Maybe for my LoT (LAN of Things): having multiple (even many) local LANs some each with their section of LoT equipment nicely separated and partially being able to talk to some of the other LANs or part of the outside world.
Some links that might help me getting this set up:
- [WayBack] How to set up multiple networks on a Mikrotik router | Networking For Integrators
- [WayBack] Masqueraed and routing, few questions (multiple LAN, multiple WAN scenario) – MikroTik RouterOS
- [WayBack] Multiple Lan on single wan – MikroTik RouterOS
- [WayBack] Mikrotik RouterOS routing between subnets on local ports – Network Engineering Stack Exchange
The basic plan:
- Configure each port or grouped (with ethernet master-port or maybe bridged) of ports having their own address pool and DHCP server so each of them are in a separate private network
- Routes between the networks so they can be accessed
- NAT mangling so the networks can reach the other networks or outside world without exposing their private network addresses
- Firewall rules to permit/limit which networks can see each other or the outside world
WinBox displays routes in various colors [WayBack]:
- Black – active
- Blue – inactive
- interface not up or disconnected
- other route with higher precedence already covers this route
- Red – invalid
- interface does not exist
- interface is disabled
- IP address not on that interface any more
Sometimes they show as blue while still being legitimate. Not sure why yet.
–jeroen