VLAN setup between Cisco and MikroTik?

Question

Mikrotik

Hello, I have a question about VLAN interaction on Mikrotik and Cisco devices: there is a Mikrotik rb2011uias-2hnd-in router and a Cisco SF350-48-K9-EU switch (layer L3 switch). Is it possible to separate traffic processing between Vlans on Cisco, and Internet access through a router? Or will all switching + routing have to be implemented on Mikrotik?

Answer 1

Closing the L3 internal network routing to an L3 switch is a good idea. On the switch, segment the network into L2 segments, select an IP network for each segment. You can make a DHCP Relay on the switch, and Mikrotik will be the DHCP server.
There, on the switch, you can configure ACLs to prohibit traffic between segments, for example, everyone should have access to the segment with network printers, and only security guards and networkers should have access to the segment with cameras and Skud.
You just need to choose the right switch. Cisco SF is still a Small Business series, not as reliable as Catalysts.