How to run multiple networks from a Mikrotik http://networkingforintegrators.com/2013/01/how-to-run-multiple-networks-from-a-mikrotik/ 5 Port Router?

Since a Mikrotik (example eing a !"0#$% is a true " port router an& not 'ust a consumer-gra&e router (which is actuall( a router with ) port switch%* (ou can set them up to run multiple networks* use multiple +S,s for -./ failo0er* an& more. -h( (ou woul& want to &o an( of these things is e(on& the scope of this post* ut this will show (ou how to &o it. $et1s take an 23!"0#$ an& ha0e it run ) internal networks instea& of one. $ike this:

1.1. Master Port

4ut of the ox* the !"0 is set up for ether1 to e the -./ port an& ether2* ether3* ether)* an& ether" to e (our $./ port. 5he reason these ) ports all work together is ecause ether2 has all of the $./ settings an& 678, ser0er* then ether3* )* an& " are all 9sla0es: of ether2. +n Mikrotik terms* ether3* )* an& " ha0e their Master Port set to ether2. 5he ports are e0en 9name: as such* an& there is an 9S: in the left column showing which ports are 9sla0es::

+f we want ether3-" to run separate networks* we nee& to set them to ha0e /4 Master Port. +t1s important to note that the 9/ame: of the interface will not change ase& on (our settings. +f (ou change ether3 from a
1

Sla0e to a Master* the name will not up&ate on its own. +t1s 'ust a name. ;ou coul& call it 9,ort 3< or 9=re&: or 9+ ha0e m( /.S plugge& in here.: +t &oesn1t reall( matter to the functionalit( of the router> 6on1t get confuse& ( the port names when (ou start making changes. 8hange the Master ,ort on ether3* )* an& " like this (an& change the interface1s name if (ou like%:

-hen (ou10e set up ether3-" to ha0e no Master ,ort* none of the ports shoul& show an 9S: in the left column.

/ow* for a port to run its own network* it nee&s a few things:
+, .&&ress 678, Ser0er 2oute 1.2. IP Addresses

5o gi0e each port its own +, a&&ress* go into IP* then Addresses. 8lick the ?* t(pe in the Address (ou want to gi0e the port* t(pe in the Network (ou want to assign to the port* an& select the port from the Interface &rop-&own menu. 5o set up the 1@2.1AB.3.x(C su net on ether3* it woul& look like this:

-hen all ) su nets are set up* (our Address List screen shoul& look similar to this (ether3* )* an& " are in italics ecause there is nothing plugge& into them%:

1.3. DHCP er!ers " IP Pools

/ext is to set up a 678, ser0er for each port. +t1s the same concept as changing the &efault 678, range* ut (ou1re 'ust a&&ing a&&itional 678, ser0ers an& +, ,ools for (our network to use. =irst set up the a&&itional +, ,ools (ou1re going to use for each ser0er. ;ou1ll want to &o this first so that when (ou1re setting up the new 678, Ser0er (ou can 'ust select the new +, ,ool from the &rop-&own instea& of ha0ing to close it* go ack an& create the new ,ool* then go ack to creating the new 678, ser0er. #o to IP / Pool an& click the +. /ame the ,ool whate0er (ou want (like pool1 for the .1 su net* pool2 for the .2 su net* or whate0er (ou fin& eas( to remem er%. 5hen enter the Addresses as the 678, range (ou want to use for that port D so for the .3 su net (ou ma( want something like 192.168.3.5 !192.168.3.1 .

6o this for each port an& (our Pool screen shoul& look something like this (+ ha0e a E,/ pool set up as well* an& m( &efault-&hcp was alrea&( set up an& + &i&n1t want to change it 'ust for these screenshots%:

.t this point those +, ,ools aren1t eing use& ( an(thing. ;ou ha0e to set up new 678, Ser0ers to use them. #o to IP / "#$P %er&er / "#$P an& click the +. /ame the new ser0er whate0er (ou like* set the Interface to the port (ou want to ha0e use this ser0er* an& set the .&&ress ,ool (ou want this Ser0er to &raw from. +n other wor&s>

6o this for each port an& (our "#$P %er&er screen shoul& look something like this:

/ext (ou ha0e to set up (our 678, /etworks* so that each 678, 8lient will recei0e the correct 678, information like what its #atewa( an& 6/S ser0ers are. =or example:

"

.fter (ou &o this for all 3 new 678, ser0ers (not counting the one that was alrea&( set up on ether2%* (our "#$P %er&er / Networks screen shoul& look like this:

.t this point* if (ou plug (our laptop into ether3* it will gra an +, a&&ress in the 1@2.1AB.3.x(C range. +f (ou unplug it an& plug it into ether"* it will gra an +, a&&ress in the 1@2.1AB.".x(C range.
1.#. Routes

$ast step* which isn1t reall( a Fstep1 ut (ou nee& to know a out it* is what 2outes are set up for these new networks (ou10e set up. $ook at this screenshot.

+ &i& /45 enter an( of these m(self. 5he 96: in the left column means that each 2oute was a&&e& 6(namicall(. -hen (ou set the +, .&&resses for each port* as soon as (ou a&&e& a new .&&ress* the router a&&e& a &(namicall( create& 2oute for that network for (ou. +n this simple scenario (ou 'ust nee& to e
A

aware of this* (ou &on1t nee& to &o an(thing with it. Note the screenshot shows unreachable on the ports that dont have anything plugged into them. ;ou now ha0e ) $./ networks running on (our Mikrotik. Since the( are all on &ifferent su nets* (ou will not get an( 9 roa&cast: traffic etween them. ;ou can* howe0er* reach from one su net to another ( going to a specific +,. =or example* with 8ontrol)* when (ou open their programming software it picks up a roa&cast that the 8ontrol) processor sen&s out. +f (ou are on a &ifferent su net (ou will not see it an& the processor will ne0er populate in the software. 3ut* (ou can manuall( a&& the +, a&&ress of the processor an& it will work fine* e0en if it1s on a &ifferent su net. (this isn1t a suggestion of how to &o it* 'ust an example%. Same goes for things like .irpla( an& other streaming protocols. Man( of them rel( on roa&casting to tell Fe0er(one1 that the( are there an& waiting for (ou to sen& them a music stream. 5his can get rather complicate& when (ou start tr(ing to segment off &ifferent parts of (our networks. 5his post isn1t a out -7; (ou woul& segment e0er(thing* 'ust how (ou coul& &o it. :%

$ast up&ate&: .ugust 2!* 2013 at 1B:01 pm