Configuration as a SWITCH CRS226-24G-2S+

Dear all, good morning i have a little issue and i will need your opinion on this one “if as always are available”. I just bought a CRS226-24G-2S+ and I’m using temporary as main switch connecting 7 switches “24 ports each” on the mikrotik. Nothing special on the configuration any suggestions will be appreciated.


Cheers mates



# mar/21/2016 13:28:13 by RouterOS 6.34.3
# software id = 2RHD-T8TP
#
/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether18 ] name=ETHERNET_18_210_A
set [ find default-name=ether19 ] name=ETHERNET_19_99_A
set [ find default-name=ether2 ] master-port=ether1
/interface bonding
add mode=802.3ad name=247/THECUS_P_14/15 slaves=ether14,ether15 \
    transmit-hash-policy=layer-2-and-3
/tool user-manager customer
set admin access=\
    own-routers,own-users,own-profiles,own-limits,config-payment-gw
/interface bridge port
add bridge=bridge1 interface=sfp-sfpplus1
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether7
add bridge=bridge1 interface=ether10
add bridge=bridge1 interface=ether11
add bridge=bridge1 interface=ether12
add bridge=bridge1 interface=ether13
add bridge=bridge1 interface=ether16
add bridge=bridge1 interface=ether17
add bridge=bridge1 interface=ETHERNET_18_210_A
add bridge=bridge1 interface=ETHERNET_19_99_A
add bridge=bridge1 interface=ether20
add bridge=bridge1 interface=ether21
add bridge=bridge1 interface=ether22
add bridge=bridge1 interface=ether23
add bridge=bridge1 interface=ether24
add bridge=bridge1 interface=sfpplus2
add bridge=bridge1 interface=247/THECUS_P_14/15
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether6
add bridge=bridge1 interface=ether8
add bridge=bridge1 interface=ether9
/ip address
add address=192.168.1.88/20 interface=ether2 network=192.168.0.0
/ip dhcp-client
add dhcp-options=hostname,clientid interface=ether1
add dhcp-options=hostname,clientid interface=bridge1
/ip dns
set allow-remote-requests=yes servers=192.168.1.240,8.8.8.8
/ip route
add distance=1 gateway=192.168.1.253
/lcd
set default-screen=informative-slideshow
/system clock
set time-zone-name=Europe/Athens
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=yes display-time=5s
set resources disabled=yes display-time=5s
set uptime disabled=yes display-time=5s
set packets disabled=yes display-time=5s
set bits disabled=yes display-time=5s
set version disabled=yes display-time=5s
set identity disabled=yes display-time=5s
set bridge1 disabled=yes display-time=5s
set ether1 disabled=yes display-time=5s
set ether2 disabled=yes display-time=5s
set ether3 disabled=yes display-time=5s
set ether4 disabled=yes display-time=5s
set ether5 disabled=yes display-time=5s
set ether6 disabled=yes display-time=5s
set ether7 disabled=yes display-time=5s
set ether8 disabled=yes display-time=5s
set ether9 disabled=yes display-time=5s
set ether10 disabled=yes display-time=5s
set ether11 disabled=yes display-time=5s
set ether21 disabled=yes display-time=5s
set ether22 disabled=yes display-time=5s
set ether23 disabled=yes display-time=5s
set ether24 disabled=yes display-time=5s
set sfp-sfpplus1 disabled=yes display-time=5s
set sfpplus2 disabled=yes display-time=5s
set ETHERNET_18_210_A disabled=yes display-time=5s
set ETHERNET_19_99_A disabled=yes display-time=5s
set ether20 disabled=yes display-time=5s
set ether12 disabled=yes display-time=5s
set ether13 disabled=yes display-time=5s
set ether14 disabled=yes display-time=5s
set "247/THECUS_P_14/15" disabled=yes display-time=5s
set ether17 disabled=yes display-time=5s
set ether15 disabled=yes display-time=5s
set ether16 disabled=yes display-time=5s
/system ntp client
set enabled=yes primary-ntp=194.177.210.54 secondary-ntp=195.154.10.106
/system ntp server
set manycast=no
/tool graphing interface
add
/tool graphing queue
add
/tool graphing resource
add
/tool user-manager database
set db-path=user-manager

Forget about bridging. The CRS is a wire-speed hardware switch. Bridges run in software, and the CPU on the CRS is really weak. Set all ports as slave to a single master port, and do your VLAN configuration from the switch chip menu.

mpreissner is absolutely right.

Changing from bridging to switch chip configuration would save lots of CPU resources on CCR226 and will ensure the same Layer2 forwarding.

/interface ethernet
set [ find default-name=ether2 ] master-port=ether1
set [ find default-name=ether3 ] master-port=ether1
set [ find default-name=ether4 ] master-port=ether1
set [ find default-name=ether5 ] master-port=ether1
set [ find default-name=ether6 ] master-port=ether1
set [ find default-name=ether7 ] master-port=ether1
set [ find default-name=ether8 ] master-port=ether1
...

Also the link aggregation from switch chip features would allow achieving higher speeds through CRS226.
http://wiki.mikrotik.com/wiki/Manual:CRS_examples#Trunking

/interface ethernet switch trunk
add name=trunk1 member-ports=ether14,ether15

Thats the new configuration. Any tips with the VLAN?


And thanks again


# mar/21/2016 14:39:15 by RouterOS 6.34.3
# software id = 2RHD-T8TP
#
/interface ethernet
set [ find default-name=ether2 ] master-port=ether1
set [ find default-name=ether3 ] master-port=ether1
set [ find default-name=ether4 ] master-port=ether1
set [ find default-name=ether5 ] master-port=ether1
set [ find default-name=ether6 ] master-port=ether1
set [ find default-name=ether7 ] master-port=ether1
set [ find default-name=ether8 ] master-port=ether1
set [ find default-name=ether9 ] master-port=ether1
set [ find default-name=ether10 ] master-port=ether1
set [ find default-name=ether11 ] master-port=ether1
set [ find default-name=ether12 ] master-port=ether1
set [ find default-name=ether13 ] master-port=ether1
set [ find default-name=ether14 ] master-port=ether1
set [ find default-name=ether15 ] master-port=ether1
set [ find default-name=ether16 ] master-port=ether1
set [ find default-name=ether17 ] master-port=ether1
set [ find default-name=ether18 ] master-port=ether1
set [ find default-name=ether19 ] master-port=ether1
set [ find default-name=ether20 ] master-port=ether1
set [ find default-name=ether21 ] master-port=ether1
set [ find default-name=ether22 ] master-port=ether1
set [ find default-name=ether23 ] master-port=ether1
set [ find default-name=ether24 ] master-port=ether1
set [ find default-name=sfp-sfpplus1 ] master-port=ether1
set [ find default-name=sfpplus2 ] master-port=ether1
/interface ethernet switch trunk
add member-ports=ether3,ether4 name=247_Thecus
add member-ports=ether5,ether6 name=201_Switch
add member-ports=ether7,ether8 name=115_Switch
add member-ports=ether9,ether10 name=217_Switch
/tool user-manager customer
set admin access=\
    own-routers,own-users,own-profiles,own-limits,config-payment-gw
/ip address
add address=192.168.1.88/20 interface=ether1 network=192.168.0.0
/ip dhcp-client
add dhcp-options=hostname,clientid interface=ether1
add dhcp-options=hostname,clientid
/ip dns
set allow-remote-requests=yes servers=192.168.1.240,8.8.8.8
/ip route
add distance=1 gateway=192.168.1.253
/lcd
set default-screen=informative-slideshow
/system clock
set time-zone-name=Europe/Athens
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=yes display-time=5s
set resources disabled=yes display-time=5s
set uptime disabled=yes display-time=5s
set packets disabled=yes display-time=5s
set bits disabled=yes display-time=5s
set version disabled=yes display-time=5s
set identity disabled=yes display-time=5s
set ether1 disabled=yes display-time=5s
set ether2 disabled=yes display-time=5s
set ether3 disabled=yes display-time=5s
set ether4 disabled=yes display-time=5s
set ether5 disabled=yes display-time=5s
set ether6 disabled=yes display-time=5s
set ether7 disabled=yes display-time=5s
set ether8 disabled=yes display-time=5s
set ether9 disabled=yes display-time=5s
set ether10 disabled=yes display-time=5s
set ether11 disabled=yes display-time=5s
set ether21 disabled=yes display-time=5s
set ether22 disabled=yes display-time=5s
set ether23 disabled=yes display-time=5s
set ether24 disabled=yes display-time=5s
set sfp-sfpplus1 disabled=yes display-time=5s
set sfpplus2 disabled=yes display-time=5s
set ether18 disabled=yes display-time=5s
set ether19 disabled=yes display-time=5s
set ether20 disabled=yes display-time=5s
set ether12 disabled=yes display-time=5s
set ether13 disabled=yes display-time=5s
set ether14 disabled=yes display-time=5s
set ether17 disabled=yes display-time=5s
set ether15 disabled=yes display-time=5s
set ether16 disabled=yes display-time=5s
/system ntp client
set enabled=yes primary-ntp=194.177.210.54 secondary-ntp=195.154.10.106
/system ntp server
set manycast=no
/tool graphing interface
add
/tool graphing queue
add
/tool graphing resource
add
/tool user-manager database
set db-path=user-manager

For VLAN config, this is highly dependent upon your environment. Everything will be configured through the /interface ethernet switch menu. To enable a particular VLAN ID on a port:

/interface ethernet switch vlan
add ports=enter,ports,here vlan-id=xxx learn=yes

To make an access port:

/interface ethernet switch ingress-vlan-translation
add ports=enter,ports,here customer-vlan-format=untagged-or-tagged customer-vid=0 new-customer-vid=xxx sa-learning=yes

To make a VLAN trunk:

/interface ethernet switch egress-vlan-tag
add tagged-ports=enter,ports,here vlan-id=xxx

You can also make hybrid ports, if necessary, where you add egress tagging to an access port. This causes untagged traffic to be tagged using ingress-translation, but also allows tagged traffic. This is useful for wireless access points (like Ubiquiti’s) or edge ports that support VoIP phones and desktops on separate VLANs.

First of all thanks for taking the time to respond to my problem, i have tried it. It worked. So as the other suggestion, bu I’m trying to understand how to bond two interfaces to work as one “not to work as a load balance”

If you use port trunking as suggested by Becs, you can reach up to the aggregate of the number of links in bandwidth. When you trunk two ports together, they automatically do load-balancing, but if one of the links fails, all traffic reverts to the one remaining active link. You’re still limited to 1 Gbps per stream, though, so it takes multiple streams to exceed the 1 Gbps mark.