mikrotik-ipv4-vlan-homelab

mikrotik-ipv4-vlan-homelab

Introduction

This lab consists of three MikroTik routers and three VLANs, allowing machines to be isolated across three different networks.

This configuration is used in my NixOS homelab.

Inventory

Number	Description
3	MikroTik routers
3	VLANs
9	PCs

Details

• DMZ (32)
• ADM (240)
• LAN (254)

Type	Name	Description	Identifier	Acess
vlan	DMZ	Demilitarized zone	32
vlan	ADM	Administrative zone	240
vlan	LAN	Local network zone	254
router	mtr254	Main router	172.100.100.254(MGMT) 172.100.32.254(DMZ) 172.100.240.254(ADM) 172.100.254.254(LAN)	ssh admin@172.100.100.254
router	mtr253	Second router	172.100.100.253(MGMT) 172.100.32.253(DMZ) 172.100.240.253(ADM) 172.100.254.253(LAN)	ssh admin@172.100.100.253
router	mtr252	Third router	172.100.100.252(MGMT) 172.100.32.252(DMZ) 172.100.240.252(ADM) 172.100.254.252(LAN)	ssh admin@172.100.100.252
computer	pc254	Test computer	172.100.32.4(DMZ) 172.100.240.4(ADM) 172.100.254.4(LAN)	docker exec -it clab-mikrotik-homelab-pc254-dmz docker exec -it clab-mikrotik-homelab-pc254-adm docker exec -it clab-mikrotik-homelab-pc254-lan
computer	pc253	Test computer	172.100.32.3(DMZ) 172.100.240.3(ADM) 172.100.254.3(LAN)	docker exec -it clab-mikrotik-homelab-pc253-dmz docker exec -it clab-mikrotik-homelab-pc253-adm docker exec -it clab-mikrotik-homelab-pc253-lan
computer	pc252	Test computer	172.100.32.2(DMZ) 172.100.240.2(ADM) 172.100.254.2(LAN)	docker exec -it clab-mikrotik-homelab-pc252-dmz docker exec -it clab-mikrotik-homelab-pc252-adm docker exec -it clab-mikrotik-homelab-pc252-lan

---

Diagram

---

Tests

cd mikrotik-ipv4-vlan-homelab
just deploy

# wait 1 minute
just test
just diagram

# Connect to router SSH
ssh admin@172.100.100.254 # .253 or .252 (pass admin/admin)

# Connect to router WWW
xdg-open 172.100.100.254 # .253 or .252 (pass admin/admin)