Thanks for you answer.

My last question : if I activate the IGMP Snooping functionality, the bridge will remain offloaded ?

Thanks,

Laurent

Thanks.

Is-it possible to check if an interface is offloaded or not ?

Laurent

So your configuration must be like here, Other Devices with built in Switch Chip https://wiki.mikrotik.com/wiki/Manual: ... witch_chip

Yes RB260 has this chip, AR8327...

yep, but I do not have access to such level of configuration with SwOS.

Dear all, as far as I understood, the switch RB260GS is based on a Atheros AR 8327 switch chip. Is it correct ? If yes, I wonder if the VLAN limitations stated for the Router OS devices with this chip applies ? ( the following ones : "QCA8337 and Atheros8327 switch chips ignore the vlan-header ...

Here some tests: bridge-tv interfaces NON offloaded, multicast traffic (nearly 15Mbps) admin@DecodeurTV] > /interface bridge port print Flags: X - disabled, I - inactive, D - dynamic, H - hw-offload # INTERFACE BRIDGE HW PVID PRIORITY PATH-COST INTERNAL-PATH-COST HORIZON 0 XI wlan1 bridge-tv 200 0x8...

I knew I forgot something really important... which explains many things at a time. If you look at the output of /interface bridge port print , you'll see that only the member ports of bridge "bridge" have the H indication at the left, indicating that they use hardware forwarding, whereas...

According to the manual, the switch chip rules on this switch chip model completely ignore the vlan-id , so the rule #0 matches on all frames that ingress through routeur , not just those with VID 840. That's why I wrote that it should match on the multicast range of MAC addresses and/or the multic...

Hello Sindy, thanks again for your answer. I got something working but I do not unterstand well. Here my configuration: [admin@DecodeurTV] > interface ethernet switch rule print Flags: X - disabled, I - invalid, D - dynamic 0 switch=switch1 ports=routeur vlan-id=840 copy-to-cpu=no redirect-to-cpu=no...

Hi, so, contrary to what the documentation says, the vlan-id stripping is work well on this Atheros chip. So I made the following conf to get rid of the IGMP Proxy: [admin@DecodeurTV] /interface ethernet switch port> print Flags: I - invalid # NAME SWITCH VLAN-MODE VLAN-HEADER DEFAULT-VLAN-ID 0 rout...

Hello Sindy,

thanks for this idea. But with this architecture, how the STB can connect to Internet for NTP / HTTPS / VOD ?

Thanks,

Laurent

Thanks for all these explanations. Is there a documentation describing such low level mechanisms or should I ask the forum each time ? :-) Regarding IGMP proxy - I've thought so far that it is only necessary when you need to route multicast packets from one IP subnet to another, but doing so is only...

double post

Imagine the switch and bridge as two switches or two bridges, interconnected by a trunk port. So if hardware forwarding is enabled, what does not need to get from one to the other, doesn't. If it is disabled, all frames from the switch chip are forced to the CPU, they are prohibited to take a short...

Yes, I wonder if I must change it by an ac2. But I read that ac2 has wifi stability problem. Do you confirm ? And what do you think about my configuration ? I do not understand the vlan at switch level. How can I handle at the firewall level a vlan retrieved by the switch ? How can I do NAT on a vla...

You haven't posted enough information about your configuration. See my automatic signature for a hint In fact, you answered me while I was drawing :-) third, I can see a lot of your CPU power is spent also on queueing which indicates you have implemented some QoS; You're right. It's not to implemen...

Thank you mkx. As far as I understood the configuration on the link you gave me, it's a trunk with vlan 20 and vlan 30 and two access port, one on the vlan 20 and on the vlan 30. Correct ? Here the configuration I want to achieve with a maximum offloading: Capture d’écran 2020-04-12 à 15.05.29.png C...

Dear all, another question about vlan offloading. My ISP sends the traffic via 2 VLANs: one for Internet (id 832) and another one for the TV (id 840). Currently, I've configured my board with 2 interfaces vlan like this: [admin@Routeur] /log> /interface vlan print Flags: X - disabled, R - running # ...

Thanks for this very detailed answer. I will try it !

Now I've some others question about vlan offloading. I'm opening another thread for that.

Laurent

Dear all, in order to get a more secure management, I disabled the IP http service to use the https service. Right, it worked well. Now, I wanted to set up a SCEP service. And to get it work, I had to enable back the http service. So my question: is-it possible to disable the admin page when accesse...