IP Address to the Bridge or to the VLAN1 to access the switch

Hi All,

I am configuring a CRS326, running RouterOS, in Bridge mode. For the proper HW Offloading, I have created a single bridge with all the ports assigned to this bridge, except ether1 which is the Management port.

At present I had assigned an IP to the Bridge interface, in the range of my existing setup, and I am able to connect to the switch remotely.

My question is should I assign an IP to the Bridge interface or to the VLAN 1 interface? In all the switches that I have configured, I have assigned the IP address to the VLAN 1 to access the switch. VLAN 1 is my management interface.

Thanks.

Personally I would only assign IP to ether1 aka the MGMT/BOOT interface.

But if you want mgmt to be rechable from elsewhere I would set it on VLAN level so that you can define where this VLAN is reachable because you probably dont want lets say INTERNET to be able to handshake with the mgmt of your Mikrotik.

While at it dont forget to limit which srcip should be able to interact with the mgmt of your Mikrotik by defining the client-ip for each /ip/service.

Best read on vlans and applicable to the CRSXXX series of switches.
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

Best video: https://www.youtube.com/watch?v=YLtGQAQ8iS0&t=1394s

To answer the question… The bridge does nothing, you should have a management vlan, and thats the address the Switch Uses internally.
All other vlans are NOT identified, nor are they tagged on the bridge. Only the management vlan has the bridge tagged in /interface bridge vlans.

In terms of management port, one can dedicate a port on the switch for management access or what I prefer is a off bridge configuring and access port.

Then you failed to read the first article.
There is no different between switch and routers in vlan setup except for what I detailed.
Using vlan1 is not the way to go.

I have not read the article.

My existing setup has VLAN1 as the management VLAN. I need an IP address to the LAN1 and access the switch through it. This is the way all my other switches are accessed. I want to fit CRS326 into my existing setup.

In my CRS326, I have assigned the IP address to the Bridge interface. VLAN 1 is not present in the VLAN table by default, I think.
Should I need to create VLAN 1, if it is being used in my existing setup or it is already defined?
Will assigning IP to the Bridge interface is ok to access switch or it is mandatory in Mikrotik to have a management VLAN and the switch be accessed through it?

Thanks

Good because there is no reason to have three threads about your single device…

http://forum.mikrotik.com/t/ip-address-to-the-bridge-or-to-the-vlan1-to-access-the-switch/177873/1 <-------- this thread
http://forum.mikrotik.com/t/steps-to-configure-crs326-24s-2q-rm-as-a-l3-switch-wihtout-router-on-a-stick/177876/3
https://forum.mikrotik.com/posting.php?mode=quote&p=1089647

Pick one and stick with it and direct other readers to the single thread you choose!