CRS112-8G-4S vLans and CPU

RouterOS General
1

Afternoon,

I have a couple of CRS112-8G-4S connected over 1GB fibre, on both deivces I have 2 HP Routers connected. I have the CR’s setup with vLAN filtering enabled on the Bridge as per below

add bridge=bridge comment=defconf interface=sfp12-Fibre
add bridge=bridge interface=ether3-HP2 pvid=10
add bridge=bridge interface=ether4-HP1 pvid=10
/interface bridge vlan
add bridge=bridge tagged=sfp12-Fibre untagged=ether3-HP2,ether4-HP1 vlan-ids=10
add bridge=bridge tagged=sfp12-Fibre,ether4-HP1,ether3-HP2 vlan-ids=222
add bridge=bridge tagged=sfp12-Fibre,ether4-HP1,ether3-HP2 vlan-ids=21
add bridge=bridge tagged=sfp12-Fibre,ether4-HP1,ether3-HP2 vlan-ids=2001
add bridge=bridge tagged=sfp12-Fibre,ether4-HP1,ether3-HP2 vlan-ids=135

We are seeing the CPU maxing out on the switch and packet loss when under light load. I have been looking on line and have found that harware offload is not enabled and i need to use Switch instead.

If I disabled vLan filtering on the Bridge and remove the vLans and configure as Switch with vLans, the Untag vLANS don’t work. The tagged vLans work ok.

I dont understand why the untags dont work… Help…

Looking on line the switch should be fine for GBS of transfer but I cannot get anywhere close.

Thanks

2

Post config … execute /export hide-sensitive and post the output (inside [__code] [/code] environment).

3

Here you go, sorry not been in the office for a few days

/interface ethernet
set [ find default-name=ether1 ] disabled=yes speed=100Mbps
set [ find default-name=ether2 ] disabled=yes speed=100Mbps
set [ find default-name=ether3 ] name=ether3-LD5-R2 speed=100Mbps
set [ find default-name=ether4 ] name=ether4-LD5-R1 speed=100Mbps
set [ find default-name=ether5 ] disabled=yes speed=100Mbps
set [ find default-name=ether6 ] disabled=yes speed=100Mbps
set [ find default-name=ether7 ] disabled=yes speed=100Mbps
set [ find default-name=ether8 ] speed=100Mbps
set [ find default-name=sfp9 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full disabled=yes
set [ find default-name=sfp10 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full disabled=yes
set [ find default-name=sfp11 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full name=sfp11-SSE
set [ find default-name=sfp12 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full l2mtu=2000 mtu=2000 name=sfp12-Virgin
/interface ethernet switch
set bridge-type=service-vid-used-as-lookup-vid use-cvid-in-one2one-vlan-lookup=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=sfp9
add bridge=bridge comment=defconf interface=sfp10
add bridge=bridge comment=defconf interface=sfp11-SSE
add bridge=bridge comment=defconf interface=sfp12-Virgin
add bridge=bridge comment=defconf interface=ether3-LD5-R2 pvid=10
add bridge=bridge comment=defconf interface=ether4-LD5-R1 pvid=10
/interface ethernet switch egress-vlan-tag
add tagged-ports=sfp12-Virgin vlan-id=10
add tagged-ports=ether3-LD5-R2,ether4-LD5-R1,sfp12-Virgin vlan-id=222
add tagged-ports=ether3-LD5-R2,ether4-LD5-R1,sfp12-Virgin vlan-id=21
add tagged-ports=ether3-LD5-R2,ether4-LD5-R1,sfp12-Virgin vlan-id=2001
add tagged-ports=ether3-LD5-R2,ether4-LD5-R1,sfp12-Virgin vlan-id=135
/interface ethernet switch vlan
add ports=ether3-LD5-R2,ether4-LD5-R1 vlan-id=10
/ip address
add address=172.16.105.1/28 interface=bridge network=172.16.105.0
/system clock
set time-zone-name=Europe/London

4

First of all, get rid of all VLAN config you still have under /interface bridge port. Next you’ll have to properly deal with untagged frames on ingress … some examples can be found in CRS1xx VLAN examples (section 4.1).

5

Thanks, has worked and now I have much healthier looking CPU’s!

Thanks