MikroTik

Version 2.17 of SwOS has been released:
viewtopic.php?t=210646

SwOS version 2.17 released http://www.mikrotik.com/download What's new in v2.17: *) added support for CRS320-8P-8B-4S+; *) added per-port Neighbor Discovery settings; *) added Reset Counter settings for individual ports; *) crs310g: fixed SFP module detection; *) crs312: fixed possible packet forwa...

Version 2.18 of SwOS Lite has been released:
viewtopic.php?t=205311

SwOS Lite version 2.18 released http://www.mikrotik.com/download What's new in v2.18: *) added option to set forced 2.5G for SFP+ ports; *) css610: added a distinct "Health" menu; *) css610pi: updated PoE firmware; *) fixed multicast forwarding after disabling IGMP snooping; *) fixed SNMP...

Version 2.16 of SwOS has been released:
viewtopic.php?t=204932

SwOS version 2.16 released http://www.mikrotik.com/download What's new in v2.16: *) added support for CRS310-1G-5S-4S+IN/OUT; CRS310-8G+2S+IN *) added notification when Primary backup firmware is in use and encourage moving to Secondary regular firmware; *) added confirmation dialog before resettin...

Version 2.17 of SwOS Lite has been released:
viewtopic.php?t=198694

SwOS Lite version 2.17 released http://www.mikrotik.com/download What's new in v2.17: Important note!!! Upgrading to SwOS lite 2.17 will retain your current switch configuration. However, downgrading to older SwOS lite versions could result in complete loss of your configuration settings. Save conf...

Hello,
There was an error in the SwOS upgrade server which provided false information about SwOS 2.14 and 2.15 releases.
It has been fixed now and the SwOS 2.13 is back.
Soon it is planned to make an actual public release of the new SwOS version with bugfixes and new features.

Hello,
We can confirm this DHCP & PPPoE snooping software problem. It is specific to the CSS610-8P-2S+IN model and SwOS Lite 2.15 version.
Please contact MikroTik support via Support Help Desk System (https://mikrotik.com/support) to solve this issue until the new SwOS Lite version is released.

SwOS Lite version 2.14 released http://www.mikrotik.com/download What's new in v2.14: *) improve SFP+ link establishment; *) GPEN21: allow to select up-link port; *) make IGMP snooping work with multiple VLANs; *) stop forwarding multicast traffic on client unsubscribe; *) do not show learned IGMP ...

Version 2.13 of SwOS has been released:
viewtopic.php?f=21&t=174849

SwOS version 2.13 released http://www.mikrotik.com/download What's new in v2.13: *) added support for CRS354; *) CRS328: fixed SFP status monitoring; *) CRS328: fixed auto-negotiation on combo ports; *) CRS326Q: fixed matching by ports in ACL; *) CRS326Q: properly detect QSFP+ optical modules; *) C...

*) CSS610: report temperature under System tab;
...not true for the CSS610-8G-2S+IN or what am I missing on mine, running SwOSLite v2.13?

Sorry, the changelog entry should have been more specific. It applies only to the CSS610-1Gi-7R-2S+ "netPower Lite 7R".

The information about CSS610 series switches and SwOS Lite is available here:
https://wiki.mikrotik.com/wiki/SwOS/CSS610

SwOS Lite version 2.13 released http://www.mikrotik.com/download What's new in v2.13: *) properly report SFP port speed; *) make SFP port work in forced 1G speed mode; *) make fiber optic modules work with auto-negotiation (1000BaseX); *) fixed management access over SFP ports; *) CSS610: report te...

Hello,
Unfortunately, we can confirm that RouterOS v6.49beta22 causes CRS354-48P-4S+2Q+ PoE-out functions to stop.
The problem is fixed and there will be a new v6.49beta available in upcoming week.

Please do not install v6.49beta22 on CRS354-48P-4S+2Q+!

The discussed CRS354 Ethernet interface forwarding issue is related to CRS354 chip configuration and solving it involves internal parameter tuning of the device. By cooperating with the chip manufacturer, we are researching it and doing more extensive testing to properly fix this problem. At the mom...

Hello,
We are now actively working on development of SwOS software for CRS354 devices.
It is planned to finish and release it very soon.
Regards,

Version 2.12 of SwOS has been released:
viewtopic.php?f=21&t=163657

SwOS version 2.12 released http://www.mikrotik.com/download What's new in v2.12: *) added Combo-Mode setting for combo ports; *) allow to configure tx & rx flow control separately (only tx flow control is enabled by default) and make them work; *) report current status of rx/tx flow control; *)...

Version 2.11 of SwOS has been released:
viewtopic.php?f=21&t=158014

SwOS version 2.11 released http://www.mikrotik.com/download What's new in v2.11: *) try to acquire DHCP address even after initial 10s if static address is provided use it while DHCP has not succeeded; *) fixed QnQ (VLAN in VLAN) packet forwarding; *) make flow-control disable work as expected; *) ...

Version 2.10 of SwOS has been released:
viewtopic.php?f=21&t=151881

SwOS version 2.10 released http://www.mikrotik.com/download What's new in v2.10: *) do not ignore RSTP port state when forwarding DHCP, PPPoE or IGMP snooped packets; *) IGMP snooping: send out IGMPv3 queries by default; *) IGMP snooping: handle IGMPv3 leaves much better; *) IGMP snooping: handle d...

CRS312-4C+8XG-RM has separate QCA9531 CPU and Marvell-98DX8212 switch chip.
Here is the block diagram:
https://i.mt.lv/cdn/rb_files/CRS312-4Cp ... 104503.png

CRS312-4C+8XG has Marvell-98DX8212 switch chip and supports the same features as CRS317-1G-16S+ including 10218 byte Jumbo Frames. Briefly, Ethernet interface link speeds are similar to S+RJ10 module: https://i.mt.lv/cdn/rb_files/sfp_splusrj10-190211155011.pdf We will update the CRS312-4C+8XG docume...

Our investigation has revealed that there might be a SFP+ compatibility issue with specific CRS317-1G-16S+ units when connected to other CRS3xx devices resulting in random link downs. Please, contact MikroTik support if you experience similar issue, we will verify it and arrange a repair if necessary.

SwOS v2.9 has few changes which require updated fan controller firmware that comes only within RouterOS.
Please upgrade the CRS3xx to RouterOS v6.44beta61, the fan firmware will upgrade along with it.
Then you will be able to use SwOS v2.9 and can downgrade RouterOS if necessary as well.

Upgrading from 2.8 to 2.9 on a CSS106-5G-1S causes severe traffic drop between 1G ports and 100Mbit ports. It's random from 0 to 40Mbps.
Reverting back to 2.8 traffic increased back to steady 100Mbps.

Are there any errors in interface stats when using v2.8 or v2.9?

@RobertF and @abrodkin SwOS has supported IGMP v1,v2,v3 since v2.5, also many issues have been addressed since then and now in v2.9 there is an additional port option to disable unknown multicast flooding. We are not aware of common IGMP Snooping problems anymore. If you experience problems using I...

Known issue:

*) CRS328-24P-4S+ upgrade from the SwOS does not work in this version
Upgrade using SwOS firmware file "swos-css328p-2.9.bin" from https://mikrotik.com/download should be used instead.

Version 2.9 of SwOS has been released with many v2.8 issues addressed:
viewtopic.php?f=21&t=144031

SwOS version 2.9 released http://www.mikrotik.com/download What's new in v2.9: *) CRS326 & CRS328 & CRS317: make sure that RSTP BPDU packets are always untagged; *) CRS328-4C-20S-4S+: make 1G fiber SFP modules work; *) CRS328-4C-20S-4S+: fixed PSU numbering; *) CRS328-4C-20S-4S+: light up f...

My guess is that the PLC-chipset (AR7420) is connected to one of the (5) integrated ports on the QCA9533 with RMII-interconnect. So it's basically Ethernet. It is true, PWR-Line interface appears as another wired interface in the RouterOS. The PL6411-2nD and PL7411-2nD block diagrams have been upda...

We are currently testing a new SwOS version for release, this version includes more fixes for performance and packet forwarding related issues which previously has been addressed in RouterOS. If you have a CRS series switch and observe the described problem with packet overruns only when using SwOS ...

I would like to clarify that the hardware offloading limitation for single bridge is made by intention because entire switch-chip usually is designed as a one bridge entity. The single Host table usually seen in network switches could be mentioned as an example for it and implementing it in RouterOS...

Hello, RB3011 Port Flapping problem is addressed by means of a new CPU Flow Control setting in RouterOS v6.43. If you have experienced this problem, it is recommended to upgrade to the v6.43 and apply following RouterOS command to prevent lockups between RB3011 switch chips and CPU. /interface ether...

eworm, changing speed setting no matter of its value initiates restart of ethernet port and if autonegotiation advertises 1000M-half,1000M-full, the CRS will try to negotiatiate 1Gbps link first before dropping to lower speed.

Interface speeds seem to be set explicitly after upgrading, is this related to the SNMP speed report changelog entry? I haven't tried connecting an interface at other speeds yet, but can I assume that this setting, while a part of /export, will change accordingly? /interface ethernet - set [ find d...

Hello,
We are investigating your reported issues about missing information in CRS328-24P-4S+ SFP and PoE menus.
Meanwhile, you can load primary SwOS v2.7p from Serial Console in the same way as on CRS326-24G-2S+
https://wiki.mikrotik.com/wiki/SwOS/CSS ... _Reinstall

Version 2.8 of SwOS has been released:
viewtopic.php?f=21&t=137254

SwOS version 2.8 released http://www.mikrotik.com/download What's new in v2.8: *) CRS317: fixed links not coming up after power failure; *) CRS317: added extra information about FAN & PSU health; *) CRS317: fixed load balancing over aggregated links; *) CRS317: increased per port queue size; *)...

You should use this LED trigger for modem-signal strength /system leds add interface=lte1 leds=led1,led2,led3,led4,led5 modem-signal-treshold=-91 type=modem-signal The whole modem-signal strength range is [-113..-51] and the modem-signal-threshold increases the weakest signal limit to -91 so the sig...

Hello,
Here is updated information about "RB260"(CSS106) SwOS v2.x recovery:
https://wiki.mikrotik.com/wiki/SwOS/RB250_RB260#Reset

Hello,
The "/lcd" menu is intended for built-in LCD touchscreen.
There is another "/system lcd" menu for external LCD screens.

Hello, Did you notice actual interface disconnections on devices connected to CRS317 or were they just blocked connections? Blocked ports with running link would be more common to RSTP, but actual disconnections may be related to some SFP compatibility issue. Could you send screenshots from SwOS SFP...

Hello, by default VLAN interface uses and accepts encapsulation with TPID 0x8100. If "use-service-tag" option is enabled, then VLAN interface uses TPID 0x88A8. TPID 0x9100 is not supported in VLAN interfaces.

Hello, since v2.7 we have had difficulties in repeating your reported performance issues on CSS326.
Do all of you experience performance problems only with SMB transfers on CSS326 with SwOS 2.7?
Does any other bandwidth testing method also give the same bad results?

Hello, the discussed RB3011 issue is not hardware related, despite the quoted email in the first post. We have discovered that it tends to occur due to software after several day uptime, therefore it is harder to reproduce and debug it. Despite all that, we are working on it and plan to apply fixes ...

Version 2.7 of SwOS has been released:
viewtopic.php?f=21&t=128917

SwOS version 2.7 released http://www.mikrotik.com/download What's new in v2.7: *) Make some of Mikrotik DAC work in 10G mode; *) Make SwOS work with MS Internet Explorer 11; *) Fixed switch lockup if it was restored with specifically corrupted backup file; This SwOS version also contains improvemen...

Hello, RouterOS 802.3ad bonding is always in "active" mode, SwOS LAG is 802.3ad compatible and can be configurable to "active" or "passive". All these configurations will work together because valid LACP configurations are "active-active" and "active-pass...

Hello, yes, we strongly recommend using RouterOS v6.41rc on CRS3xx switches. Although RouterOS v6.41 is still in release candidate stage, the switch VLAN features for CRS3xx switches in it provide more fuctionality, they are well tested and work stable. Any switch VLAN configuration works with as ma...

Hello, Here is an example for the statement about vlan-mode "check" and "secure" to allow forwarding of untagged packets. The port default vlan-id is 1, therefore it has to be added to VLAN table before enabling "check" or "secure" mode. [admin@MikroTik] > int...

Hello, CRS1xx/2xx series switches support such feature:
https://wiki.mikrotik.com/wiki/Manual:C ... s_per_Port

Hello,
There are no specific limitations for microSD cards to be compatible, we have tested up to 128GB UHS-I microSD cards.
The latest tested cards are mentioned in the Dude manual..
https://wiki.mikrotik.com/wiki/Manual:T ... roSD_cards

In RouterOS v6.41 everything QinQ related has to configured with bridge "vlan-filtering=no" using VLAN interfaces and their "use-service-tag" option.

Kevo, it means that it will take 10s after reboot for SwOS DHCP Client to reach timeout and the previously configured static IP will become available again.

Since v2.5 switch address acquisition mode by default is DHCP with fallback to static address. It is the reason why you, probably, see 0.0.0.0 address for about 10 seconds right after booting.

Hello bajodel, in case you have something plugged into CRS326 SFP+ ports, unplug it. Then try to boot SwOS and perform upgrade to v2.6. It should solve SwOS booting issues with active SFP+ ports.

Hello, if you have intended all physical ports as access ports for VLAN10, then only "switch1-cpu" port should be set as a tagged port for VLAN10.

/interface ethernet switch egress-vlan-tag
add tagged-ports=switch1-cpu vlan-id=10

Version 2.6 of SwOS has been released:
viewtopic.php?f=21&t=126752

SwOS version 2.6 released http://www.mikrotik.com/download What's new in v2.6: *) Make 'Change Password' work again; *) CRS317 & CRS326: fixed DHCP request forwarding between trusted ports; *) CRS317 & CRS326: fixed ACL vlanid match (values bigger than 1024 did not work); *) CSS106-5G-1S: d...

Hello, You may find useful "VLANs on Wireless" configuration examples from wiki to achieve what you need.
https://wiki.mikrotik.com/wiki/Manual:VLANs_on_Wireless

Hello, the CRS326 supports LACP in RouterOS by software based Bonding and in SwOS using switch chip feature at wirespeed.
The CRS326 Link Aggregation without CPU utilization in RouterOS is planned in near future.

Hello, please, take a look at this CRS configuration example, it combines router-switch functionality for CRS1xx/2xx devices.
https://wiki.mikrotik.com/wiki/Manual:C ... AN_Routing

Please use RouterOS v6.41rc on CRS317 where Bridge hw-offloading and Bridge Vlan Filtering provide VLAN configuration using CRS317 switch chip. https://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features#Bridge_Hardware_Offloading https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_VLAN_Fil...

CRS317 fan support is added starting from SwOS v2.5.

Hello, we are working on DHCP issues in SwOS v2.5, the new version with fixes is planned soon.

Hello, in CRS106-1C-5S the CPU is connected to the wirespeed switch chip through 1Gbps lane and also its 400MHz is not capable of generating so much traffic to fully test switch chip capacity. See CRS106-1C-5S block diagram: https://i.mt.lv/routerboard/files/CRS106-1C-5S-170928152116.png You should ...

Version 2.5 of SwOS has been released:
viewtopic.php?f=21&t=125664

SwOS version 2.5 released http://www.mikrotik.com/download What's new in v2.5: *) SFP & SFP Status tabs are combined into one; *) Global RSTP settings are moved unto RSTP tab; *) Static Hosts & Hosts tabs are combined into one; *) CSS106, CRS326, CRS317: added support for IGMP snooping; *) ...

Hello, please, tell what SwOS version is installed on your CSS326. If it is not the latest v2.4, then you should upgrade and repeat the file transfer. Does the problem persist if you send the same file to only one computer? Do all ports have 1G link speed or is there any interface with lower than 1G...

How would one realize inter-vlan routing or generally vlan interfaces with the new bridge implementation? Can't find anything on this except some emtpy placeholder topic in the Wiki. The example "InterVLAN Routing by Bridge" has been updated: https://wiki.mikrotik.com/wiki/Manual:Interfac...

Hello, since RouterOS v6.38 the RSTP works also in CRS switch chip:
https://wiki.mikrotik.com/wiki/Manual:C ... e_Protocol

Hello, CSS326 management VLAN with tagged packets worked before and the problems with untagged packets are fixed since SwOS v2.3:

What's new in v2.3:
*) fixed "Allow From VLAN" on untagged packets with correct default vlan id;

Hello, the use of RouterOS IGMP Snooping is described here:
https://wiki.mikrotik.com/wiki/Manual:I ... P_Snooping

Hello, it is fixed in RouterOS v6.40.

What's new in v6.40 (2017-Jul-21 08:45):
*) switch - fixed multicast forwarding on CRS326;

https://mikrotik.com/download

I've just upgraded firmware in the CRS326. The hex is factory default. My versions are: CRS326: 3.40 (factory default was 3.37) hex: 3.34 (which is factory default) We have done several tests between CRS326 and "hEX PoE" with the latest versions to check for possible software issues but h...

My understanding from the 6.40rc36 and 38 releases was that the switch chip menu was to not be used for ports not in a new bridge and ideally all configurations should move to the new VLAN aware hw-offload bridges. Currently, it is implemented only for CRS3xx series switches. If you see the table o...

Hello, we are aware that Ethernet LEDs do not work on RouterBoards with AR8327/QCA8337 switch chips in v6.41rc3 and look forward to fix it soon.

The RB2011 LCD blinking is fixed starting from RouterOS v6.41rc3.

What's new in 6.41rc3 (2017-Jul-26 09:32):
*) rb2011 - fixed possible LCD blinking along with Ethernet LED;

If you notice this problem in v6.40, disable/enable LCD to stop it:

/lcd set enabled=no
/lcd set enabled=yes

Currently, MikroTik switches with SwOS do not support Q-in-Q VLANs.

Can you do interface bonding with the CRS317?

In SwOS the link aggregation on CRS317 is supported at hardware level. In RouterOS it will become available in future.
https://wiki.mikrotik.com/wiki/SwOS/CRS317#LAG

Hello, IGMP Snooping is a per-bridge feature in RouterOS. Here is a sample of how it should look like: [admin@MikroTik] > /interface bridge set bridge1 igmp-snooping=yes ... [admin@MikroTik] > /interface bridge mdb print BRIDGE VID GROUP PORTS bridge1 237.0.0.1 ether3 ether2 ether1 bridge1 238.1.1.1...

Probably, the routes were not configured in the other subnet routers therefore NAT solved it.

Version 2.4 of SwOS has been released:
viewtopic.php?f=21&t=123508

SwOS for CSS326-24G-2S+ is also intended for CRS326-24G-2S+

SwOS version 2.4 released
http://www.mikrotik.com/download

What's new in v2.4:

*) CSS106: fixed upgrade over PoE ports when PoE stopped working;
*) CRS326: fixed port in disabled VLAN mode to forward untagged packets;

Here is a simple MSTP configuration example for insight. It could be used on 3 routers connected in a ring. #1) Create a bridge with ports: /interface bridge add name=bridge1 protocol-mode=none vlan-filtering=no /interface bridge port add bridge=bridge1 interface=ether1 add bridge=bridge1 interface=...

Any way to enable STP / RSTP / MSTP logging ?

Currently, it is not supported.

How can spanning tree port states be seen? (show spanning-tree equavelant)

/interface bridge monitor bridge1

/interface bridge port monitor [find where bridge=bridge1]

/interface bridge msti monitor [find]

Here is the article about new VLAN-aware bridge implementation:
https://wiki.mikrotik.com/wiki/Manual:I ... _Filtering
A couple examples will be added and more information will be updated based on your feedback.

On RB750G [AR8316] to keep hw-offload enabled with VLANs, they have to be configured in "/interface ethernet switch" menu.

For starters, here is clarification about bridge hardware offloading:
https://wiki.mikrotik.com/wiki/Manual:S ... Offloading
Information about the new bridge VLAN implementation is coming next.

With the new MSTP implementation will MikroTik's STP/RSTP implementation behave like the standard (untagged BPDU that represents all VLANS)?

Yes, that is our goal! And the "old style" bridges with VLAN interfaces and per-VLAN RSTP behavior also will remain.

The VLAN1 is not mandatory for accessing SwOS. Perhaps, it was mentioned just as an example in some configuration guide. Here is configuration to have management IP 10.0.0.1/29 on VLAN100 in SwOS: swos-mgmt.png Note that VLAN100 should be configured first in SwOS to avoid losing connection to the CS...

SwOS can be reached from the internet just fine. The reason you don't need to specify netmask and gateway is that switch is just responder, it sends packets back to the same gateway that sent requests to it in the first place.

Currently, CRS326-24G-2S+ has the same features as simple RouterBoard switches.
https://wiki.mikrotik.com/wiki/Manual:S ... p_Features
But in the next few RouterOS releases there will be more switch features added specifically for CRS326-24G-2S+.

CRS326-24G-2S+ is ARM architecture device, try to reisntall it with Netinstall using RouterOS package for ARM.

Hello, PoE-in powering is independent from software. If the switch was not accesible after upgrade to SwOS v2.3, then it rather could be some connectivity or upgrade issue.
Now when backup SwOS 2.0p is loaded, upgrade to v2.3 should complete successfully.

SwOS version 2.3 released http://www.mikrotik.com/download What's new in v2.3: *) fixed CRS317: make 10G links more stable; *) fixed "Allow From VLAN" on untagged packets with correct default vlan id; *) LACP: fixed unstable aggregate link problem when partner had short retransmit timer; ...

RB951Ui-2HnD and RB951G-2HnD support cable-test feature, hEX RB750Gr3 does not.

Hello chenier,
The RB250GS does not support Native VLAN (untagged) traffic on VLAN trunk ports, this setup is not possible with RB250GS.
The RB260GS could do it because it allows separate VLAN actions for each VLAN in the "VLANs" menu.
https://wiki.mikrotik.com/wiki/SwOS#VLANs_Tab

SwOS version 2.2 released http://www.mikrotik.com/download What's new in v2.2: *) fixed CSS326 & CRS317 switch MAC address; *) fixed CRS317 lockup; *) make CSS326 & CRS317 10G links more stable; *) fixed CRS317 temperature reading; *) fixed problem where big ACL, VLAN or static hosts lists ...

Hello, The reverted BPDU changes do not affect how hardware based (R)STP works on CRS switches. This CRS (R)STP configuration will still work using untagged BPDUs and will remain as is: https://wiki.mikrotik.com/wiki/Manual:CRS_examples#Spanning_Tree_Protocol The changes in RouterOS v6.38 affect sof...

Hello,
Here is the link to a basic VLAN configuration example for CSS326-24G-2S+:
https://wiki.mikrotik.com/wiki/SWOS/CSS326-VLAN-Example
It should at least point to the right direction how VLANs should be configured on CSS326-24G-2S+.

Does the "enabled" VLAN mode in 2.x check to see that the port is a member of the VLAN like the "strict" mode in 1.x, or just that the VLAN is configured on the switch like the "enabled" mode in 1.x? In SwOS v2.0 on CSS326 VLAN Mode "enabled" works as the VLA...

gharris999, we will work on to improve it to make upgrade also possible through devices which use CSS106-1G-4P-1S PoE-out.

gharris999, try to repeat v2.1 upgrade once more when you have already upgraded to SwOS v2.1.
If the PoE-out problems will persist, I would recommend to report this to support@mikrotik.com

Hello, try disabling Neighbor Discovery on ether1 and wlan1 interfaces and keep enabled only on bridge1.

Hello,
Here is the link to a basic VLAN configuration example for CSS326-24G-2S+:
https://wiki.mikrotik.com/wiki/SWOS/CSS326-VLAN-Example
It should at least point to the right direction how VLANs should be configured on CSS326-24G-2S+.

Hello,
The bandwidth limiting on CSS326-24G-2S+RM will be available in the next SwOS release v2.1 which is planned very soon.

Hello,
CSS106-1G-4P-1S with SwOS 2.0 is very similar to RB260GSP. Additionally, it supports RSTP.
We are working on it and soon SwOS2.0 will be available for download at MikroTik webpage.

Hello,
The 802.3ad load balancing is not supported in the new SwOS 2.0 yet.

The Ingress Port Policer may have too strict rate limits, try setting higher rate for ports.

CRS Port Trunking calculates transmit-hash based on all following parameters: L2 src-dst MAC + L3 src-dst IP + L4 src-dst Port.

Hello, This bug is fixed in RouterOS v6.39rc15 and the fixes will be included in all upcoming RouterOS versions.

@docmarius
The adding of slave ports dynamically to the bridges allows monitoring STP/RSTP port status. None of the forwarding between switched ports actually happens in the bridge.

macgaiver,
We are looking forward to improve hardware STP/RSTP functionality and add configurable STP/RSTP related port options in future.

Njumaen - please generate supout files on your RB3011 and CRS125 and send them to support@mikrotik.com

nacer - please generate supout files on your CCR1009 and CRS125 send and them to support@mikrotik.com

Can you elaborate on the RSTP incompatibility? We've been using 6.30/6.34/6.36 for some time now between different devices without a problem, including inter-operating with another vendor (A few HP/Aruba 48 port switches). Does this change affect the inter-operability with other vendors? Thanks. Pr...

This configuration is very simple and should not cause any performance issues.
Try to enable switching on different ports and do the same test.

What does "interface ethernet monitor ether1,ether2" command show?

RB mAP 2nD supports USB power-reset feature.

RB750Gr3 switch chip does not have full VLAN tagging/untagging support yet, it is planned to implement it in future. Currently, you should use RB750Gr3 switch chip only for basic switching. RB750Gr3 is also powerful enough to handle software based VLANs: http://wiki.mikrotik.com/wiki/Manual:Interfac...

Looks like you need to configure "switch1-cpu" port just like "ether2" port in the switch menu to allow access to DHCP servers configured on VLAN interfaces.

If SwOS upgrade has failed, the only way to recover RB250/RB260 series switches is reinstallation with BOOTP method. http://wiki.mikrotik.com/wiki/SwOS#Reinstall_SwOS_firmware In case, it is not successful with version 1.17, try with older version 1.16. SwOS v1.16 for RB250: http://www.mikrotik.com/...

Version 1.17 of SwOS has been released:
http://forum.mikrotik.com/viewtopic.php?f=21&t=111229

SwOS version 1.17 released
http://www.mikrotik.com/download

What's new in 1.17:
*) support SNMP responses bigger then 128 bytes;
*) do not mangle SNMP sysName if identity is 16 characters long;
*) support 32 characters in identity;

In most cases clearing the web browser's cache fixes the problem with missing PoE menus in the SwOS. If it has not fixed it in FireFox browser, go to History menu and do a search by typing RB260GSP IP address in search bar. Then select RB260GSP SwOS entry, open options with right click and set “Forg...

RB951G-2HnD has had two configurable LEDs (wlan-led and user-led) from beginning. Ethernet port LEDs on RB951G-2HnD are hardcoded in Gigabit Ethernet switch-chip and are non-configurable. RB951Ui-2HnD has internal Fast Ethernet switch-chip and its LEDs are controlled differently. Ethernet port LEDs ...

Bridged VLANs (VLAN interfaces) is software based RouterOS feature but MAC based VLANs is CRS specific hardware switch-chip feature. They do not work properly when both configured on the same ports. When ports are set for switching by master-port, they become limited to features available only from ...

This is the RouterOS command to disable port mirroring from command line interface:

/interface ethernet switch set switch1 mirror-source=none mirror-target=none

Installing the latest RouterOS version using Netinstall should fix the problem with LEDs on hEX lite.

There are two LEDs for the wireless section and two LEDs for the 5th port section in the hAP ac (RB962UiGS-5HacT2HnT) case. The green wireless LED shows 2.4GHz wireless status and the red wireless LED shows 5GHz wireless status. Sometimes their blinking times match and colors blend together. The gre...

SwOS version 1.16 with minor fixes released
http://www.mikrotik.com/download

What's new in 1.16:
*) fixed problem where SFP port sometimes got disabled;

"drop-if-no-vlan-assignment-on-ports" setting blocks traffic on ports which do not have Ingress VLAN Translation rules configured (VLAN Trunk ports). Your configuration does not seem to need it. It would be enough to configure "drop-if-invalid-or-src-port-not-member-of-vlan-on-ports&q...

Just started upgrading a few of switches from 1.14 that are known to have poe issues remotely and on my 3rd one the firmware didn't upgrade properly showed me a bunch of text on a white screen (looked like code as I noticed it looked like some html code was in there) and then I lost access and unfo...

IVL feature is supported only on RB260 series switches.

Upgraded from v1.14 after reset to default error is still there INTERNAL ERROR:TypeError: Object doesn't support property or method 'log10' http://fs5.directupload.net/images/160427/8a2qywjb.jpg I also experiencing the same situation. It's occurring only in Internet Explorer. Try to clear web brows...

Upgraded from v1.14
after reset to default error is still there
INTERNAL ERROR:TypeError: Object doesn't support property or method 'log10'

Powercycle also should remove this error.

After the upgrade can not see SFP parameters and the SFP tab I get the message
INTERNAL ERROR:TypeError: Object doesn't support property or method 'log10'

Did you upgrade from SwOS v1.14 or older version?

"drop-if-no-vlan-assignment-on-ports" is not necessary for "ether24-slave-local" port.
Now that option is dropping packets on ether24 port because it does not have an Ingress VLAN translation rule configured.

SwOS version 1.15 released http://www.mikrotik.com/download What's new in 1.15: *) new poe-out sw version 2.18 - fix unintended poe-out state change; *) new poe-out sw version 2.15 - increase initial power-on delay 1s->4s; *) report correct uptime in neighbour discovery even after 18 hours; *) repo...

After reading your problem description I must say you were very close to make it work. Here is configuration to achieve it: 1) Add necessary VLAN interfaces on ethernet ports where tagged packets are planned /interface vlan add interface=ether5 name=eth5-vlan40 vlan-id=40 add interface=ether5 name=e...

Here is the link to VLAN examples which should help:
http://wiki.mikrotik.com/wiki/Vlans_on_ ... nvironment

Here is an example for what is needed to prevent loosing access to CRS itself from specific VLAN before setting /interface ethernet switch set forward-invalid-vlan=no : http://wiki.mikrotik.com/wiki/Manual:CRS_examples#Management_IP_Configuration Also note that /interface ethernet switch vlan entrie...

mpreissner is absolutely right. Changing from bridging to switch chip configuration would save lots of CPU resources on CCR226 and will ensure the same Layer2 forwarding. /interface ethernet set [ find default-name=ether2 ] master-port=ether1 set [ find default-name=ether3 ] master-port=ether1 set [...

Ingress VLAN Translation rule with "sa-learning=no" makes CRS switch to not learn source MAC address on port 7. And if it does not learn, it does not know where to send back traffic destined to device connected to port 7. In such case switch sends traffic to all its ports except incoming.

Enable MAC learning for VLAN610 on port 7 by setting "sa-learning=yes" in the Ingress VLAN Translation rule. It should prevent unwanted traffic flooding.

Hello,
The RB3011 block diagram has been updated to better represent internal connections among CPU cores.

Try flushing the Unicast Forwarding Database after modifying the Ingress VLAN Translation rule to make CRS relearn correct VLAN ids.

/interface ethernet switch unicast-fdb flush

The following ingress VLAN translation rule has missing " customer-vid=0 " parameter therefore it translates VLAN172 to VLAN192 on ether2 and ether3 as well. [root@MikroTik_Switch] /interface ethernet switch ingress-vlan-translation> print Flags: X - disabled, I - invalid, D - dynamic 0 po...

I think you should create VLAN 20 interface on the master-port for management access and add IP from 192.168.20.0/24 subnet to it.

Management connection to CPU is lost if you configure port from which you are connected because ingress VLAN translation rules work only combined with egress-vlan tagging entries. Here are steps what should be done to do it if you want to start configuring this setup from scratch. 1) Reset configura...

The table has been updated. That setup is also possible with hAP ac lite and hAP ac.

Try upgrading to the latest RouterOS v6.35rc10 from http://www.mikrotik.com/download
If problem remains, write to MikroTik support and send us supout file.

So do you mean I can apply VLANs (egress-vlan-tag, /interface ethernet switch vlan) to the ether2 interface even though it exists logically underneath ether1-master? Yes, because the main purpose for the master-port is setting an internal connection from switch chip to the CPU (it is an interface w...

CRS VLAN configurations do not work well with multiple master-ports. This is the note from CRS manual page: Note: Multiple master-port configuration is designed as fast and simple port isolation solution, but it limits part of VLAN functionality supported by CRS switch-chip. For advanced configurati...

I have nothing that will be doing QinQ It means you should use customer-vlans. I want all traffic from the "switch itself" to be sent on a management VLAN. However, I want to use the main uplink port (sfpplus1 in this case) as the management port. When I tried to configure this, I somehow...

NO subnet mask against the IP address such as 172.16.1.1 or 10.1.1.1 seems to default to a /24 address range. SwOS uses a simple algorithm to ensure TCP/IP communication - it just replies to the same IP and MAC address packet came from. Using them as a trunk 802.11Q e.g PC-> [ SFP -> Port 5 ->] -> ...

CCR1036 router does not have any switch-chip therefore none of RouterOS commands in the RouterOS Switch menu work. On CCR1036 similar functionality to port mirroring can be achieved by using a sniffer tool with configured streaming server. http://wiki.mikrotik.com/wiki/Manual:Tools/Packet_Sniffer#Ex...

Hello, Here is the RouterOS VLAN configuration for this network diagram. 1) Create VLAN interfaces on ports where tagged traffic is planned. /interface vlan add interface=ether1 name=eth1-vlan30 vlan-id=30 add interface=ether1 name=eth1-vlan40 vlan-id=40 add interface=ether2 name=eth2-vlan30 vlan-id...

MIkroTik support is working on this problem, we recommend to keep using v6.32.3 (bugfix) until it is fixed in v6.33.x

By default CRS125 is configured as a simple switch.

Configuring master-port setting enables switching on CRS

/interface ethernet
set ether2 master-port=ether1
set ether3 master-port=ether1
set ether4 master-port=ether1
and so on...

Tagged VLAN forwarding is allowed by default when CRS ports are configured by the master-port.

JavierTF, there are no plans for ping based power-cycle in SwOS in the near future. It might be implemented on newer hardware in later SwOS versions.

Although it is not so convenient, turning port PoE off and on again can work as a workaround for simple power-cycle.

Please make sure the CRS does not have multiple master-ports configured in "/interface ethernet" menu.

IP addresses work only on master-port when CRS has a switching configuration. (in your case ether2) Also you need to allow VLAN0 between trunk1 and switch1-cpu in the VLAN table to make connection. /ip address add address=192.168.88.1/24 interface=ether2 network=192.168.88.0 /interface ethernet swit...

RB260 has a simple CPU just to ensure configuration management of the Gigabit switch-chip. The bigger latency does not affect its switching capabilities and an access to the web GUI.

Take a look on this SwOS configuration example, it should help you:
http://wiki.mikrotik.com/wiki/SwOS/Router-On-A-Stick

Hello, dan5 As I understand the problems with your CRS226 appear when they have a bridging configuration. We are aware of such problems and the new RouterOS v6.33 release will contain fixes for them. v6.33 will be released very soon. In case any problems remain in the new version, please write an em...

I recommend upgrading your router and switches to RouterOS version v6.32.3

RB2011iLS-IN has simpler switch-chips than CRS112-8G-4S-IN.
RB2011iLS-IN switch features are described in this article:
http://wiki.mikrotik.com/wiki/Manual:Sw ... p_Features

I agree. The both suggested commands by skuykend should make it work.
Maybe just recheck "/ip dhcp-server network" section because I found it missing in your posted configuration.

I think VLAN table should be like this: /interface ethernet switch vlan add ports=ether1,ether2,switch1-cpu switch=switch1 vlan-id=4 add ports=ether1,ether2 switch=switch1 vlan-id=5 add ports=ether1,ether2 switch=switch1 vlan-id=6 add ports=ether1,ether2 switch=switch1 vlan-id=7 add ports=ether1,eth...

RB750Gr2 (hEX) has a switch-chip but it differs from CRS switch-chip.

This article from MikroTik wiki applies to the RB750Gr2 (hEX) switch-chip
http://wiki.mikrotik.com/wiki/Manual:Sw ... p_Features

Setting the master-port to "none" for each port is enough to make them independent from software point. Looking from a hardware point - these ports still share bandwidth to the CPU. "Switch1" in interface settings is just a reminder to know whether the port belongs to any switch ...

You can configure ingress/egress port mirroring from any physical CRS switch port to the "switch1-cpu" port and you will see that traffic when running Torch on the master-port. /interface ethernet switch set ingress-mirror0=switch1-cpu egress-mirror0=switch1-cpu /interface ethernet switch ...

This problem has been fixed in RouterOS v6.32.2.

What's new in 6.32.2 (2015-Sep-17 15:20):
...
*) switch - fixed bogus log messages about excessive broadcasts/multicasts on master-port;
...

Run Torch tool on interface which is the master-port but in CRS Switch menu configure "switch1-cpu" as mirroring analyzer port.

It is not possible by port mirroring in CCR1009-8G-1S-1S switch-chip. But if there were VLAN interfaces configured on ether1 port, then it would be possible to stream packet capture from specific VLAN interface. It might work for you. Example: /interface vlan add interface=ether1 name=eth1-vlan10 vl...

w0lt, I have also tested v6.33rc10 on CCR1009-8G-1S-1S+ and have not found the unwanted log messages appearing anymore. If you see them on a port which is not a master-port and there is a lot of traffic, then they might be real. Send a supout file from your CCR1009-8G-1S-1S+ to MikroTik support if y...

Since v6.27 it was necessary to reduce max L2MTU size of RB411GL/RB433GL to fix packet loss problem. It resulted in a bad TCP performance in real life applications.

It is possible in RouterOS and CRS switches. So called hybrid VLAN port configuration is described in CRS Port Based VLAN example #2 http://wiki.mikrotik.com/wiki/Manual:CRS_examples#Port_Based_VLAN Here is hybrid port example using RouterOS bridges and VLAN interfaces. The setup is similar to CRS P...

It works from command line interface, but the input field in Winbox is not fixed yet. It will be done soon.

There is no way to configure it with RB250GS.
But just to mention - it is possible with RB260GS/RB260GSP.

Check the interface names on your CRS. Perhaps, there is not an interface called exactly "ether1" on your switch.

There are new CRS switch improvements in RouterOS v6.32rc5 which allow to overcome 1023 MAC learning limit per port. Here are command examples to unset it on CRS ether1 port, similarly they apply to other ports /interface ethernet switch port unset ether1 learn-limit or /interface ethernet switch po...

There are new CRS switch improvements in RouterOS v6.32rc5 which allow to overcome 1023 MAC learning limit per port. Here are command examples to unset it on CRS ether1 port, similarly they apply to other ports /interface ethernet switch port unset ether1 learn-limit or /interface ethernet switch po...

Hello, There are new CRS switch improvements in RouterOS v6.32rc5 which allow to overcome 1023 MAC learning limit per port. Here are command examples to unset it on CRS ether1 port, similarly they apply to other ports /interface ethernet switch port unset ether1 learn-limit or /interface ethernet sw...

TanmoyS, you should recheck "ether1" interface name. Perhaps, it is not correct interface name you have on this switch.

Max supported partition size in RouterOS is 2TB.
You can use this 3TB HDD in RouterOS if you have formatted multiple partitions each smaller than 2TB.

On RB2011 ether3 port you should configure vlan100, vlan200 and vlan300 interfaces. Since you plan to have vlan100 access ports, you will need a bridge which will contain vlan100 interface from ether3 and necessary vlan100 access ports. The vlan100 IP address should be configured on the bridge inter...

Try using an USB hub between RB2011 and APC Back-UPS ES 750 to make it work.

This problem has been fixed in the latest RouterOS v6.31 release candidate versions.

Create bonding interface in RouterOS to have aggregated link and add VLAN sub-interfaces to it. /interface bonding add name=bonding1 slaves=ether2,ether3 /interface vlan add interface=bonding1 name=vlan10 vlan-id=10 add interface=bonding1 name=vlan20 vlan-id=20 The rest configuration should be simil...

interface TX traffic in Torch is still not visible. on the CRS platform at least.

Torch tool does not work on CRS ports which are in a switched port group because packets between these ports are processed by switch-chip instead of CPU of the device. Switch-chip does not support Torch.

Search found 501 matches