Hi, i’m trying to configure a CRS125 with hybrid mode like the example https://wiki.mikrotik.com/wiki/Manual:CRS_examples (Example 2) I cannot figured out why the access port on vlan 10 doesn’t ping their default gw (10.1) but if i tag the vlan 20 i’m able to ping its default gw (20.1).
The RouterOS Version is v6.41RC44
Attached you can find the export of my config:
/interface ethernet
set [ find default-name=sfp-sfpplus1 ] name=sfp1
set [ find default-name=sfpplus2 ] name=sfp2
/interface bridge
add name=bridge_switch igmp-snooping=no protocol-mode=none
/interface bridge port
add bridge=bridge_switch interface=sfp1 hw=yes
add bridge=bridge_switch interface=sfp2 hw=yes
add bridge=bridge_switch interface=ether2 hw=yes
add bridge=bridge_switch interface=ether3 hw=yes
add bridge=bridge_switch interface=ether4 hw=yes
add bridge=bridge_switch interface=ether5 hw=yes
add bridge=bridge_switch interface=ether6 hw=yes
add bridge=bridge_switch interface=ether7 hw=yes
add bridge=bridge_switch interface=ether8 hw=yes
/interface vlan
add interface=bridge_switch name=vlan10 vlan-id=10
add interface=bridge_switch name=vlan20 vlan-id=20
add interface=bridge_switch name=vlan30 vlan-id=30
/ip address
add address=192.168.10.1/24 interface=vlan10 network=192.168.10.0
add address=192.168.20.1/24 interface=vlan20 network=192.168.20.0
add address=192.168.30.1/24 interface=vlan30 network=192.168.30.0
/ip pool
add name=pool_vlan10 ranges=192.168.10.2-192.168.10.254
add name=pool_vlan20 ranges=192.168.20.2-192.168.20.254
add name=pool_vlan30 ranges=192.168.30.2-192.168.30.254
/ip dhcp-server
add address-pool=pool_vlan10 disabled=no interface=vlan10 name=dhcp_vlan10
add address-pool=pool_vlan20 disabled=no interface=vlan20 name=dhcp_vlan20
add address-pool=pool_vlan30 disabled=no interface=vlan30 name=dhcp_vlan30
/ip dhcp-server network
add address=192.168.10.0/24 dns-server=192.168.10.1 gateway=192.168.10.1
add address=192.168.20.0/24 dns-server=192.168.20.1 gateway=192.168.20.1
add address=192.168.30.0/24 dns-server=192.168.30.1 gateway=192.168.30.1
/interface ethernet switch ingress-vlan-translation
add ports=ether2 customer-vid=0 new-customer-vid=10 sa-learning=yes
add ports=ether3 customer-vid=0 new-customer-vid=10 sa-learning=yes
add ports=ether4 customer-vid=0 new-customer-vid=10 sa-learning=yes
add ports=ether5 customer-vid=0 new-customer-vid=10 sa-learning=yes
add ports=ether6 customer-vid=0 new-customer-vid=10 sa-learning=yes
add ports=ether7 customer-vid=0 new-customer-vid=10 sa-learning=yes
add ports=ether8 customer-vid=0 new-customer-vid=10 sa-learning=yes
add ports=sfp1 customer-vid=0 new-customer-vid=10 sa-learning=yes
add ports=sfp2 customer-vid=0 new-customer-vid=10 sa-learning=yes
/interface ethernet switch egress-vlan-tag
add tagged-ports=switch1-cpu,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp1,sfp2 vlan-id=10
add tagged-ports=switch1-cpu,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp1,sfp2 vlan-id=20
add tagged-ports=switch1-cpu,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp1,sfp2 vlan-id=30
/interface ethernet switch vlan
add ports=switch1-cpu,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp1,sfp2 vlan-id=10 learn=yes
add ports=switch1-cpu,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp1,sfp2 vlan-id=20 learn=yes
add ports=switch1-cpu,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp1,sfp2 vlan-id=30 learn=yes
/interface ethernet switch
set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports=sfp1,sfp2,switch1-cpu,ether2,ether3,ether4,ether5,ether6,ether7,ether8
Thanks