Basic VLAN switching
This page provides an overview of basic VLAN switching configuration on MikroTik RouterOS, covering setup for devices with Marvell Prestera and RTL8367/CRS series switch chips, including hardware-offloaded VLAN filtering and port configuration examples.
Bridge VLAN Table
This page introduces MikroTik RouterOS's Bridge VLAN Table feature, explaining how to configure VLAN filtering in bridges using tagged/untagged ports, PVIDs, and ingress/egress rules. It includes setup examples for trunk and access ports, emphasizing security through management access control and EtherType filtering.
Bridging and Switching Case Studies
This page presents practical case studies for RouterOS bridging and switching, covering VLAN configurations, IGMP/MLD snooping, spanning tree protocols, loop prevention, and switch-chip behavior to aid Layer 2 deployment and troubleshooting.
CAPsMAN with VLANs
This page explains configuring CAPsMAN with VLANs in MikroTik RouterOS, enabling centralized wireless management and VLAN tagging for different client groups. It covers Local Forwarding Mode setup, provisioning rules, DHCP configuration, and VLAN filtering on switches.
CHR: Troubleshooting
This page covers troubleshooting for MikroTik RouterOS CHR, addressing IGMP snooping issues on Linux bridges, VLAN-related data flow problems between guests and the outside world, VLAN tagging requirements in hypervisors, and limitations on VMware guest automation.
Controller Bridge and Port Extender
Controller Bridge (CB) and Port Extender (PE) in RouterOS enable extended network topology with simplified management for CRS3xx switches, allowing virtual port extension and centralized control via cascade/upstream ports, though some features like bonding for extended ports are unsupported.
CRS1xx and 2xx series switches
The page introduces MikroTik RouterOS CRS1xx and 2xx series switches, highlighting their high-performance features including Layer 2/3 switching, VLAN support, QoS tools, mirroring capabilities, and port isolation options. It details model differences, technical specifications like CPU speed and jumbo frame sizes, and provides abbreviations for VLAN-related terms.
CRS1xx/2xx series switches examples
This page provides configuration examples and use cases for Cloud Router Switch features on CRS1xx/2xx series switches, covering port switching, management access setup with VLAN filtering, and security considerations for IP-based access.
Loop Protect
Loop Protect prevents Layer2 loops by detecting and disabling interfaces receiving their own loop-protect packets, with configurable intervals and disable times. It supports Ethernet, VLAN, EoIP, and VxLAN interfaces, though (R/M)STP is recommended for bridges.
Switch Chip Features
This page introduces MikroTik RouterOS switch chip features, detailing supported functionalities like Port Switching and Mirroring across various models, along with limitations in bandwidth controls and VLAN configurations.
VLAN
This page introduces VLAN functionality in MikroTik RouterOS, explaining how to create and manage Virtual LANs using IEEE 802.1Q standards for efficient network segmentation, with details on VLAN interfaces, trunking, Q-in-Q tagging, and interface properties.
VLANs on Wireless
This page explains how to configure VLANs on MikroTik RouterOS wireless interfaces, enabling Layer2 segmentation between different Virtual APs and networks. It includes setup examples for isolating Guest and Work APs using VLAN interfaces, bridge configurations with VLAN filtering, and security profile setups.
Wireless Case Studies
Wireless case studies provide practical RouterOS designs and troubleshooting workflows for CAPsMAN VLANs, wireless VLAN deployments, station modes, enterprise security, and general wireless troubleshooting.
Wireless VLAN Trunk
This page explains how to configure Wireless VLAN Trunking on MikroTik RouterOS using bridge VLAN filtering, allowing selective forwarding of specific VLANs over a wireless PtP link while blocking others. It covers bridge setup, VLAN table configuration, interface access control, and hardware-offloaded VLAN handling.