Hello for all my friends in this mikrotik forum..!
So i have 3 mikrotik switch and i want to connect this switchs with one another with one single network , please advise me on the the best way to establish this connection from this senario, or if some one have a different way it will be a wesome.
The interent cable from ISP is connected to switch 1 via port 1 so:
1-leave all switchs in a default setting and connect each one using patch cords as normal.
2-build a bridge interface between all ports except the connection port i.e (in switch 1 if the network link that comming from ISP is in port 1 so put all the remaining port in a bridge interface then build a src nat rule to port 1 to get internet access, the same thing applied to switch 2 and 3
So is this save..?
Or what..?
Please a dvise me on that and thanks in advance..!
a. provide a network diagram of your setup
b. you dont even state which devices you have.
c. you dont show what you have done so far. Where are the configs of the switches you have done so far
d. Is this for what scenario, what are the requirements??
d. What is your responsibility on the network?
hello Mr Anav …! well you are right . so this is the config
1-i am using CRS326-24G-2S+RM Mikrotik Switchs
2-maybe this picture below clarify my senario
3-so the purpose of this config is just to make all this switchs as one switch so all of them must redistribute the 192.168.30.1/23 ip range with out any loop issue
if you want use those switch only as switch, and all is controlled from main router,
after you check that you are able to use winbox with MAC address,
install routeros 6.48.6 (long term),
after reboot update firmware on system/routerboard and reboot
at this point wipe completely the device,
with system / reset configuration, selecting only “no default configuration”
at reboot the device is perfectly “blank”.
paste this on terminal, remember to set the right IP, at the end, on last line, for each switch:
/int bridge
remove [find]
add name=bri-lan protocol-mode=none
/int bridge port
remove [find]
:foreach interfacciaTest in=[/int ethernet find where name!=“ether1”] do={add bridge=bri-lan interface=$interfacciaTest}
/int bridge
set bri-lan admin-mac=[/int ethernet get [/int bri port get ([find]->0) interface] mac-address] auto-mac=no
/ip service
set api disabled=yes
set api-ssl disabled=yes
set ftp disabled=yes
set ssh disabled=yes
set telnet disabled=yes
set winbox disabled=no port=8291
set www disabled=no port=80
set www-ssl disabled=yes
/ip dns set allow-remote-requests=no servers=192.168.30.1
/ip route
remove [find where !dynamic]
add distance=1 gateway=192.168.30.1
/ip address
remove [find]
add interface=bri-lan address=192.168.31.201/23
at this point secure your router selecting the right username and password on system / users
ask @Anav for firewall rules and other practices to protect router admin access
you can link the switch on any port, (except ether1 reserved for MGMT) but if you want follow some schema,
put ether2 on previous switch, or on the router if is the first switch, and last ether23 port to the next switch ether2
leave alone ether1 for MGMT and try to leave unused the ether24 inside the rack for “LAN Access” for test purposes if you need a free port to connect your laptop for do some test.
Probably you already know that, but if you do not know, the “console” port is not one ethernet port for manage the device,
but is a “cisco style” serial port that need dedicated cable for work as serial terminal.
Hello Mr rextended..!
So i apply your rules and now my system works normal, depending on your config, so very thanksful..!. However, i encoumter - (not a problem) - but it is just a small issue in route table for switch-3 and switch-4 and really want ro understand why such thing happen.
You can see what i encounter in my new topic in this forum.
For the security issue i apply some rules in the main router from the mikrorik default configuration that comes with the router default settings.
