Hello, I have a CRS354 switch with several vlan (1,10,20,30). This switch is connected to CCR2004-16G-2S thought a trunk on the SFP+ port. All the port are on a bridge with vlan filtering. The goal, is to perform intervlan routing with the CCR. The CCR has only two SFP+, one to the WAN on vlan 1…

I may found why the device did not respond to ping : https://www.getdante.com/support/faq/dante-device-enters-failsafe-mode-due-to-vlan-configuration/ Some Dante devices can enter Failsafe mode if they receive traffic from more than one subnet. I was furious when I read this …

I changed the configuration on the CCR in order to not have both SFP+ in the same bridge. Thus, I removed the wan interface from the bridge and changed nat rules. I don’t have any drop on the CCR. Drop packets are on the CRS which only perform vlan filtering.

[image] fouinix: vlan (1,10,20,30). Maybe related, maybe not, but JFYI, the Rules of Mikrotik Club: [image] The twelve Rules of Mikrotik Club Beginner Basics Preamble and disclaimer: The following is a set of Rules that are intended as advice useful to…

I understand, but we used the CRS has a basic switch without vlan filtering. Then, we had to create vlan. However, we use unifi WIFI ap. I read they discourage using another vlan for administration. That’s why I kept vlan 1 for these devices.

I forgot to mention both devices are up-to-date with latest vesion 7.20.4

Which also may, or may not, be an aggravating factor (that would be Rule #10). 7.20.4 (actually 7.20.x) is - generally speaking - a troublesome version, there have been lots of reports of issues with it, even if it may be unrelated, if I were you I would downgrade to 7.19.4 or 7.19.6.

Thanks, I will consider this option, and thanks for your link. I disabled “detect internet”. I also noticed something weird. In Winbox, I have many drop packets on several interfaces. But I can’t see this counter from the terminal. Is it easy to downgrade version, I am afraid I will lose configura…

[image] fouinix: Is it easy to downgrade version, I am afraid I will lose configuration? You should anyway make an export before changing RoS version (and also a backup, better be safe than sorry) but downgrading should be as safe as upgrading (at least with near enough versions): D…

I understand I can downgrade to factory, then apply update before 7.20 ? I will try, thanks

No, you can downgrade directly to any version as long as it is the same or more recent than factory version. You can choose between 7.19.4 or 7.19.6 (both relatively recent and both known to be usually working) upload the .npk(s) for the appropriate platform of that chosen version and downgrade.

Thanks, I will try this approach. I will also repost cleaned configuration. I tried to identify any misconfiguration from Layer2 misconfiguration - RouterOS - MikroTik Documentation But I did not notice any error. My main issue, is I can ony ping 192.168.1.250 from vlan1. All equipements from all…

CCR2004-16G-2S and CRS354-48P-4S+2Q+, packet drop and weird behavior

RouterOS Beginner Basics

jaclaz November 21, 2025, 4:39pm 3

Maybe related, maybe not, but JFYI, the Rules of Mikrotik Club: