Vlan

Give your containers their own IPs on any VLAN with Docker MACVLAN and IPVLAN. A practical guide with docker-compose configs, routing tweaks, and real-world homelab use cases.

Practical RouterOS 7 best practices for homelab and small-business deployments — security hardening, firewall design, VLAN segmentation, FastTrack performance tuning, DoH configuration, and backup automation with real commands.

A complete guide to configuring MikroTik CAPsMAN with VLANs in RouterOS 7 — local forwarding mode, bridge VLAN filtering, provisioning rules for multiple SSIDs, DHCP per VLAN, and real troubleshooting for the common mistakes that break CAPsMAN VLAN setups.

VLANs separate layer-2 networks. Once a router has interfaces in those networks, firewall policy decides which routed connections are allowed. NAT does not grant permission through the firewall. This guide describes a staged RouterOS 7 lab workflow. It replaces the earlier universal paste-in script with explicit configuration fields and verification gates. Adapt each stage to the installed release and current configuration. Verification status Area Evidence and limits Documentation review Official MikroTik references reviewed on October 31, 2026. Examples Proposed lab settings, not a captured RB5009 or home-router deployment. Commands Read-only RouterOS inventory commands; no live parser or device execution performed. Runtime VLAN filtering, DHCP, firewall isolation, recovery, and WiFi mapping remain untested for this revision. 1. Preserve access and inventory the router Have a working console or separate recovery path before touching the bridge carrying management traffic. Save a configuration export and an appropriate protected backup outside the router, and document how to recover them. Exports can omit secrets and are not a complete substitute for a recovery plan. ...

A Proxmox bridge connects guest interfaces to a network. VLAN filtering determines which VLANs traverse its ports. Routing and firewall policy determine which subnets may communicate. Start by documenting what the physical switch sends to the host. A correct guest VLAN tag cannot fix a mismatch on the uplink. Verification status Area Evidence and limits Technical review Reviewed against the official references below on October 31, 2026. Shell examples Bash syntax checked; no host networking commands executed. Configuration Illustrative single-uplink IPv4 lab, not a captured production configuration. Runtime Application, rollback, DHCP, guest traffic, and firewall behavior remain untested for this revision. 1. Identify the management path These two designs are different: ...

Every homelab needs a solid network foundation. This guide walks through the full configuration of R1 — a MikroTik edge router with segmented VLANs, inter-VLAN firewalling, WireGuard VPN, and a Cloudflare Tunnel running directly on the router. The config below is based on RouterOS 7.22.1. Commands are split by section so you can follow along step-by-step. Replace anything in <> with your own values. Hardware Model: MikroTik E62iUGS-2axD5axT OS: RouterOS 7.22.1 WAN: GPON FTTH (PPPoE on VLAN 100) Port Layout Port Role Access VLAN Notes SFP1 WAN — GPON ONT, native vlan 1 for ONT access Ether1 CCTV 50 Untagged, camera network Ether2 MGMT 99 Untagged, management Ether3 MGMT 99 Untagged, secondary management Ether4 HOME 10 Untagged, main home LAN Ether5 Trunk Tagged Inter-switch link carrying all VLANs Step 1 — Bridge Setup Create the main bridge with VLAN filtering enabled, and a separate bridge for container veth interfaces: ...