CRS 326/328/317 two bridges HW

[xt22]

Hello,

I need to separate port groups in some of my switches, for example 1-16 network1, 17-24 network 2. Due to the concept of the switch, I can’t create two bridges with HW offloading (I can do that on my CRS125 though).

I can replace the last 8 ports with $30 cisco/linksys 8p switch running at wire speed, but I want to do it on my Mikrotik switches.

Is this the correct way? https://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features#Port_isolation
Do the ports then work at ± wire speed without burning the cpu? Or is it better to use some kind of VLAN, or something totally different?

thanks

[mkx]

Port isolation is one possibility, segmentation using different VLANs (with all ports being untagged access so no VLANs outside the switch) is another one.

General rule: whatever you configure under /interface ethernet it’s done by switch chip, not by CPU. OTOH whatever you configure under /interface bridge it’s done by CPU unless it’s offloaded to hardware (CRS3xx offloads many things, other RBs only a few).

[xt22]

thank you - that’s valuable information.

[machack]

Port isolation is one possibility, segmentation using different VLANs (with all ports being untagged access so no VLANs outside the switch) is another one.

General rule: whatever you configure under /interface ethernet it’s done by switch chip, not by CPU. OTOH whatever you configure under /interface bridge it’s done by CPU unless it’s offloaded to hardware (CRS3xx offloads many things, other RBs only a few).

Really Thanks for the info!