Community discussions

MUM Europe 2020

Search found 26 matches

by Louis2
Fri Sep 06, 2019 2:55 pm
Forum: Beginner Basics
Topic: Cannot get simple VLAN to work on CRS317 ☹
Replies: 24
Views: 2359

Re: Cannot get simple VLAN to work on CRS317 ☹

For information, I would like to make an additional remark. The main reason that I did not verdict the firewall, is that I could not ping the subnets gateway. My expectation was that you can always reach / ping the gateway, independent from whatever the FW-rules are. The gateway is after all part of...
by Louis2
Fri Sep 06, 2019 12:34 pm
Forum: Beginner Basics
Topic: Cannot get simple VLAN to work on CRS317 ☹
Replies: 24
Views: 2359

Re: Cannot get simple VLAN to work on CRS317 ☹

My excuses, Of course I do agree with every one saying that “ping not possible” with “Level-2 OK”, is “very unlikely. So I did repeat the test again, using my actual config based on SwitchOS. Same problem. So I did double check things. And I found the problem. A type in the pfSense firewall rule whi...
by Louis2
Thu Sep 05, 2019 2:26 pm
Forum: Beginner Basics
Topic: Cannot get simple VLAN to work on CRS317 ☹
Replies: 24
Views: 2359

Re: Cannot get simple VLAN to work on CRS317 ☹

Hi, Thanks for giving this example! I compared the proposed config which my config. I compared my export file with your statements (in most cases I am using the gui) Delta’s “interface vlan” - No delta’s Delta’s “ip address” - You use the port as interface where - I use the VLAN as interface ==> tha...
by Louis2
Thu Sep 05, 2019 11:55 am
Forum: Beginner Basics
Topic: Cannot get simple VLAN to work on CRS317 ☹
Replies: 24
Views: 2359

Re: Cannot get simple VLAN to work on CRS317 ☹

Reaction below. 1) The VLAN I would like to create is a transparrant VLAN. It should not have an IP-address. I need to reach/ping the real devices attached to (!) the VLAN, not a "VLAN-device" (whatever it is) You wrote that you can get ARP communication between the two "real" devices ... kindly exp...
by Louis2
Thu Sep 05, 2019 8:23 am
Forum: Beginner Basics
Topic: Cannot get simple VLAN to work on CRS317 ☹
Replies: 24
Views: 2359

Re: Cannot get simple VLAN to work on CRS317 ☹

Halo, Thanks for your suggestion. It is not the solution for my problem, however I never thought about the option to put an IP on a vlan. I will try later. Two things: 1) The VLAN I would like to create is a transparrant VLAN. It should not have an IP-address. I need to reach/ping the real devices a...
by Louis2
Wed Sep 04, 2019 1:07 pm
Forum: Beginner Basics
Topic: Cannot get simple VLAN to work on CRS317 ☹
Replies: 24
Views: 2359

Re: Cannot get simple VLAN to work on CRS317 ☹

Hello mkx, Because of your suggestion and because I am desparate, I did reset the switch to defaults and did configure test VLAN from zero. Conform your suggestion - I did take the bridge as leading interface in the "interface menu" and - I also included it as "tagged" in the "bridge VLAN-interface"...
by Louis2
Wed Sep 04, 2019 11:48 am
Forum: Beginner Basics
Topic: Cannot get simple VLAN to work on CRS317 ☹
Replies: 24
Views: 2359

Re: Cannot get simple VLAN to work on CRS317 ☹

Hello, Thanks for the replay. Here my findings: VLAN interface VLAN123 should be parented to VirtualSwitch1 (not "04 RouterData" .. .because interface "04 RouterData" is member of said bridge) >> and …… if that would be the case than it would be necessary to have the option to select a port !!?? >> ...
by Louis2
Wed Sep 04, 2019 9:52 am
Forum: Beginner Basics
Topic: Cannot get simple VLAN to work on CRS317 ☹
Replies: 24
Views: 2359

Re: Cannot get simple VLAN to work on CRS317 ☹

Below my actual testconfig, At this moment I am concentrating on getting the simple test L2-VLAN123 to work. To be sure that there is no whatever other problem, I disabled the link to my gs1920 and removed a couple om mangle rules. VLAN123 comming from pdSense is entering the switch via interface "0...
by Louis2
Tue Sep 03, 2019 10:30 pm
Forum: Beginner Basics
Topic: Cannot get simple VLAN to work on CRS317 ☹
Replies: 24
Views: 2359

Re: Cannot get simple VLAN to work on CRS317 ☹

That, is quite simple! - the CRS is intended as just a managed L2 switch supporting VLAN's, just L2-transport layer - like every simple managed L2/L3 switch you can buy - each device has a either a static IP-address or it gets one from the DHCP-server (situated in pfSense) - that works via ARP-broad...
by Louis2
Tue Sep 03, 2019 9:29 pm
Forum: Beginner Basics
Topic: Cannot get simple VLAN to work on CRS317 ☹
Replies: 24
Views: 2359

Re: Cannot get simple VLAN to work on CRS317 ☹

Hello, I am making some progress …….. that is to say ….. I know what is going wrong …… I discovered IMHO a very obscure CRS behavoir. - I can ARP ping the other side (the gateway), using the ping tool (arp ping) and the test pc - but I can not (IP) ping the other side !! So level-2 is OK, but I can ...
by Louis2
Sun Sep 01, 2019 10:43 pm
Forum: Beginner Basics
Topic: Cannot get simple VLAN to work on CRS317 ☹
Replies: 24
Views: 2359

Re: Cannot get simple VLAN to work on CRS317 ☹

Sorry, I made a mistake in my replay. As expected you can assign multiple vlan's to one interface. And in your reaction, I see a very interesting remark, in the second sentence. "Conceptual complication is if one uses hybrid ports, i.e. both tagged and untagged frames over same port. In this case IP...
by Louis2
Sun Sep 01, 2019 8:57 pm
Forum: Beginner Basics
Topic: Cannot get simple VLAN to work on CRS317 ☹
Replies: 24
Views: 2359

Re: Cannot get simple VLAN to work on CRS317 ☹

Ok, Thanks for your answer on my first question "Why vlan option in interface". I was thinking in that direction, however it does hardly fit in the way I am thinking: - step 1 you have a device (in this case an interface) - step 2 you assign an IPV4 and IPV6 IP on ethernet level - step 3 you assign ...
by Louis2
Sat Aug 31, 2019 10:50 pm
Forum: Beginner Basics
Topic: Cannot get simple VLAN to work on CRS317 ☹
Replies: 24
Views: 2359

Cannot get simple VLAN to work on CRS317 ☹

Hello, I have a pfSense router connected to one of the ports of a CRS317 (running RouterOS) . Within that connection a VLAN-A. On one of the CRS317 ports having VLAN-ID-A a PC. Pf Sense is the master of that VLAN - Has the IPV4 gateway 192.168.x.1 and the IPV6 gateway - A certain IPV4 range 192.168....
by Louis2
Sat Aug 31, 2019 9:31 pm
Forum: Beginner Basics
Topic: Help Help !! can not route between VLAN's :( :(
Replies: 8
Views: 992

Re: Help Help !! can not route between VLAN's :( :(

Hello, During my problem investigation, I was pinging gateways and devices. Those test told me that a couple of these "destinations" where not reachable. So I have been doing a lot of thinking and testing about "why for the hell does it not work?". In a lot of cases I was searching for ghosts. There...
by Louis2
Thu Aug 29, 2019 10:41 pm
Forum: Beginner Basics
Topic: VLAN between two routers. Can it work!? If so how?
Replies: 9
Views: 981

Re: VLAN between two routers. Can it work!? If so how?

Tja, The described configuration had a couple of reasons: - to keep the high speed datastreams away form pfSense (intel Pentium) - to see if it was an option to use the internal router in state of pfSense * no pfSense computer upgrade * no pc saves place and energy * to save on 10G card for pfSense ...
by Louis2
Thu Aug 29, 2019 8:43 pm
Forum: Beginner Basics
Topic: VLAN between two routers. Can it work!? If so how?
Replies: 9
Views: 981

Re: VLAN between two routers. Can it work!? If so how?

Hello, Short reaction on the question "Did you read the wiki about the bridge chip implementation?". Yep I did. And on your advice today I did read again. (I assume you refered to https://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features) In fact I did read a lot !! Far more than should be necessay...
by Louis2
Thu Aug 29, 2019 8:02 pm
Forum: Beginner Basics
Topic: VLAN between two routers. Can it work!? If so how?
Replies: 9
Views: 981

Re: VLAN between two routers. Can it work!? If so how?

Hello, Perhaps the picture at the botum helps pfSense and the existing network to handle 1G devices. CRS317 as high speed core. Intention: - two vlans to connect them (data and mngt) - the gateway is at the pfSense side - the local high speed vlans's purple, have the gate way on the CRS317 side - th...
by Louis2
Thu Aug 29, 2019 5:30 pm
Forum: Beginner Basics
Topic: VLAN between two routers. Can it work!? If so how?
Replies: 9
Views: 981

VLAN between two routers. Can it work!? If so how?

Hello, The title already explain my problem. My main router (pfSense) is connected with my new Mikrotik CRS317, via VLAN's. I Always did expect that would not be any problem, but it is. Situation is as follows: - there are two VLAN's between pfSense and the CRS317. One for management. One for data. ...
by Louis2
Wed Aug 28, 2019 9:10 am
Forum: Beginner Basics
Topic: Help Help !! can not route between VLAN's :( :(
Replies: 8
Views: 992

Re: Help Help !! can not route between VLAN's :( :(

I agree, The fact that the NAS can't ping 216, is of course that 218 is not the NAS its default route. I did already released that. For testing I did change the NAS its default route to 218 Now I can ping 216.1 and 88.1 from the NAS. So after all with the actual config it seems to work (dispite the ...
by Louis2
Tue Aug 27, 2019 5:58 pm
Forum: Beginner Basics
Topic: Help Help !! can not route between VLAN's :( :(
Replies: 8
Views: 992

Re: Help Help !! can not route between VLAN's :( :(

Ok, few thinks, - I did read the advised document, good document for beginners but it did not help me. Perhaps issue is related to the FW, even considering that IMHO I effectively turned it off (I regret there is no command for that). Only other issue could be level-2 routing yeh. - I did not post t...
by Louis2
Tue Aug 27, 2019 5:32 pm
Forum: Beginner Basics
Topic: Very Vague CPU-port- and Bridge-port-access and Bridge to VLAN-binding!
Replies: 1
Views: 324

Very Vague CPU-port- and Bridge-port-access and Bridge to VLAN-binding!

Hallo, I am trying to understand the Mikrotik RouterOS GUI / system behavoir. In a bit more complex situation are two very relevant questions: - How to access the CPU in order to configure the device - How to bind the Bridge in a VLAN How to access the CPU? I would expect that you could assign addre...
by Louis2
Tue Aug 27, 2019 11:05 am
Forum: Beginner Basics
Topic: Help Help !! can not route between VLAN's :( :(
Replies: 8
Views: 992

Re: Help Help !! can not route between VLAN's :( :(

Thanks for the link! Looks like a great article. I am not so glad with the rest of your reaction. Apart of the strange VLAN-routing problem, it is working as intended. Related to the export, it is only part of the config, so perhaps, there is a quote to much or to less due to cut and pastes. Also no...
by Louis2
Mon Aug 26, 2019 9:53 pm
Forum: Beginner Basics
Topic: Help Help !! can not route between VLAN's :( :(
Replies: 8
Views: 992

Help Help !! can not route between VLAN's :( :(

Hello, Despite my network knowledge and experiences with e.g. pfSense and a lots of effort (!), I do not manage to route traffic between two local VLAN's on my new CRS317 :( :( The situation I bought the CRS317 as "10G-core" next to my actual network. For this moment the intended situation is: - pfS...
by Louis2
Thu Aug 22, 2019 9:06 pm
Forum: Forwarding Protocols
Topic: How to separate management- and data-trunk traffic (routing) !?
Replies: 2
Views: 442

Re: How to separate management- and data-trunk traffic (routing) !?

Hello, I did find a solution, but do not regard it as elegant. I have three mangle rules now - Mangle rule: prerouting, interface MNGT-LAN, action “mark packet” New Packet Mark ^MNGTLAN^” - Mangle rule: prerouting packet Mark ^MNGTLAN^ action “mark routing” value “MNGTLAN” - Mangle rule: output Src....
by Louis2
Thu Aug 22, 2019 3:49 pm
Forum: Forwarding Protocols
Topic: How to separate management- and data-trunk traffic (routing) !?
Replies: 2
Views: 442

How to separate management- and data-trunk traffic (routing) !?

Hello, My CRS317 has multiple connections to the outside world. Most of the traffic should leave the router via the normal default gateway, however not so the management traffic. The management traffic should be handled via the management vlan (MNGT-LAN). That VLAN is coming from another router via ...
by Louis2
Mon Aug 05, 2019 9:50 pm
Forum: Beginner Basics
Topic: Locked out GUI when
Replies: 0
Views: 306

Locked out GUI when

The Network I have a CRS317 running latest router OS (6.45.3). In the initial startup I did select the option “bridge” (no idea to which extend that change gui etc, but at this moment in time I have a separate router). I also defined the GUI network and address. On the CRS317 I did defined (bridge ...