802.1Q Router on a Stick Example

802.1Q Router on a Stick Example

From ISP Supplies Customer Learning Center

Router-On-A-Stick - 802.1Q Trunking With MikroTik SWOS

Router-On-A-Stick is a phrase referring to the connection of a 802.1Q capable switch to a single router interface. By trunking across the Ethernet interface and assigning separate Vlans to each of the switch's ports or groups of ports, it is possible to create a configuration that simulates a router with many separate physical Ethernet interfaces. Consider the following example:


In this example, a router with a single Ethernet interface is trunked to a MikroTik switch. In practice, this same configuration can be used between two switches or two routers. The purpose of this article is to show the steps required to setup the MikroTik RB250GS switch as a trunked switch in the router-on-a-stick configuration.

To log into the RB250GS switch, simply web browse to from a computer on the same physical network segment with an IP on the same subnet, The default user name is admin with no password.

All settings may be left at the defaults with the exception of a few.

In this example we are using Vlan Id's 1, 200, 300 and 400. Note that the switch will respond to http requests to its IP address on all ports. This behavior is a bit different than Cisco IOS that responds to untagged traffic via an IP bound to Vlan 1. The way the OS is built, there is no need for a default gateway or a subnet mask.

NOTE: Once you set port 1 to "trunk" mode, you will not longer be able to communicate with the switch unless you create a Vlan1 on your router.

Selection of the Vlan ID and the assignment to the ports is your choice, decide what Vlan ID's you will use and where you will assign them.

In this example we need two ports for devices on Vlan 300 on Ports 3 & 5 and one port for device on Vlan 400 on Port 4 and one port for a device on Vlan 200 on port 2.

NOTE: Before starting configuration, it is assumed you have bound to your laptop and the switch is at the default Ip of You must be accessing thes switch via ehter2 through ether5 since you are about to turn ether1 into a trunk port and you will lose communication with the switch at that point on ether1.

1. Begin by clicking on the VLAN tab and make the following changes, assuming the trunk port will be Port1 (the port that is connected to the router).

2. The VLAN page determines how the switch strips the Vlan tags with specific Vlan ID's from the packets as they exit these ports. Setting Port 1 to Vlan Mode "enabled" and VLAN Header to "add if missing" makes Port 1 a trunk port.

3. When done, your VLAN page should look similar to this:


4. Next, click on the VLANs tab. This is where you create the Vlan Id's to be used on the switch and on which ports these tags will be applied. So, for example, in this scenario, if I create a Vlan interface on the router with a Vlan ID of 10, that traffic will appear on the switch on port 2. Likewise Vlan 30 will be on port 3 and Vlan 40 on port 4. The trunk port is port 1.

NOTE: You must also create Vlan1 but it is not necessary to assign it to any ports, just create it.

5. Here is the example:


Here is how it looks on the new RB260GS Switch, note the slight changes compared to the RB250GS:


6. The last step is to change the IP address, system identity and the password on the System tab and configure the router.

The router configuration is a standard one for Vlans, create Vlan interfaces attached to the Ethernet interface that is connected to the switch (in this example Ether1) and match the Vlan ID numbers you assigned to the switch. Then bind your IP addresses to the Vlan interfaces.

Here is the router interface configuration:


NOTE: The management IP for the switch is handled a bit differently. You must create a Vlan1 with ID=1 on the physical interface that will trunk to the switch. Then bind your management IP to that Vlan1 interface. In the example above, you would bind to Vlan1 and then you can access the switch through the trunk port.

    • Related Articles

    • Netonix WISP-Switch & Mikrotik Router on a Stick Howto

      In this example we will build a router on a stick. We want to manage the switch from port 8 using inter vlan routing on the router. Here is the physical setup: 1. To configure the switch, set an IP address of on your laptop and log ...
    • Port Forwarding on a Teltonika Router

      How to Open Ports in a Teltonika RUT950 Router This Teltonika RUT950 router has a firewall that helps protect your home network from unwanted Internet access. The firewall does this by blocking all ports or connections that are not authorized. This ...
    • Recursive Routing Example

        Contents 1 Introduction 2 Implementation 2.1 Basic Setup 2.2 Multiple host checking per Uplink 2.3 Workaround 1 3 Thanks to Introduction Let us suppose that we have several WAN links, and we want to monitor, whether the Internet is accessible ...
    • How to Log Into a Mikrotik Router

      After you have installed the RouterOS software, or turned on the Router for the first time, there are various ways how to connect to it: Accessing Command Line Interface (CLI) via Telnet, SSH, serial cable or even keyboard and monitor if your router ...
    • Standard Config for Bridged eNodeB and Customer Router

      Settings for the eNodeB Go through normal eNodeB setup from the Baicells manual.  Then make sure these settings are made:     Save everything and reboot. Settings for the UE Log into UE, upgrade to BCE-ODU-1.0.12 and leave everything at default ...