Hello,

i have some troubles with CPU Load at my CRS354-48G-4S+2Q+. If one Host is copy a Backup with 500mbit. The Switch Load is between 50-85%. No Firewall or other Rules are configured.

[admin@SW01] > /system resource cpu print
# CPU LOAD IRQ DISK
0 cpu0 73% 70% 0%

[admin@SW01] > /system resource irq print
Flags: ro - read-only
# IRQ USERS CPU ACTIVE-CPU COUNT
0 5 switch1 auto 0 0
1 ro 19 serial auto 15 810
2 ro 48 pdx_eth_0 auto 2 960 543 297
3 49 mv64xxx_i2c auto 0 945 603 612
4 112 gpiolib auto 0 0

Can you please share your config?

/export hide-sensitive file-anynameyoulike

# oct/02/2021 17:20:54 by RouterOS 6.48.1
#
# model = CRS354-48G-4S+2Q+
/interface bridge
add name=br-10 protocol-mode=none
add name=br-20 protocol-mode=none
add admin-mac=08:55:31:02:F9:F9 auto-mac=no name=bridge protocol-mode=none
/interface ethernet
set [ find default-name=ether1 ] loop-protect=on
set [ find default-name=ether2 ] loop-protect=on
set [ find default-name=ether3 ] loop-protect=on
set [ find default-name=ether4 ] loop-protect=on
set [ find default-name=ether5 ] loop-protect=on
set [ find default-name=ether6 ] loop-protect=on
set [ find default-name=ether7 ] loop-protect=on
set [ find default-name=ether8 ] loop-protect=on
set [ find default-name=ether21 ] loop-protect=on
set [ find default-name=ether23 ] loop-protect=on
set [ find default-name=ether24 ] loop-protect=on
set [ find default-name=ether27 ]
set [ find default-name=ether28 ] loop-protect=on
set [ find default-name=ether37 ] loop-protect=on
set [ find default-name=sfp-sfpplus1 ] loop-protect=on
/interface vlan
add interface=ether1 name=ether1-20 vlan-id=20
add interface=ether1 name=ether1-940 vlan-id=940
add interface=ether1 name=ether1-944 vlan-id=944
add interface=ether1 name=ether1-946 vlan-id=946
add interface=ether1 name=ether1-947 vlan-id=947
add interface=ether1 name=ether1-vlan10 vlan-id=10
add interface=ether2 name=ether2-10 vlan-id=10
add interface=ether6 name=ether6-20 vlan-id=20
add interface=ether24 name=ether24-10 vlan-id=10
add interface=ether24 name=ether24-20 vlan-id=20
add interface=ether28 name=ether28-10 vlan-id=10
add interface=ether28 name=ether28_20 vlan-id=20
add interface=ether48 name=ether48-10 vlan-id=10
add interface=ether48 name=ether48-20 vlan-id=20
add interface=ether48 name=ether48-940 vlan-id=940
add interface=ether48 name=ether48-944 vlan-id=944
add interface=ether48 name=ether48-946 vlan-id=946
add interface=ether48 name=ether48-947 vlan-id=947
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=br-10 comment=defconf interface=ether2
add bridge=br-10 comment=defconf interface=ether3
add bridge=br-10 comment=defconf interface=ether4
add bridge=br-10 comment=defconf interface=ether5
add bridge=br-10 comment=defconf interface=ether6
add bridge=br-10 comment=defconf interface=ether7
add bridge=br-10 comment=defconf interface=ether8
add bridge=br-10 comment=defconf interface=ether9
add bridge=br-10 comment=defconf interface=ether10
add bridge=br-10 comment=defconf interface=ether11
add bridge=br-10 comment=defconf interface=ether12
add bridge=br-10 comment=defconf interface=ether13
add bridge=br-10 comment=defconf interface=ether14
add bridge=br-10 comment=defconf interface=ether15
add bridge=br-10 comment=defconf interface=ether16
add bridge=br-10 comment=defconf interface=ether17
add bridge=br-10 comment=defconf interface=ether18
add bridge=br-10 comment=defconf interface=ether19
add bridge=bridge comment=defconf interface=ether20
add bridge=br-10 comment=defconf interface=ether21
add bridge=bridge comment=defconf interface=ether22
add bridge=br-10 comment=defconf interface=ether23
add bridge=br-10 comment=defconf disabled=yes interface=ether24
add bridge=br-10 comment=defconf interface=ether25
add bridge=br-10 comment=defconf interface=ether26
add bridge=br-10 comment=defconf interface=ether27
add bridge=br-10 comment=defconf disabled=yes interface=ether28
add bridge=bridge comment=defconf interface=ether29
add bridge=bridge comment=defconf interface=ether30
add bridge=bridge comment=defconf interface=ether31
add bridge=bridge comment=defconf interface=ether32
add bridge=bridge comment=defconf interface=ether33
add bridge=bridge comment=defconf interface=ether34
add bridge=bridge comment=defconf interface=ether35
add bridge=bridge comment=defconf interface=ether36
add bridge=bridge comment=defconf interface=ether37
add bridge=bridge comment=defconf interface=ether38
add bridge=bridge comment=defconf interface=ether39
add bridge=bridge comment=defconf interface=ether40
add bridge=bridge comment=defconf interface=ether41
add bridge=bridge comment=defconf interface=ether42
add bridge=bridge comment=defconf interface=ether43 pvid=10
add bridge=bridge comment=defconf interface=ether44
add bridge=bridge comment=defconf interface=ether45
add bridge=bridge comment=defconf interface=ether46
add bridge=bridge comment=defconf interface=ether47
add bridge=bridge comment=defconf interface=ether49
add bridge=bridge comment=defconf interface=qsfpplus1-1
add bridge=bridge comment=defconf interface=qsfpplus1-2
add bridge=bridge comment=defconf interface=qsfpplus1-3
add bridge=bridge comment=defconf interface=qsfpplus1-4
add bridge=bridge comment=defconf interface=qsfpplus2-1
add bridge=bridge comment=defconf interface=qsfpplus2-2
add bridge=bridge comment=defconf interface=qsfpplus2-3
add bridge=bridge comment=defconf interface=qsfpplus2-4
add bridge=bridge comment=defconf interface=sfp-sfpplus1
add bridge=bridge comment=defconf interface=sfp-sfpplus2
add bridge=bridge comment=defconf interface=sfp-sfpplus3
add bridge=bridge comment=defconf interface=sfp-sfpplus4
add bridge=br-10 interface=ether48-10
add bridge=br-10 disabled=yes interface=ether1-vlan10
add bridge=br-10 disabled=yes interface=ether2-10
add bridge=br-20 interface=ether48-20
add bridge=br-20 interface=ether1-20
add bridge=br-20 interface=ether6-20
add bridge=br-20 interface=ether28_20
add bridge=br-10 interface=ether28-10
add bridge=br-944 interface=ether48-944
add bridge=br-944 interface=ether1-944
add bridge=br-946 interface=ether48-946
add bridge=br-947 interface=ether48-947
add bridge=br-946 interface=ether1-946
add bridge=br-947 interface=ether1-947
add bridge=br-10 interface=ether24-10
add bridge=br-20 interface=ether24-20
add bridge=br-940 interface=ether1-940
add bridge=br-940 interface=ether48-940
/interface bridge vlan
add bridge=bridge tagged="ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16,ether17,ether18
ether23,ether24,ether25,ether26,ether27,ether28,ether29,ether30,ether31,ether32,ether33,ether34,ether35,ether36,ether37,ether38,ether39,ether40,ether41,ethe
45,ether46,ether47,ether48" vlan-ids=20
add bridge=bridge tagged=ether48 untagged="ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether1
,ether20,ether21,ether22,ether23,ether24,ether25,ether26,ether27,ether28,ether29,ether30,ether31,ether32,ether33,ether34,ether35,ether36,ether37,ether38,eth
r42,ether43,ether44,ether45,ether46,ether47" vlan-ids=10

Change the setup to a single bridge with VLANs. Multiple bridges and VLANs directly attached to Ethernet interfaces cause the device to bridge in software.

Most basic setup is https://help.mikrotik.com/docs/display/ ... ccessPorts
For L3 use a router, and only one address for management on this switch. https://wiki.mikrotik.com/wiki/Manual:B ... s_switches


Still in beta, so could be unstable https://help.mikrotik.com/docs/display/ ... Offloading

I have 4 switches CRS354-48P-4S+2Q+
RouterOS 7.2.3

All of them have the CPU load:
Average: 50%
Sometimes spikes up to 95%

There is no reason to have those high numbers.
The configuration is with VLANs running on the single bridge

Also, sometimes some random ethernet ports go offline.

Dear Mikrotik developers! When you do response on all those issues with CRS354 switches? You made a production level device, but it does not seem to be as a production.
I purchased 5 more switches CRS354-48P-4S+2Q+ and I am still scared to install them.

Have you checked if hardware offload is enabled?

yes, the hardware offload is enabled (Layer2)
I can see it in status of the bridge connection

Could you share your configuration?

I finally found what was cause of the high CPU load problem
I did run the command /tool profile to see what part of device is using the CPU with highest load.
I was surprised to see "management" with average 25% and spikes up to 56% (even up to 80%)

I disabled the SNMP and left only Winbox and SSH services enabled - still the same result, no luck.
Then I noticed that I do checking when I have opened the window "interfaces" in winbox at same time when I check the CPU load.
I closed that window and checked again with empty winbox interface, and the CPU usage dropped down to 5%

So, I do not know, but I feel that the installation of CPU MIPS 24Kc V7.4 650Mhz (mipsbe) was not good idea on new product. That CPU is weak.
I did not pay attention to it first, all our other switches are CRS326 and CRS328 with CPU ARMv7 800Mhz (1 core). We never had that problem in any case.

I know, for the switch the most important is to have a good "switch chip". However, that situation with CPU confused me.

I still see the random Ethernet ports turn off. One thing I noticed, it can happen when power went down and the switch did reboot. After that I see unstable work until I turn off the switch, wait 10 minutes and start again. Then it seems to be stable.

# jun/02/2022 23:44:13 by RouterOS 7.2.3
# model = CRS354-48P-4S+2Q+
/interface bridge
add admin-mac=XX:XX:XX:XX:XX:XX auto-mac=no frame-types=admit-only-vlan-tagged name=bridge-vlan priority=0x9100 vlan-filtering=yes
/interface vlan
add interface=bridge-vlan name=vlan100 vlan-id=100
/interface bridge port
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether1 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether2 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether3 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether4 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether5 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether6 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether7 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether8 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether9 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether10 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether11 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether12 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether13 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether14 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether15 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether16 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether17 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether18 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether19 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether20 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether21 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether22 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether23 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether24 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether25 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether26 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether27 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether28 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether29 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether30 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether31 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether32 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether33 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether34 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether35 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether36 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether37 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether38 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether39 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether40 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether41 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether42 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether43 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether44 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether45 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether46 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether47 pvid=110
add bridge=bridge-vlan frame-types=admit-only-untagged-and-priority-tagged interface=ether48 pvid=110
add bridge=bridge-vlan frame-types=admit-only-vlan-tagged interface=qsfpplus1-1-Trunk trusted=yes
add bridge=bridge-vlan ingress-filtering=no interface=qsfpplus1-2
add bridge=bridge-vlan ingress-filtering=no interface=qsfpplus1-3
add bridge=bridge-vlan ingress-filtering=no interface=qsfpplus1-4
add bridge=bridge-vlan frame-types=admit-only-vlan-tagged interface=qsfpplus2-1-Trunk
add bridge=bridge-vlan ingress-filtering=no interface=qsfpplus2-2
add bridge=bridge-vlan ingress-filtering=no interface=qsfpplus2-3
add bridge=bridge-vlan ingress-filtering=no interface=qsfpplus2-4
add bridge=bridge-vlan frame-types=admit-only-vlan-tagged interface=sfp-sfpplus1
add bridge=bridge-vlan frame-types=admit-only-vlan-tagged interface=sfp-sfpplus2
add bridge=bridge-vlan frame-types=admit-only-vlan-tagged interface=sfp-sfpplus3-Trunk
add bridge=bridge-vlan frame-types=admit-only-vlan-tagged interface=sfp-sfpplus4 trusted=yes
/ipv6 settings
set accept-redirects=no accept-router-advertisements=no disable-ipv6=yes forward=no
/interface bridge vlan
add bridge=bridge-vlan tagged=\
qsfpplus1-1-Trunk,qsfpplus1-2,qsfpplus2-1-Trunk,sfp-sfpplus4,bridge-vlan,sfp-sfpplus3-Trunk \
vlan-ids=100
add bridge=bridge-vlan tagged=\
qsfpplus1-1-Trunk,qsfpplus2-1-Trunk,sfp-sfpplus4,sfp-sfpplus3-Trunk vlan-ids=110

/ip address
add address=10.10.100.61/24 interface=vlan100 network=10.10.100.0
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=10.10.100.1

The crs112 also has this issue. Reading the interface stats will increase the cpu load quite a bit.

I reported this issue, but I don't think there is much priority to look at or fix this on the mipsbe devices.

The crs112 also has this issue.

I may forgive the CRS112 but cannot forgive the CRS354. Today is 2022, but we still use the old CPU in production level
May be I pay too much attention to type of CPU, I know the mipsbe is not bad. And that is only a bug in winbox

Is it a switch or router? A switch does switching in a specialized chip. So who cares if the cpu is not so strong. Use snmp instead of winbox. The cpu is only necessary to boot the software and program the switch chip. Problem solved.

Some switch chips can even do l3 in hw.

There is another problem with the hardware on that switch.
I would not pay attention if that switch would be stable, but I have to open the winbox and do monitoring of the statistics in real time.
SNMP does work for me for other 1000+ devices.

Agree, the problem "High CPU load" has been solved.

Can you please share your config?

/export hide-sensitive file-anynameyoulike

Hello,
I have just setup my VLAN network and looks like everything works fine! I just noticed the CPU on the switch side goes at 50-80% and when i export file it goes 100% of usage and regarding to the /tool/profile this CPU usage was from Management and I think something is going wrong with my setup!!

Could anyone suggest me any change?!

Thanks in advance!