MikroTik

Louis2

Fanless cooling with decent cool block on the switch chip and on the SFP+ cases, would just be proper thermal design. The sfp+ modules need at least as much cooling as the switch chip! Nothing more than that! Twelve in state eight 2.5 ports seems possible to me as well. Also at this moment in time. ...

Louis2

PS four POE ports would be a welcome bonus

Louis2

I need a combined 2.5Gbit + 10Gbit switch like the ^CRS310-8G+2S+IN^ but significant better. - same size - NO FANS (actual device with fans is an absolute NO GO!) - proper cooling with COOL-elements on tot of the 10G cases !! (very strange that that cooling is missing!) - at least 12 2.5Gbit ports (...

Louis2

I am struggling with the setup of a combined router & managed switch setup. 20231008 StrangeRouting.JPG The picture shows the for this problem relevant part of the configuration - The Main Bridge is the default bridge acting as Manages Switch in favor of an external router (not shown) - I decide...

Louis2

I would like to use my CRS317 as managed switch and as backup router (my normal router is pfSense). Up to now I did use the CRS only as managed switch with many trunks. No problem, but I do not manage to add router functionality. SituationOutline.JPG At the moment I try to add a vlan-interfaces/gate...

Louis2

I spend another couple of hours trying to solve the vlan setup problem ..... without sucsess :( I try to explain the problem using the attached picture (shown at the bottum) VLAN-problem.JPG In the picture the main bridge containing a couple of vlans connected to the outside world using mostly trunk...

Louis2

Here a rough impression of the intended setup

Louis2

Hello, I like to use my main switch (Mikrotik CRS317) not only as managed switch, but also as fall-back-router for my pfSense router/firewall. The incoming provider connection has two vlan's. One fot iptv and one for internet. For the internet vlan the switch should behave as PPP0E-client. Note that...

Louis2

After searching for hours, I found the problem.

The problem turned out an unexpected setting in pfSense., so it was not routeros

In fact, initially there where two problems, what made it extra hard to identify this strange error.

However it is solved.

Thanks for the replay !

Louis2

Hello, I recently upgraded my CRS317 to RouterOS-7.2rc3. The CRS317 is used as managed switch, without any router functionality, is connected to my pfSense router via a lagg. Via that lagg a couple of vlans. The only thing I configured in RouterOS are the needed vlan's. Today I discovered that I can...

Louis2

Hello, I tried to update my CRS317 from 7.1.1 to 7.2rc1 . Lots of problems: - system did NOT reboot after the upgrade! Note that updating software has always been a big risk in the past, since the change that the switch would not properly reboot, was far far too big. However that improved over time....

Louis2

Hi, A little time after writing this post, I discovered that that strange address was really in my config ........ One thing is for sure ..... I never defined that address ..... I corrected the config, which solved the problem. Of cause I do use HW-offloading where possible. But not sure about level...

Louis2

Hello, I am using my CRS317 as a switch connected to a pfSense filrewall. And when I looked in the pfSense firewall log ..... I could hardly believe my eyes - the CRS317 was sending NTP-querys from an impossibleIPV4-address being the reverse of its own address So where is should send "a.b.c.d:1...

Louis2

Hello, I need multicast to stream music form my server towards my PC-LAN and Guest Network. To get that working you need applications like PIM and/or IGMP-proxy. So I installed the multicast package. Than I opend routing/pim to define the configuration. First thing there to define the involved inter...

Louis2

Hello, I just installed 2.11 on my CRS317. Hoping that it would solve the switch its reboot problem. The / my CRS317 switch does not proberly reboot after rebootcommand or powerup, see my post in 2.10 a couple of days ago. However, that problem is still there. The switch did not properly reboot afte...

Louis2

Hello, I just installed 2.11 on my CRS317. Hoping that it would solve the switch its reboot problem. The / my CRS317 switch does not proberly reboot after rebootcommand or powerup, see my post a couple of days ago. However, it does not the switch did not properly reboot after installing 2.11 (same p...

Louis2

Hello, I am running SwOS 2.10 here on my CRS317 and have following problems: 1) I noticed that the fan(s) stop running after some time. - the CRS317 cooling design is terrible IMHO. There are two very noisy fans cooling "nothing". The cpu cooling is at the back (very good) but the fans do ...

Louis2

For information, I would like to make an additional remark. The main reason that I did not verdict the firewall, is that I could not ping the subnets gateway. My expectation was that you can always reach / ping the gateway, independent from whatever the FW-rules are. The gateway is after all part of...

Louis2

My excuses, Of course I do agree with every one saying that “ping not possible” with “Level-2 OK”, is “very unlikely. So I did repeat the test again, using my actual config based on SwitchOS. Same problem. So I did double check things. And I found the problem. A type in the pfSense firewall rule whi...

Louis2

Hi, Thanks for giving this example! I compared the proposed config which my config. I compared my export file with your statements (in most cases I am using the gui) Delta’s “interface vlan” - No delta’s Delta’s “ip address” - You use the port as interface where - I use the VLAN as interface ==> tha...

Louis2

Reaction below. 1) The VLAN I would like to create is a transparrant VLAN. It should not have an IP-address. I need to reach/ping the real devices attached to (!) the VLAN, not a "VLAN-device" (whatever it is) You wrote that you can get ARP communication between the two "real" de...

Louis2

Halo, Thanks for your suggestion. It is not the solution for my problem, however I never thought about the option to put an IP on a vlan. I will try later. Two things: 1) The VLAN I would like to create is a transparrant VLAN. It should not have an IP-address. I need to reach/ping the real devices a...

Louis2

Hello mkx, Because of your suggestion and because I am desparate, I did reset the switch to defaults and did configure test VLAN from zero. Conform your suggestion - I did take the bridge as leading interface in the "interface menu" and - I also included it as "tagged" in the &qu...

Louis2

Hello, Thanks for the replay. Here my findings: VLAN interface VLAN123 should be parented to VirtualSwitch1 (not "04 RouterData" .. .because interface "04 RouterData" is member of said bridge) >> and …… if that would be the case than it would be necessary to have the option to se...

Louis2

Below my actual testconfig, At this moment I am concentrating on getting the simple test L2-VLAN123 to work. To be sure that there is no whatever other problem, I disabled the link to my gs1920 and removed a couple om mangle rules. VLAN123 comming from pdSense is entering the switch via interface &q...

Louis2

That, is quite simple! - the CRS is intended as just a managed L2 switch supporting VLAN's, just L2-transport layer - like every simple managed L2/L3 switch you can buy - each device has a either a static IP-address or it gets one from the DHCP-server (situated in pfSense) - that works via ARP-broad...

Louis2

Hello, I am making some progress …….. that is to say ….. I know what is going wrong …… I discovered IMHO a very obscure CRS behavoir. - I can ARP ping the other side (the gateway), using the ping tool (arp ping) and the test pc - but I can not (IP) ping the other side !! So level-2 is OK, but I can ...

Louis2

Sorry, I made a mistake in my replay. As expected you can assign multiple vlan's to one interface. And in your reaction, I see a very interesting remark, in the second sentence. "Conceptual complication is if one uses hybrid ports, i.e. both tagged and untagged frames over same port. In this ca...

Louis2

Ok, Thanks for your answer on my first question "Why vlan option in interface". I was thinking in that direction, however it does hardly fit in the way I am thinking: - step 1 you have a device (in this case an interface) - step 2 you assign an IPV4 and IPV6 IP on ethernet level - step 3 y...

Louis2

Hello, I have a pfSense router connected to one of the ports of a CRS317 (running RouterOS) . Within that connection a VLAN-A. On one of the CRS317 ports having VLAN-ID-A a PC. Pf Sense is the master of that VLAN - Has the IPV4 gateway 192.168.x.1 and the IPV6 gateway - A certain IPV4 range 192.168....

Louis2

Hello, During my problem investigation, I was pinging gateways and devices. Those test told me that a couple of these "destinations" where not reachable. So I have been doing a lot of thinking and testing about "why for the hell does it not work?". In a lot of cases I was searchi...

Louis2

Tja, The described configuration had a couple of reasons: - to keep the high speed datastreams away form pfSense (intel Pentium) - to see if it was an option to use the internal router in state of pfSense * no pfSense computer upgrade * no pc saves place and energy * to save on 10G card for pfSense ...

Louis2

Hello, Short reaction on the question "Did you read the wiki about the bridge chip implementation?". Yep I did. And on your advice today I did read again. (I assume you refered to https://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features) In fact I did read a lot !! Far more than should b...

Louis2

Hello, Perhaps the picture at the botum helps pfSense and the existing network to handle 1G devices. CRS317 as high speed core. Intention: - two vlans to connect them (data and mngt) - the gateway is at the pfSense side - the local high speed vlans's purple, have the gate way on the CRS317 side - th...

Louis2

Hello, The title already explain my problem. My main router (pfSense) is connected with my new Mikrotik CRS317, via VLAN's. I Always did expect that would not be any problem, but it is. Situation is as follows: - there are two VLAN's between pfSense and the CRS317. One for management. One for data. ...

Louis2

I agree, The fact that the NAS can't ping 216, is of course that 218 is not the NAS its default route. I did already released that. For testing I did change the NAS its default route to 218 Now I can ping 216.1 and 88.1 from the NAS. So after all with the actual config it seems to work (dispite the ...

Louis2

Ok, few thinks, - I did read the advised document, good document for beginners but it did not help me. Perhaps issue is related to the FW, even considering that IMHO I effectively turned it off (I regret there is no command for that). Only other issue could be level-2 routing yeh. - I did not post t...

Louis2

Hallo, I am trying to understand the Mikrotik RouterOS GUI / system behavoir. In a bit more complex situation are two very relevant questions: - How to access the CPU in order to configure the device - How to bind the Bridge in a VLAN How to access the CPU? I would expect that you could assign addre...

Louis2

Thanks for the link! Looks like a great article. I am not so glad with the rest of your reaction. Apart of the strange VLAN-routing problem, it is working as intended. Related to the export, it is only part of the config, so perhaps, there is a quote to much or to less due to cut and pastes. Also no...

Louis2

Hello, Despite my network knowledge and experiences with e.g. pfSense and a lots of effort (!), I do not manage to route traffic between two local VLAN's on my new CRS317 :( :( The situation I bought the CRS317 as "10G-core" next to my actual network. For this moment the intended situation...

Louis2

Hello, I did find a solution, but do not regard it as elegant. I have three mangle rules now - Mangle rule: prerouting, interface MNGT-LAN, action “mark packet” New Packet Mark ^MNGTLAN^” - Mangle rule: prerouting packet Mark ^MNGTLAN^ action “mark routing” value “MNGTLAN” - Mangle rule: output Src....

Louis2

Hello, My CRS317 has multiple connections to the outside world. Most of the traffic should leave the router via the normal default gateway, however not so the management traffic. The management traffic should be handled via the management vlan (MNGT-LAN). That VLAN is coming from another router via ...

Louis2

The Network I have a CRS317 running latest router OS (6.45.3). In the initial startup I did select the option “bridge” (no idea to which extend that change gui etc, but at this moment in time I have a separate router). I also defined the GUI network and address. On the CRS317 I did defined (bridge ...

Search found 43 matches