MikroTik

gard

Everything pushes me to use STP.
I'll try

gard

My network in attachment.
Right link - link between two CRS 317.
Left - spare channel with other switches.
That's it

gard

I don't know him, you may be right. I have already been suggested to use stp..
Does bonding work on top of lacp?
Tomorrow I will try to put everything back, remove the bonding.
It turns out that this is also not an easy task.

gard

Yes, it turned out to be a very strange bonding.
But I have no way to physically stretch the wires from the antennas to the Mikrotik.
Now it works very strange.
I think I'll try to set it up again, a little differently.

gard

Hello! I want to make an optical link reservation. I have two Mikrotik CRS317 and network. Two CRS317, they are connected by an optical channel. And I have a spare channel - from other switches and Antennas. This channel enters the device as tagged vlan. And I have make bonding-interface. The settin...

gard

Same Problem. ROS 6.48.3 Stable, CCR1016-12S-1S+ and MicroSD card. After reboot I lost all changes in The Dude (devices, links ...). Now I stop The Dude and see "applying settings: disabling: waiting for config changes to flush (920639 bytes in queue). Process ia very longб and: https://i115.fa...

gard

Thanks for link.
My mikrotik has access to 10.20.0.0/16 subnet. He has tagged ports on this network and the network is available to him.
Thanks, sorry to waste your time.

gard

I understand you, but I have what I have. And I think it's achievable, it's just that I'm doing something wrong. Yes, and it is in the context of vlan that I think that the microtic has its own tricks. Translate vlan, bridge ip firewall and filters.. something. Question - how it's made. I got login ...

gard

Network ... It's simple and flat, it's a local area network with one router 10.10.0.1. But it has vlan virtual networks, one of such networks contains video surveillance, which generates a total traffic of about 600 Mbps. It is very irrational to drive it through a router, because the consumers of t...

gard

Yes, I understand you. Setting up on the parent device is not physically possible. In this vlan 600Mbps traffic. It will simply be irrational use. The question is whether this can be done by means of microtik, without full-fledged routing.

gard

This is a conditional connection diagram for the 10.10.0.0/16 network. There are many other devices on the network.

gard

Hello all! Sorry for my bad english. https://c.radikal.ru/c14/2106/c0/3c35027c7fdc.png How can I from PC 10.10.0.20 (default route 10.10.0.1) get access to the switch 10.20.0.10 in vlan 20? Is that possible? I tried through Bridge IP Firewall, Bridge Filters, srcnat ... nothing worked. Disclaimer: v...

gard

Solved!
I should have added the user to ftp group.
Now I see background in the map and other icons!

gard

Hello all. I installed The Dude and created network maps. For maps I choice default "grid.png" background. But... after i created read-only user account for Dude operator. After login as operator I not see background image. Simply blank, white instead "grid.png". What is the reas...

gard

Hello!
Sorry for late answer.

Yes, my devices support SNMP. OID 1.3.6.1.2.1.31.1.1.1.10.7 is TX bytes for same interface.
I need get graphic for outgoing traffic for this interface.
Bytes i tired convert to bit/s.

But i have not correct data in graphical view.

gard

Hello all! Sorry for my bad english. I have question. How i may get speed graphic in The Dude for wireless interface. I create Data Source, tired this: - see bytes-out oid for interface (bytes-out=.1.3.6.1.2.1.31.1.1.1.10.7), this oid("1.3.6.1.2.1.31.1.1.1.10.7") - then i do diff32 functio...

gard

Hello all! We have dude witch ROS 6.46.1. Today we see: NAME CPU USAGE snmp 0 0% ethernet 0 1.5% firewall 0 0% networking 0 1% winbox 0 91.5% dude 0 0% management 0 0.5% dhcp 0 0% profiling 0 0.5% unclassified 0 1% cpu0 96% firewall-mgmt 1 0% snmp 1 0.5% ethernet 1 0% console 1 0% firewall 1 0.5% ne...

gard

@EdPa

@gard - we look forward to improve IGMP Snooping for CSS106 device on upcoming SwOS versions.

Thank you, I can only hope and wait.

gard

Hello all! Does anyone have a IGMP Snooping? I have CSS106-5G-1S, put a tick "IGMP Snooping" in "System" tab. I see strings in "IGMP Groups" tab.. but at that time video stream on my STB disappears (black screen). If uncheck a tick "IGMP snooping" in the Syste...

gard

Thanks for your information!
ps: sorry for too late answer from me )

gard

How many people have experienced this behavior SwOS 2.9?

gard

Hello! Yesterday i updated css106 firmware from v2.7 to 2.9. The firmware was factory, empty. What I see oO: Before update (I specifically created two empty acl, but this does not affect anything.): https://i109.fastpic.ru/thumb/2019/0405/a9/52ba59cb710df684042656731ea8e7a9.jpeg https://i109.fastpic...

gard

Hello, maybe this rule in firewall will help in solving the problem: add action=accept chain=input src-address-type=local dst-address-type=local As far as I understand this will allow local traffic on the router itself. You should put it above "defconf: drop all not coming from LAN". ps: N...

gard

Same question, for untagged traffic:

/interface ethernet switch acl
add ip-dst=224.0.0.0/4 mac-protocol=ip new-customer-vid=0 table=egress

not work (=
Please help...

gard

Yes, I understand you. If vlan-filtering=no, switch work as unmanaged, it forward any vlan frames. From wiki: The main VLAN setting is vlan-filtering which globally controls vlan-awareness and VLAN tag processing in the bridge. If vlan-filtering=no, bridge ignores VLAN tags, works in a shared-VLAN-l...

gard

Hello! Sorry for my English. Please help. I have some CRS106 and CRS212 mikrotik switches. My management vlan for devices eg 99. Example, config for first switch1: /interface bridge port add bridge=bridge interface=uplink add bridge=bridge interface=sfp1 add bridge=bridge interface=sfp2 add bridge=b...

gard

Hello all! Sheme: CRS212, bridge without vlan filtering, igmp-snooping ON. Any port can be connected RB260 (example), as access-switch. Trouble: If option igmp-snooping enable, and in "bridge - MDB" I see multicast traffit on ports. Example: sfp5 - 2 multicast-channels and sfp7 - 3 multica...

gard

Hello! Sorry for my bad English. I want simular sheme: vid1 (uplink) || -------CRS3xx------- | | | | | vid6 vid2 vid3 vid4 vid5 I did it for untagged ports: /interface bridge add igmp-snooping=yes name=br0 protocol-mode=none vlan-filtering=yes /interface bridge port add bridge=br0 interface=sfp-sfpp...

gard

Hello again! Solution on the back side: /interface bridge port add bridge=br0 interface=sfp-sfpplus16 add bridge=br0 interface=sfp-sfpplus14 pvid=4 ... /interface ethernet switch rule add mac-protocol=pppoe-discovery new-vlan-id=1 ports=sfp-sfpplus14 switch=switch1 add mac-protocol=pppoe new-vlan-id...

gard

Thanks, I understand, need add unmanaged switch after mikrotik.
I think maybe use mac-based vlan classify, but it notgood for my situation..
I will continue the search for a solution...

gard

Hello! I am sorry for my bad English. I need send two vlan in "untagged" mode to access port. I have CRS317.. in sfp16 comes two tagged vlan: 1-internet and dhcp-addressing, 4 - iptv multicast. My trying One. I created for physical iface sfp16 two vlans: lan1 pvid=1, lan4 pvid=4. After I c...

gard

Hello!
It's true way, but you need add rules into Filter.
Drop traffic from ether1.188 <--> ether6.
If you not added this rule, you give loop.

gard

Hello! Sorry for my bad english. I have CRS106 and today I tested MAC Learning: I use "Learning override" and "Learning limit" in "switch"-"ports" for my sfp1 interface. After tests I returned everything back: /interface ethernet switch port set sfp1 !learn-ov...

gard

Hello! Sorry, my english is bad =( I tested learning mac address in crs-106. My steps: switch - ports, i check "learning-override" and "learning-limit". After I uncheck this option for back to default settings (!learn-override, !learn-limit). But! In "bridge"-"port...

Search found 34 matches

Re: Bonding Active Backup, not work correctly...

Re: Bonding Active Backup, not work correctly...

Re: Bonding Active Backup, not work correctly...

Re: Bonding Active Backup, not work correctly...

Bonding Active Backup, not work correctly...

Re: dude, critical queued bytes for write to db

Re: How get access in to vlan from mikrotik bridge mode with tagged port?

Re: How get access in to vlan from mikrotik bridge mode with tagged port?

Re: How get access in to vlan from mikrotik bridge mode with tagged port?

Re: How get access in to vlan from mikrotik bridge mode with tagged port?

Re: How get access in to vlan from mikrotik bridge mode with tagged port?

How get access in to vlan from mikrotik bridge mode with tagged port?

Re: Background Image is missing in map for user in "read" group

[Solved]Background Image is missing in map for user in "read" group

Re: How get Speed graphic for interface in The Dude?

How get Speed graphic for interface in The Dude?

Dude, ROS 6.46.1, process "winbox" CPU load

Re: SwOS version 2.10 released!

Re: SwOS version 2.10 released!

Re: css106-5g-1s, update 2.7->2.9 bug?

Re: css106-5g-1s, update 2.7->2.9 bug?

css106-5g-1s, update 2.7->2.9 bug?

Re: defconf: drop all not coming from LAN really needed?

Re: CRS1xx/2xx igmp snooping config

Re: CRS1xx/CRS2xx, bridge without vlan-filtering, how drop tagged frames?

CRS1xx/CRS2xx, bridge without vlan-filtering, how drop tagged frames?

CRS212, "router was rebooted without proper shutdown", igmp-snooping, bug?

CRS3xx, vlans from acccess ports to uplink and back..

Re: Send tvo untagged vlan from trunk uplink to access port..

Re: Send tvo untagged vlan from trunk uplink to access port..

Send two untagged vlan from trunk uplink to access port..

Re: IPTV via VLAN

CRS106, how disable "Learning" at the port?

CRS-106, learning mac adress in switch - ports