MikroTik VLAN and Bridge Configuration

VLAN and Bridge are two useful features in MikroTik Router.  These two features are frequently used in any MikroTik network configuration. VLAN divides a physical interface into multiple logical interfaces. So, you can isolate your network into multiple logical networks on a physical interface. On other hand, MikroTik Bridge integrates multiple physical interfaces in a logical interface. So, you can extend your broadcast domain on multiple physical interfaces and can extend your popular services such as PPPoE or DHCP on multiple physical interfaces. As VLAN and Bridge are useful to any MikroTik network, this article is designed to show the necessary steps to configure VLAN and Bridge in MikroTik Router.

VLAN in MikroTik

VLAN (Virtual Local Area Network) is used to create multiple virtual LANs on a single physical interface. It is a layer 2 method that divides a single broadcast domain into multiple broadcast domains. So, proper VLAN planning can increase your network performance as well as network privacy.

There are various situations when you need to create VLAN in your MikroTik router. For example, if your ISP provides your WAN connection through a VLAN, you have to create a VLAN on your WAN interface or if you need to isolate your VIP users from other network users for any security purpose, VALN will be a better solution to isolate your physical network into multiple logical networks.

MikroTik VLAN Network
MikroTik VLAN Network

How to Create VLAN in MikroTik

VLAN can easily be created in MikroTik router like other network devices. Following steps will show you how to create VLAN in your MikroTik Router.

  • Login to your MikroTik Router by winbox with your login credentials.
  • Click on Interfaces menu from left menu bar and then click on VLAN tab.
  • Click on PLUS SIGN (+) to add new VLAN interface. A new window named New Interface will appear.
  • Put your VLAN name what you wish in Name input field.
  • Put your VLAN id in VLAN ID input field. If you want to create VLAN for WAN connection, your ISP will provide you the VLAN ID. If you want to create VLAN for your network, provide an integer number between 1 to 4095 what you wish.
  • Now choose your physical interface on which you want to create VLAN from Interface dropdown menu.
  • Click Apply and OK button.

A new VLAN interface has been created. Similarly, you can create as many VLANs as you want following the above steps.

Your newly created VLAN interface will behave like a physical interface. So, you can assign an IP on this VLAN interface as well as you can use this interface for routing. You will find your newly created VLAN interface all the places where there is an option to select interface such as assigning IP address on an interface, selecting your network gateway interface and so on.

If you wish to create VLAN for your local network, you have to configure a manageable switch. Follow my article about MikroTik VLAN routing configuration with manageable switch. It will show how to configure inter-VLAN routing with MikroTik Router and manageable switch.

MikroTik Bridge

Every port in MikroTik Router is a layer 3 port by default and its keep in different broadcast domain. So, if you create a PPPoE server or a DHCP server on any interface, the service cannot be accessible from any other interfaces and other interfaces keep unused sometimes. If you want to use these unused interfaces and want to access your DHCP or PPPoE server from all the interfaces, you have to turn your layer 3 ports to layer 2 ports and bind them to a layer 3 logical port. MikroTik bridge feature has come for this purpose.

MikroTik Bridge turns layer 3 ports to layer 2 ports and bind them with a logical layer 3 port. So, all the bridge ports as well as the logical layer 3 port keep in the same broadcast domain. Now it is possible to access any service like PPPoE or DHCP from any bridged MikroTik port.

How to Create Bridge in MikroTik Router

There are two major steps to create Bridge in MikroTik Router. First step is creating a logical bridge interface and second step is binding your desired physical interface to this logical interface. Following steps will show you the complete bridge configuration in MikroTik Router.

  • Login to your MikroTik Router by winbox with your login credentials.
  • Click on Bridge menu item from left menu bar. Bridge window will appear now.
  • Click on Bridge tab if not selected and then click on PLUS SIGN (+). New Interface window will appear.
  • Put your bridge interface name as you wish in the Name
  • Click Apply and OK
  • Now click on Ports tab and then click on PLUS SIGN (+). New Bridge Port window will appear.
  • Choose your physical interface that you want to bind to the bridge interface from Interface dropdown menu.
  • Choose your Bridge interface that you created before from Bridge dropdown menu.
  • Click Apply and OK
  • Do step 6 to step 9 if you want to add more physical interfaces to your bridge interface.

Creating logical bridge interface and binding physical interfaces to this bridge interface have been completed. Now any service that is created on bridge interface will be accessible from your bound physical interfaces easily.

If you face any problem to do above steps properly, watch below video carefully about MikroTik VLAN and Bridge Configuration. I hope it will help you to do the above steps successfully.

MikroTik VLAN and Bridge configuration has been discussed in this article. I hope you are now able to create VLAN or Bridge in your MikroTik Router if necessary. However, if you face any problem to create VLAN or Bridge in your MikroTik Router, feel free to discuss in comment or contact with me from Contact page. I will try my best to stay with you.

Why not a Cup of COFFEE if the solution?

mikrotik-vlan-and-bridge-configuration

ABU SAYEED

I am a system administrator and like to share knowledge that I am learning from my daily experience. I usually work on MikroTik, Redhat/CentOS Linux, Windows Server, physical server and storage, virtual technology and other system related topics. Follow Me: Facebook, Twitter and Linkedin.

Your name can also be listed here. Have an IT topic? Submit it here to become a System Zone author.

3 comments

Leave a Reply

Your email address will not be published. Required fields are marked *

*