Best CRS-354 multi vlan config with access and trunk ports? trying to have: - public vlan 10 on ports 1-4 - lan access

RouterOS General
1

Best CRS-354 multi vlan config with access and trunk ports, i have been running the config for a day now.
This config binds the trunk ports and then lets the per port PVID join the vlan dynamically. I originally was unable o statically set the VLAN untagged to more than 16 ports.
Config requirements:

  • public vlan 10 on ports 1-4
  • lan access on vlan 11 ports 5-46
  • management on vlan 1 port 49
  • esxi trunk all vlans on ports 47-48, sfp+ 3,4, qsfp1 and 2
  • jumbo frames on all 10/40Gbps interfaces
    Next steps
  • qos
  • improved filter for management isolation

/interface bridge
add admin-mac=XX:XX:XX:XX:XX:XX auto-mac=no name=bridge protocol-mode=none vlan-filtering=yes
/interface ethernet
set [ find default-name=qsfpplus1-1 ] l2mtu=9128 mtu=9000
set [ find default-name=qsfpplus1-2 ] l2mtu=9128 mtu=9000
set [ find default-name=qsfpplus1-3 ] l2mtu=9128 mtu=9000
set [ find default-name=qsfpplus1-4 ] l2mtu=9128 mtu=9000
set [ find default-name=qsfpplus2-1 ] l2mtu=9128 mtu=9000
set [ find default-name=qsfpplus2-2 ] l2mtu=9128 mtu=9000
set [ find default-name=qsfpplus2-3 ] l2mtu=9128 mtu=9000
set [ find default-name=qsfpplus2-4 ] l2mtu=9128 mtu=9000
set [ find default-name=sfp-sfpplus1 ] l2mtu=9128 mtu=9000
set [ find default-name=sfp-sfpplus2 ] l2mtu=9128 mtu=9000
set [ find default-name=sfp-sfpplus3 ] l2mtu=9128 mtu=9000
set [ find default-name=sfp-sfpplus4 ] l2mtu=9128 mtu=9000
/interface bridge port
add bridge=bridge interface=ether1 pvid=10
add bridge=bridge interface=ether2 pvid=10
add bridge=bridge interface=ether3 pvid=10
add bridge=bridge interface=ether4 pvid=10
add bridge=bridge interface=ether5 pvid=11
add bridge=bridge interface=ether6 pvid=11
add bridge=bridge interface=ether7 pvid=11
add bridge=bridge interface=ether8 pvid=11
add bridge=bridge interface=ether9 pvid=11
add bridge=bridge interface=ether10 pvid=11
add bridge=bridge interface=ether11 pvid=11
add bridge=bridge interface=ether12 pvid=11
add bridge=bridge interface=ether13 pvid=11
add bridge=bridge interface=ether14 pvid=11
add bridge=bridge interface=ether15 pvid=11
add bridge=bridge interface=ether16 pvid=11
add bridge=bridge interface=ether17 pvid=11
add bridge=bridge interface=ether18 pvid=11
add bridge=bridge interface=ether19 pvid=11
add bridge=bridge interface=ether20 pvid=11
add bridge=bridge interface=ether21 pvid=11
add bridge=bridge interface=ether22 pvid=11
add bridge=bridge interface=ether23 pvid=11
add bridge=bridge interface=ether24 pvid=11
add bridge=bridge interface=ether25 pvid=11
add bridge=bridge interface=ether26 pvid=11
add bridge=bridge interface=ether27 pvid=11
add bridge=bridge interface=ether28 pvid=11
add bridge=bridge interface=ether29 pvid=11
add bridge=bridge interface=ether30 pvid=11
add bridge=bridge interface=ether31 pvid=11
add bridge=bridge interface=ether32 pvid=11
add bridge=bridge interface=ether33 pvid=11
add bridge=bridge interface=ether34 pvid=11
add bridge=bridge interface=ether35 pvid=11
add bridge=bridge interface=ether36 pvid=11
add bridge=bridge interface=ether37 pvid=11
add bridge=bridge interface=ether38 pvid=11
add bridge=bridge interface=ether39 pvid=11
add bridge=bridge interface=ether40 pvid=11
add bridge=bridge interface=ether41 pvid=11
add bridge=bridge interface=ether42 pvid=11
add bridge=bridge interface=ether43 pvid=11
add bridge=bridge interface=ether44 pvid=11
add bridge=bridge interface=ether45 pvid=11
add bridge=bridge interface=ether46 pvid=11
add bridge=bridge interface=ether47 pvid=11
add bridge=bridge interface=ether48 pvid=11
add bridge=bridge interface=ether49
add bridge=bridge interface=qsfpplus1-1 pvid=11
add bridge=bridge interface=qsfpplus1-2 pvid=11
add bridge=bridge interface=qsfpplus1-3 pvid=11
add bridge=bridge interface=qsfpplus1-4 pvid=11
add bridge=bridge interface=qsfpplus2-1 pvid=11
add bridge=bridge interface=qsfpplus2-2 pvid=11
add bridge=bridge interface=qsfpplus2-3 pvid=11
add bridge=bridge interface=qsfpplus2-4 pvid=11
add bridge=bridge interface=sfp-sfpplus1 pvid=11
add bridge=bridge interface=sfp-sfpplus2 pvid=11
add bridge=bridge interface=sfp-sfpplus3 pvid=11
add bridge=bridge interface=sfp-sfpplus4 pvid=11
/interface bridge vlan
add bridge=bridge untagged=ether49 vlan-ids=1
add bridge=bridge tagged=qsfpplus1-1,qsfpplus1-2,qsfpplus1-3,qsfpplus1-4,qsfpplus2-1,qsfpplus2-2,qsfpplus2-3,qsfpplus2-4,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=10
add bridge=bridge tagged=qsfpplus1-1,qsfpplus1-2,qsfpplus1-3,qsfpplus1-4,qsfpplus2-1,qsfpplus2-2,qsfpplus2-3,qsfpplus2-4,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=11-20
add bridge=bridge tagged=qsfpplus1-1,qsfpplus1-2,qsfpplus1-3,qsfpplus1-4,qsfpplus2-1,qsfpplus2-2,qsfpplus2-3,qsfpplus2-4,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=64-95
add bridge=bridge tagged=qsfpplus1-1,qsfpplus1-2,qsfpplus1-3,qsfpplus1-4,qsfpplus2-1,qsfpplus2-2,qsfpplus2-3,qsfpplus2-4,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=164-195
add bridge=bridge tagged=qsfpplus1-1,qsfpplus1-2,qsfpplus1-3,qsfpplus1-4,qsfpplus2-1,qsfpplus2-2,qsfpplus2-3,qsfpplus2-4,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=264-295

2

I have also run into an issue with the current beta (6.47-b37) where the dynamic vlan interface join failed after 6 hours of operation. Currently running stable (6.46.4) and wanted to use the beta for improvements tot he CRS354.

3

Dear,
I need help to create multiple vlan using one command. Please help

4

The configuration above has been working well for me. I did disable RSTP and will update my post

5

Has anyone had an issue with traffic in vlans dropping? The two QSFP+ ports i have in a trunk to ESXi hosts and i seem to drop traffic on certain vlans. I have only been able to recover from the issue with a switch reboot and have tested 6.46.4, 6.47B35 and 7beta5. I have not been able to capture the support file as i dont think the flash has enough space. I have traced the ARP with 200-300 known hosts and switch ports. I have not found any way to isolate the issue yet.