Leading with my questions:
- Do I have all possible hardware offloading enabled, and how to I verify this?
- Will EoIP be a bottleneck for throughput, or will I run into any other issues with EoIP in the future?
I am planning to deploy three CCR2116-12G-4S+ routers as CPE devices in a Service Provider network.
Device-1 = Main Campus
Device-2 = Remote Site A
Device-3 = Remote Site B
Both of the remote sites need layer2 connectivity back to the Main Campus.
I plan to do this with EoIP.
Tunnel-ID 3001 = SiteA EoIP
Tunnel-ID 3002 = SiteB EoIP
The Main Campus and Remote Site A need direct Internet access additionally.
Which will be delivered to this sites via a standard 802.1q VLAN tag.
VLAN Tag 300 = Main Campus Internet Access
While I am a service provider, we will have a third-party last mile service provider in the mix that is fairly inflexible in what they offer us, so I have to make some design decision based on what they are providing.
I believe I have the tested in a lab.
My concern right now is throughput and how, and if, I can enable hardware offload for any of this.
Based on my research, I shouldn't be able to do hardware offload for the EoIP services.
But I should be able to do it for the 802.1q vlan tagged Internet service.
Is my understanding correct?
If so, what can I look at to make sure I am doing all I can to provide a much throughput as possible and offloading as much as I can to hardware?
Config:
# 2025-09-29 10:10:44 by RouterOS 7.19.6
# software id = KB5W-FK8N
#
# model = CCR2116-12G-4S+
# serial number = <REMOVED>
/interface bridge
add name=l2_campus_to_siteA
add name=l2_campus_to_siteB
add ingress-filtering=no name=l3_main_campus pvid=300 vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] l2mtu=9100 mtu=9100
set [ find default-name=ether2 ] l2mtu=9100 mtu=9100
set [ find default-name=ether3 ] l2mtu=9100 mtu=9100
set [ find default-name=sfp-sfpplus1 ] l2mtu=9100 mtu=9100
set [ find default-name=sfp-sfpplus4 ] l2mtu=9100 mtu=9100
/interface eoip
add local-address=207.xx.xx.1 name=eoip-tunnel1 remote-address=207.xx.xx.3 tunnel-id=3001
add local-address=207.xx.xx.1 name=eoip-tunnel2 remote-address=207.xx.xx.5 tunnel-id=3002
/interface vlan
add interface=sfp-sfpplus1 mtu=9096 name=Internet_facing_interface vlan-id=3000
/interface bridge port
add bridge=l2_campus_to_siteA interface=ether2 tag-stacking=yes
add bridge=l2_campus_to_siteA interface=eoip-tunnel1 tag-stacking=yes
add bridge=l2_campus_to_siteB interface=ether3 tag-stacking=yes
add bridge=l2_campus_to_siteB interface=eoip-tunnel2 tag-stacking=yes
add bridge=l3_main_campus interface=ether1 pvid=300 tag-stacking=yes
add bridge=l3_main_campus interface=sfp-sfpplus1
add bridge=l3_main_campus interface=sfp-sfpplus4 pvid=300 tag-stacking=yes
/interface ethernet switch l3hw-settings
set autorestart=yes ipv6-hw=yes
/interface bridge vlan
add bridge=l3_main_campus tagged=sfp-sfpplus1 untagged=ether1,sfp-sfpplus4 vlan-ids=300
/interface ethernet switch
set 0 l3-hw-offloading=yes
/ip address
add address=207.xx.xx.1/31 interface=Internet_facing_interface network=207.xx.xx.0
/ip firewall filter
<REMOVED>
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=207.xx.xx.0 routing-table=main```