altibox.net:37020/acs'"
/ip dhcp-server option sets
add name=set1 options=q22
/ip pool
add name=poolLAN ranges=10.0.126.20-10.0.126.250
/ip dhcp-server
add address-pool=poolLAN dhcp-option-set=set1 interface=bridgeLAN lease-time=2d name=DHCPserverLAN
/interface bridge port
add bridge=bridgeLAN ingress-filtering=no interface=interfaceListLAN
/interface list member
add interface=sfp1 list=interfaceListWAN
add interface=sfp1-vlan100-voip list=interfaceListWAN
add interface=sfp1-vlan101-tv list=interfaceListWAN
add interface=sfp1-vlan102-internet list=interfaceListWAN
/ip address
add address=10.0.126.1/24 interface=bridgeLAN network=10.0.126.0
/ip dhcp-client
add add-default-route=special-classless default-route-distance=100 dhcp-options=vendor-class-identifier disabled=yes interface=sfp1-vlan100-voip use-peer-dns=no use-peer-ntp=no
add add-default-route=special-classless default-route-distance=100 dhcp-options=vendor-class-identifier interface=sfp1-vlan101-tv use-peer-dns=no use-peer-ntp=no
add dhcp-options=vendor-class-identifier interface=sfp1-vlan102-internet use-peer-ntp=no
/ip dhcp-server matcher
add address-pool=poolLAN code=43 name=q22 server=DHCPserverLAN value="'Altibox-TMS-Server-Address:https://tmc.services.altibox.net:37020/acs'"
/ip dhcp-server network
add address=10.0.126.0/24 dhcp-option=q22 dns-server=10.0.126.1 gateway=10.0.126.1 netmask=24
/ip firewall address-list
add address=10.0.126.0/24 list=adrLAN
/ip firewall filter
add action=accept chain=input connection-state=established,related
add action=accept chain=input in-interface=sfp1-vlan101-tv protocol=igmp
add action=accept chain=input in-interface=sfp1-vlan101-tv
add action=accept chain=input protocol=igmp
add action=accept chain=input in-interface-list=interfaceListLAN src-address-list=adrLAN
add action=accept chain=input in-interface-list=interfaceListLAN
add action=drop chain=input connection-state=invalid
add action=drop chain=input
add action=drop chain=forward connection-state=invalid disabled=yes
add action=fasttrack-connection chain=forward connection-state=established,related hw-offload=yes
add action=accept chain=forward connection-state=established,related
add action=accept chain=forward in-interface-list=interfaceListLAN out-interface-list=interfaceListWAN
add action=accept chain=forward in-interface=sfp1-vlan101-tv
add action=drop chain=forward
/ip firewall nat
add action=masquerade chain=srcnat ipsec-policy=out,none out-interface=sfp1-vlan102-internet
add action=masquerade chain=srcnat out-interface=sfp1-vlan101-tv
add action=masquerade chain=srcnat out-interface=sfp1-vlan100-voip
/routing igmp-proxy
set quick-leave=yes
/routing igmp-proxy interface
add alternative-subnets=0.0.0.0/0 interface=sfp1-vlan101-tv upstream=yes
add interface=bridgeLAN
Sist endret av Tell; 23. oktober 2022 kl. 22:11.