VLAN on Mikrotik: implementation options “Mikrotik Mikrotik is different”, this must always be remembered, known and understood when implementing VLAN. Mikrotik, like any other network equipment manufacturer, has its own vision for implementing VLAN settings. On the basis of Mikrotik equipment, it is possible to implement both software (software) VLANs and hardware (hardware). Hardware VLAN, as the name implies, is implemented directly on the basis of the switch-chip. The possibility of implementing a hardware vlan depends on which switching chip is used in your device. In this regard, we recommend that you read the official Switch Chip Features manual. In short, Hardware VLAN is supported by the following chips:
Atheros7240:
RB750
RB750UP
RB751U-2HnD
RB951-2n
Atheros8227:
RB941-2nD (hAP lite)
RB951Ui-2nD (hAP) RB952Ui-5ac2nD (hAP ac lite)
RB750r2 (hEX lite) )
RB750UPr2 (hEX PoE lite)
RB750P-PBr2 (PowerBox)
RB750P r2 RBOmniTikU-5HnDr2 (OmniTIK 5)
RBOmniTikUPA-5HnDr2 (OmniTIK 5 PoE)
RB2011 series (ether6-10)
RB951Ui-2HnD
Atheros8316:
RB493G
RB435G
RB450G
RB750G
RB1200
RB1100
Atheros8327:
RB953GS
RB850Gx2
RB2011 series (ether1-5 + sfp1)
RB750GL RB751G-2HnD
RB951G-2HnD
RBD52G-5HacD2HnD (hAP ac²)
cAP ac
RB1100AH
RB1100AHx2
CCR1009 series (ether1-4)
RB433GL
QCA8337:
RB3011 series
RB OmniTik ac series
RB750Gr2 (hEX)
RB962UiGS -5HacT2HnT (hAP ac)
RB960PGS (hEX PoE) RB960PGS-PB (PowerBox Pro)
In all of the listed devices, VLAN can be implemented using the switching chip. The advantage of this method is that the processing of tags, their addition and removal is performed by the chip itself, without the participation of the processor (hardware offload, hardware unloading). This method should be used in cases where: the goal is to achieve maximum performance; VLAN performance is limited by CPU capabilities; implementation of some features is unattainable by means of software VLAN; Hardware VLAN offers a large number of parameters, options, and frame processing rules. You can find detailed information on setting up a hardware VLAN in the official documentation at the link above. In case this topic is in demand, we will publish a separate instruction. The second implementation method is software / “soft” VLAN / Software VLAN. It is this method that is most often described and found in practice. It is not as functional, but it is as simple as possible to set up.
Similar Posts:
- how to change mac address on mikrotik devices
- Mikrotik: drop ports scanners + honeypot
- Mikrotik CAPsMAN Wifi channel list
- How to drop port scanners in Mikrotik routers