Hi,
which subnet mask does swos use(/8, /24, /16 ...)?
Oh, there is definitely a need for them; it's just that it works in a lot of places without them.http://wiki.mikrotik.com/wiki/SwOS#System_Tab
"Note: SwOS uses a simple algorithm to ensure TCP/IP communication - it just replies to the same IP and MAC address packet came from. This way there is no need for Default Gateway on the device itself."
Oh, there is definitely a need for them; it's just that it works in a lot of places without them.
no need???http://wiki.mikrotik.com/wiki/SwOS#System_Tab
"Note: SwOS uses a simple algorithm to ensure TCP/IP communication - it just replies to the same IP and MAC address packet came from. This way there is no need for Default Gateway on the device itself."
What they're saying is that it replies via Layer 2. A device connected to the switch hands the switch a packet. When the switch builds its reply, it still sets the Dst IP to the Src IP of the original message, but then it sets the Dst MAC to the original Src MAC, regardless of the Dst IP. That means replies always get handed back to the same neighbor that forwarded the original packet. So, as long as the switch is on a network managed by a router, you can reach it in any way the router supports--including VLANs, PPTP, etc.no need??? no way to manage it remotely using vlans and accessing from a remote VPNhttp://wiki.mikrotik.com/wiki/SwOS#System_Tab
"Note: SwOS uses a simple algorithm to ensure TCP/IP communication - it just replies to the same IP and MAC address packet came from. This way there is no need for Default Gateway on the device itself."
What they're saying is that it replies via Layer 2. A device connected to the switch hands the switch a packet. When the switch builds its reply, it still sets the Dst IP to the Src IP of the original message, but then it sets the Dst MAC to the original Src MAC, regardless of the Dst IP. That means replies always get handed back to the same neighbor that forwarded the original packet. So, as long as the switch is on a network managed by a router, you can reach it in any way the router supports--including VLANs, PPTP, etc.no need??? no way to manage it remotely using vlans and accessing from a remote VPNhttp://wiki.mikrotik.com/wiki/SwOS#System_Tab
"Note: SwOS uses a simple algorithm to ensure TCP/IP communication - it just replies to the same IP and MAC address packet came from. This way there is no need for Default Gateway on the device itself."
The switch does answer to its own IP on whatever VLAN you use to reach it, so it doesn't truly support the "management vlan" concept; but as long as your router assigns the management address space to the appropriate VLAN, it will work as though it did. (But if you force its address onto a different VLAN, it will still reply.)
* If you mean the switch should be able to establish its own tunnel to the NOC, you're going to need a more expensive ($$$$) switch.
The only thing with this "answer with src IP and src MAC as destination" mechanism is that the switch cannot initiate a connection to something outside the own subnet, as it does not have a clue on the gateway to use. But I see no process that initiates a connection from the switch (like SNMP trigger, syslog send, SNTP request, DNS request....).
Ain't that interesting...There is traffic from my PC. So let's check the browser page. (Chrome has the developers tools built in).
And the browser is checking upgrade.microsoft .com to fill in this page. The switch is not initiating a request.