You are here

MikroTik Routers & Switches

28 posts / 0 new
Last post
ve3ei
ve3ei's picture
MikroTik Routers & Switches
Has anyone tried to use the switch portion of a MiktoTik router to do the WiFi to WAN (Internet) connection?
The router connects to the internet and has provision for a few ports to be configured as vLAN so it should be able to at least bridge the BulletM2
to the internet for temporary tunneling applications. I am current using an RB750 inexpensive router.
Eric - ve3ei
nc8q
nc8q's picture
Microtik RB750P-PBr-2 Power Box as a switch?

I was hoping to power and dtd connect two (2) NSM5-XWs with one (1) ethernet cable up the tower.
Ooopps, I purchased a Microtik RB750P-PBr-2 Power Box and now realize it is a router, not a switch.
Although the docs claim this device runs linux internally, it seems to require a Microsoft(r) Windows OS
and Winbox.exe for configuration. Grrrrr.

'wine winbox.exe' failed with dependency errors.

I did find a web GUI at 192.168.88.1 and configured
'All ports in bridge mode'. But when I added the two NSM5-XWs, they did not appear in my existing
NSM3's node list. May this device be configured as a switch from the GUI or do I need to
'call-a-friend' with a Windoze box? Any hints will be appreciated.

Chuck

AJ6GZ
The M5 XW models have the
The M5 XW models have the following port layouts: Main - LAN (untagged) Secondary - WAN (vlan 1) and DtD (vlan 2) It seems you want to DtD 3 nodes together. This would require bringing the Secondary ports of the XW's down to your Mikrotik. I assume the NSM3 is plugged in here too? Can you let us know how everything is cabled? The Mikrotik will absolutely do what you need to do. I use them all the time and can help once we get the physical layout clarified. Ian KD6EPQ
nc8q
nc8q's picture
Microtik RB750P-PBr-2 Power Box and 2x NSM5-XWs

https://www.aredn.org/content/gs108e-3-node-4-lan-1-wan

I am thinking it would work if it was programmed like ports 1 through 5
of the GS108E in the example link above. One of the VLAN11-LAN ports
would be the cable that comes down from the tower and into the shack.
e.g.
Port 1: LAN #1 on Node A (+POE injection, from tower to 'SHACK')
Port 2: Mesh Node A (NSM5-XW)
Port 3: LAN #2 on Node A
Port 4: Mesh Node B (NSM5-XW)
Port 5: LAN #1 on Node B

nc8q
nc8q's picture
Can you let us know how everything is cabled?

Image attached.

Image Attachments: 
AJ6GZ
This will work well.

This will work well. You have a smart switch on the bottom of the tower so will have maximum flexbility.  We should bring all VLANs down the one wire.  So that would be VLAN 1, VLAN 2, and the two LANs one from each node. All 3 nodes will mesh together and you will have all 3 LAN subnets available.

On the RB750:
ether1 - vlan 1, vlan 2, vlan A and B  (All tagged)
ether2 - vlan A
ether3 - vlan 1, vlan 2 (all tagged)
ether4 - vlan B
ether5 - vlan 1, vlan 2 (all tagged)

On the base switch:
the NSM3  port - vlan 1, vlan 2, vlan C   (1 & 2 tagged)
the RB750 port - vlan 1, vlan 2, vlan A and B (all tagged)
remaining ports - any selection of untagged A, B, C to plug in your computers, phones, etc.
remaining ports - one untagged vlan 1 port if you want WAN to Internet

I just created a long-winded tutorial on the MikroTik. It should help. Let me know here regarding this specific setup. It is pretty much the same as the last example in the tutorial which has 2 XW devices and an uplink.

Ian
 

nc8q
nc8q's picture
boot RB750-PBr2, http://192.168.88.1,...,On the RB750:

Uh, After booting the RB750, setting a password and rebooting;
I am at "192.168.88.1/webfig/".
It appears that the top right navigation tab "Quick Set" is selected.
How do I get to
<cite>"On the RB750:
ether1 - vlan 1, vlan 2, vlan A and B (All tagged)"</cite>
in your post ?

AJ6GZ
Click on "WebFig". The tabs
Click on "WebFig". The tabs going down the left side should then show up. They're more or less the same as the Winbox client screenshots belows, with just some cosmetic differences.
nc8q
nc8q's picture
the Winbox client screenshots below
Thanks, however I see no screen shots. Is there an URL? Chuck
AJ6GZ
Sorry I was replying without

Sorry I was replying without paying attention... I was referring the various screens at https://www.aredn.org/content/mikrotik-tutorial  tho I don't see the upper right corner button I was referring to :)  There it is....



 

nc8q
nc8q's picture
I was referring the various screens at https://www.aredn.org/con

I found those various screens. However, I am very confused at:
"If you are only connecting a single node, are not using DtD and WAN functions, you can skip this. Under the Interfaces tab, Click the + tab and add a VLAN. I have named this one ‘ether2-vlan1’ indicating it will be the tagged vlan1 traffic from the ether2 interface. Configure ‘VLAN ID: 1’ and select ‘ether2’ as the interface and click OK. Repeat for VLAN 2. Do this for each interface that will have a node on it."

I do not see a "+ tab" to click and
at the 'Repeat for VLAN2', do I repeat from the previous sentence, from 2 sentences previous, or 3 sentences previous
("Click the + tab and add a VLAN")?

Chuck

AJ6GZ
VLANs

So on WebFig (use Winbox if you can, my screenshots were from that), on the Interfaces page, click 'Add New', then 'VLAN'. Edit the following:

Name:  ether2-vlan1
VLAN ID:  1
Interace:  ether2

everything else can be left alone.  By repeat, I meant we do the same thing but for VLAN 2:
Name:  ether2-vlan2
VLAN ID:  2
Interace:  ether2

In summary, for an XM node you'll want:
ether1 (no vlan setting or changes necessary, leave as default)
ether1-vlan1 (VLAN ID:1 interface: ether1)
ether1-vlan2 (VLAN ID:2 interface: ether1)
Here, ether1 will carry all traffic, the LAN, DtD and WAN.

For an XW node fully configured you need two ports:
ether3 (no changes)
ether4-vlan1 (VLAN ID:1 interface: ether4)
ether4-vlan2 (VLAN ID:2 interface: ether4)
Here, ether3 carries VLAN, and ether4 carries DtD and WAN.

Example:

nc8q
nc8q's picture
Need 'ether2', have 'ether2-master' ?

Thanks.
I am starting after a recessed button reset.
I do not have 'ether2' in my 'Interface' drop-down list.
I have 'ether2-master'.
I would assume that 'ether1' should be 'master'. ?
Is 'ether1' = 'port 1 PoE In', and reserved for POE?
You speak of an 'XM' node in 'ether1'. How do I get POE and a node plugged into 'ether1' ?
I assume that (my computer and) 'Data+Power' plugs into 'ether1'.
Is 'ether1' the physical RJ-45 port identified as '1 PoE In', the left-most RJ-45 socket?
I am baffled. It makes no sense to me to plug a node into 'port 1 PoE In'
Sorry,
Chuck

AJ6GZ
Ports

You can use any port you want.  I just used those etherX numbers as examples.  But let's do the layout below.

-master refers to how the internal switching is setup. The 'master' concept is a Mikrotik thing. You need one master port in each switch group.  If you upgrade to the latest firmware (6.41.4) this setting is automatic and you needn't worry about it.

On the Mikrotik '1 PoE In' means you can power that Mikrotik via that port using an injector.  Some models including your PowerBox also have a dedicated round power jack supporting a higher amperage and thus could be powered two different ways. Those models often have one or more power PoE outs as does yours.  We should have just enough power margin to use port 1 to power two nodes (but no more).  I know you wanted to run one wire up the tower.  Power it up with two nodes on the ground first and make sure it's stable!  If you plug in the first NSM5 into port 2 and double click on ether2 from the Interface screen, you will see something like this:
PoE Out Status        powered on
PoE Out Current        95 mA
PoE Out Voltage        24.0 V
PoE Out Power        2.2 W

Looking back at your diagram I would recommend this:

-------------
Interfaces:

ether1
 ether1-vlan1
 ether1-vlan2
 ether1-vlan10
 ether1-vlan20

ether2  (no VLAN's added, leave as default)

ether3
 ether3-vlan1
 ether3-vlan2

ether4   (no VLAN's added, leave as default)

ether5
 ether5-vlan1
 ether5-vlan2

-------------
Bridges and their members:

bridge1:
 ether1-vlan1
 ether3-vlan1
 ehter5-vlan1

bridge2:
 ether1-vlan2
 ether3-vlan2
 ehter5-vlan2

bridge10:
 ether1-vlan10
 ether2
 
bridge20:
 ether1-vlan20
 ether4
------------
VLAN 10 will be the LAN for the first NSM5
VLAN 20 will be the LAN for the second NSM5
Everything will come down the wire on ether1. Your VLAN's will need to be configured on the switch at the base of the tower.


 

nc8q
nc8q's picture
Your VLAN's will need to be configured on the switch at the base
Thanks. "Your VLAN's will need to be configured on the switch at the base of the tower." My switch in the garage near the base of the tower is configured thus: https://www.aredn.org/content/gs108e-3-node-4-lan-1-wan I assume that I can plug the port-1_ether-1 cable from the RouterBox into either port-4 or port-6 of the GS108E. If I need to reprogram the GS108E, this will likely be another arduous task. Chuck
AJ6GZ
Yeah, a couple of changes.
We need to pull in all 4 VLANs from the single tower cable. I used port 03.

VLAN ID | Members
01       01 02 03 04 05 06 07 08
02       01    03
11       01 02   
22             03 04 05
33             03       06 07

T tagged
U untagged

1 NSM3
2 NSM3's LAN
3 PowerBox
4 NSM5 #1 LAN
5 NSM5 #1 LAN
6 NSM5 #2 LAN
7 NSM5 #2 LAN
8 WAN for all nodes

PVID
1 11
2 11
3 1
4 22
5 22
6 33
7 33
8 1

(I followed that Netgear example link.  Your LAN numbers may be different. 10, 20, 30. etc.
Just make sure it's the same everywhere.) 
nc8q
nc8q's picture
Too many LAN ports
Thanks, but that is too many LAN ports on the GS108E. I can spare Port3 for the 'downlink' from the Mikrotik, but I want Ports 4-7 on the GS108E available for additional nodes. The NS-M3's LAN on Port 2 on the GS108E is another single cable from the garage to the house. In the house is an 8 port switch for my computer to monitor the MESH and 3x Raspberry Pis; apache/mysql server, RASpbx, and MeshChat.
nc8q
nc8q's picture
"Couldn't add New Bridge Port - ether4 is already slave (6)"
"Couldn't add New Bridge Port - ether4 is already slave (6)" The configuration seems to run well until I get to the bottom of your directions and I try to add 'ether4' to 'bridge20'. Then I get this error: "Couldn't add New Bridge Port - ether4 is already slave (6)" Chuck
nc8q
nc8q's picture
#DHCP server can not run on slave interface!
"#DHCP server can not run on slave interface!" I typed in the commands in 'console' mode and got an error at the same place: trying to add 'ether4' to 'bridge20'. I am/was trying to create a text configuration file that can be '/import'ed after a 'power button reset'.
nc8q
nc8q's picture
I got this far and did not know what to do next...

"Under the Interfaces tab, Click the + tab and add a VLAN. I have named this one ‘ether2-vlan1’ indicating it will be the tagged vlan1 traffic from the ether2 interface. Configure ‘VLAN ID: 1’ and select ‘ether2’ as the interface and click OK. Repeat for VLAN 2. Do this for each interface that will have a node on it."

I think I got as far as adding a VLAN and naming it 'ether2-vlan1'.

I do not know how to "Configure 'VLAN ID: 1'".

See image of how far I got.

"The image was resized to fit within the maximum allowed dimensions of 600x600 pixels."
Crap, no wonder your screen-prints were blurry. :-|

Chuck

Image Attachments: 
KG6JEI
Ugh that's virtually
Ugh that's virtually unreadable!

TO AREDN WEBMASTER: In light of the fact that the average phone can easily have 12mp images (to say nothing of professional cameras) and the average desktop runs at least 2mp in size if not higher, and in consideration that storage is dirt cheap these days I think this size should be increased significantly.  There really isnt any user experience negative to doing this especially if they are captured inside size restricted display  where you click on them and they pop up to full 100% resolution it wouldn't mess up the page layout at all.

​Also might be good to expand this to allow other file times (TIFF,GIF, maybe even HVIC since its catching on with Apple devices making it their standard default) 
nc8q
nc8q's picture
A clearer screenshot

I changed my display to 800x600, saved a 'screenprint', cropped it to 600x600.

Attached.

Image Attachments: 
nc8q
nc8q's picture
Can you let us know how everything is cabled? (updated)
 NSM3       RB750P-PBr2    NSM5xw(a) NSM5xw(b) ... FUTURE NODE(S)
 ____        ___________    _____     _____         ____
|    |      |   P       |  |     |   |     |       |    |
|  M |      |   O       |  | 2 M |   | 2 M |       |    |
|  A |      |   R       |  | N A |   | N A |       |    |
|  I |      |   T       |  | D I |   | D I |       |    |
|__N_|      |_12345_____|  |___N_|   |_ _N_|       |____|
   |          |||||          | |       | |            |
   |         / ||| \________/  |       | |           /
   |        /  || \___________/        | |          /
   |       /   | \____________________/  |         /
   |      /     \_______________________/         /
   |     |                                       /
   |     |                                      /
   |     |              _______________________/     
 __|_____?_____________?__
|  1 2 3 4 5 6 7 8 9...16 |
|                         |
| (16 port switch         |
|  in garage)             |
|____ ____________________|
   |                 
   |        (One ethernet cable from garage to house)
 __|_______________  
|  1               |
|                  |
|  N N N N N N N   |
|  O O O O O O O W | GS108E 3 Node 4 LAN 1 WAN
|  D D D D D D D A | (in house)
|  E E E E E E E N |
|                  |
|  A A A B B C C   |
|__ _2_3_4_5_6_7_8_|
     | |         |
     | |         Home LAN switch (to internet)
     | RPi
     |     
     IP PHONE --- Laptop

The GS108E is configured thus:
 https://www.aredn.org/content/gs108e-3-node-4-lan-1-wan
KE6UPI
SSH 22
Just ssh in port 22

David
K7DXS
You don't need windows to use
You don't need windows to use winbox. It works perfectly under wine - in fact it's specifically built to. What errors do you get?
nc8q
nc8q's picture
Microtik RB750P-PBr-2 Power Box and NSM5-XWs and more nodes

Hi, Ian: Thanks for your offer of assistance.
I have 2 instances where a remote passive POE switch will help.

1. At home, where I can run fewer cables up the tower.
I have, at least, 2 nodes each for 900, 2400, 3400, and 5900(XW) MHz and wish to test connectivity with other local nodes.
I am offering loaner nodes to local prospective meshers to try out the different bands to see which works best. So,
from time to time, I climb the tower and re-mount and re-point various nodes. Often the 50' ethernet cables get snagged
into my multiple side arms, mounts, and masts. I would like to have a central point near the top of the tower to obtain
data/power. Alas, the dern NSM5-XWs require 2 cables. :-| At home I have equipment (IP-fone, RPi server) and want
WAN to the internet available. I have this now utilizing a 'NetGear GS018E Plus' (managed) switch. I don't plan to power
all my devices with the 'Power Box', just either two NSM5-XWs or one NSM5-XW and (1or2) XM nodes. All services
will be configured on an existing XM node, so I assume that I do not need the power box to function as a managed switch.
If any of this is understandable, your assistance is most welcome.

2. At a remote site where we have one cable for each node, but want to add a node or nodes.
I want to add my NSM5-XW but there are not 2 spare ethernet cables. There are no (not yet)
services here, so no need for a managed switch, just a simple switch.

Chuck
 

kf7nqw
Mikrotik router attack

Kaspersky Labs has found the following:

https://finance.yahoo.com/news/sophisticated-malware-attacks-routers-033600657.html

I have two Mikrotik routers and four switches. They have not been on the Internet except for firmware updates so I doubt mine are affected. However, I will update to the latest firmware shortly.

Also, thank you for posting the how-to on how to configure them for use in a mesh network.

John
kf7nqw

AJ6GZ
Article is a little late...
Article is a little late... It was patched in March 2017 with v6.38.5. Also I think one to had to use v2 of winbox which is like 3-4 years old? and leave the thing connected directly to to the internet with http open. 6.41.3 came out today. I would say the requisite "keep everything up to date", but we've got Cisco and other various network stuff running a lot longer than 3 years! Not even a reboot let alone software updates! :) I do for some reason keep on the Mikrotik's mainly cause there are legit bug fixes or feature changes some time to time. And it's often my wireless experimental platform so I end up building a lot of them. Only takes 30 seconds... might as well.

Theme by Danetsoft and Danang Probo Sayekti inspired by Maksimer