Hello everyone. Just installed CRS112-8P-4S-IN and found that I can’t use port isolation without performance issues. I use switch as L2, all ports in one bridge with HW offloading. I use switch for connecting a few CAP AX to RB5009. Because I want isolate all clients from each other I enabled IP isolation in Capsman config, but clients still can see clients from another Caps through L2 switch.
I started from enabling horizon on all ports except uplink. It works but speed drops from 800mbit to 300mbit and CPU loading is up to 95%. HW offloading still enabled, but looks like doesn’t work. Then I decided to use SwOS where I can isolate ports in easiest way, but there is just RouterOS on this switch. After that tried to enable port isolation in menu Switch - there are just some dynamic settings which I can’t change.
After dialog with AI I found that I cant resolve this issue on CRS1*** series. I can try vlans for each port, but there is no guarantee it wouldnt affects on CPU. And vlans will make my config more difficult.
Can someone approve that CRS112 is just a wrong choice for my task?