Hi all
Currently running my CRS125-24G-1S on v 6.40.8 hotfix, but would like to upgrade to latest.
However, I would like to know how this will affect my current vlan setup with the new bridging and vlan methods?
Can someone help out, if the upgrade will affect my setup negatively?
Semi anonymized config:
# jun/06/2018 13:53:26 by RouterOS 6.40.8
# software id = 3QKT-NXJM
#
# model = CRS125-24G-1S
# serial number =
/interface ethernet
set [ find default-name=ether1 ] comment="trusted - "
set [ find default-name=ether2 ] comment="trusted - " master-port=\
ether1
set [ find default-name=ether3 ] comment="trusted - " master-port=\
ether1
set [ find default-name=ether4 ] comment="trusted - " master-port=\
ether1
set [ find default-name=ether5 ] comment="trusted - \r\
\nEth0/A" master-port=ether1
set [ find default-name=ether6 ] comment="trusted - eth0" master-port=\
ether1
set [ find default-name=ether7 ] comment=Mirror0
set [ find default-name=ether8 ] comment=Mirror1
set [ find default-name=ether9 ] comment=trusted master-port=ether1
set [ find default-name=ether10 ] comment="trusted - " \
master-port=ether1
set [ find default-name=ether11 ] comment="trusted - " \
master-port=ether1
set [ find default-name=ether12 ] comment="untrusted_clients - " \
master-port=ether1
set [ find default-name=ether13 ] comment=untrusted_clients master-port=\
ether1
set [ find default-name=ether14 ] comment="untrusted_wifi - " \
master-port=ether1
set [ find default-name=ether15 ] comment=untrusted_wifi master-port=ether1
set [ find default-name=ether16 ] comment=untrusted_dmz master-port=ether1
set [ find default-name=ether17 ] comment="untrusted_dmz - \r\
\nEth0/B" master-port=ether1
set [ find default-name=ether18 ] comment="untrusted_ubnt - " \
master-port=ether1
set [ find default-name=ether19 ] comment="trusted_ubnt - " \
master-port=ether1
set [ find default-name=ether20 ] comment="isolated_ISP - "
set [ find default-name=ether21 ] comment="isolated_ISP - eth2/a" \
master-port=ether20
set [ find default-name=ether22 ] comment="isolated_ISP - " master-port=\
ether20
set [ find default-name=ether23 ] comment=mirror0
set [ find default-name=ether24 ] comment=\
"mirror1 - sniff lan - Eth1/A"
set [ find default-name=sfp1 ] comment="not used"
/ip neighbor discovery
set ether1 discover=no
set ether2 discover=no
set ether3 discover=no
set ether4 discover=no
set ether5 discover=no
set ether6 discover=no
set ether7 discover=no
set ether8 discover=no
set ether9 discover=no
set ether10 discover=no
set ether11 discover=no
set ether12 discover=no
set ether13 discover=no
set ether14 discover=no
set ether15 discover=no
set ether16 discover=no
set ether17 discover=no
set ether18 discover=no
set ether19 discover=no
set ether20 discover=no
set ether21 discover=no
set ether22 discover=no
set ether23 discover=no
set ether24 discover=no
set sfp1 discover=no
/interface vlan
add comment=mgmt interface=ether1 name=vlan1 vlan-id=1
/ip neighbor discovery
set vlan1 discover=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0 read-access=no
add addresses=10.0.0.0/24 name=na
/system logging action
add name=1 remote=10.0.0.42 syslog-facility=syslog target=remote
/ip neighbor discovery settings
set default=no
/interface ethernet switch
set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports="ether1,ether2,eth\
er3,ether4,ether5,ether6,ether7,ether9,ether10,ether11,ether12,ether13,eth\
er14,ether15,ether16,ether17,ether18,ether19" egress-mirror0=ether7 \
egress-mirror1=ether8 fdb-uses=mirror1 forward-unknown-vlan=no \
ingress-mirror0=ether7 ingress-mirror1=ether8 \
mirror-egress-if-ingress-mirrored=yes vlan-uses=mirror1
/interface ethernet switch egress-vlan-tag
add tagged-ports=switch1-cpu vlan-id=1
add tagged-ports=ether12,ether18 vlan-id=40
add tagged-ports=ether11,ether12,ether18 vlan-id=60
add tagged-ports=ether16,ether17,ether18 vlan-id=100
add tagged-ports=ether16,ether17,ether18 vlan-id=110
add tagged-ports=ether12,ether18 vlan-id=70
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 customer-vlan-format=untagged-or-tagged new-customer-vid=1 \
ports="ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether9,ether10,eth\
er11,ether12,ether19"
add customer-vid=0 customer-vlan-format=untagged-or-tagged new-customer-vid=\
40 ports=ether13
add customer-vid=0 customer-vlan-format=untagged-or-tagged new-customer-vid=\
60 ports=ether14,ether15
/interface ethernet switch port
set 17 egress-mirror-to=mirror1 ingress-mirror-to=mirror1
set 18 egress-mirror-to=mirror1 ingress-mirror-to=mirror1
/interface ethernet switch vlan
add ports="ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether9,ether10,eth\
er11,ether12,ether19,switch1-cpu" vlan-id=1
add ports=ether12,ether13,ether18 vlan-id=40
add ports=ether11,ether12,ether14,ether15,ether18 vlan-id=60
add ports=ether16,ether17,ether18 vlan-id=100
add ports=ether16,ether17,ether18 vlan-id=110
add ports=ether12,ether18 vlan-id=70
/ip address
add address=10.0.0.6/24 interface=vlan1 network=10.0.0.0
/ip dns
set servers=10.0.0.1
/ip route
add distance=1 gateway=10.0.0.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip traffic-flow
set enabled=yes
/ip traffic-flow target
add disabled=yes dst-address=10.0.0.50 version=ipfix
add dst-address=10.0.0.64 port=555
/snmp
set contact=Switch enabled=yes location=hardware trap-community=na
/system clock
set time-zone-name=Europe/Copenhagen
/system identity
set name=mikrotik01
/system logging
add action=1 topics=!snmp,!ntp,!ssh
add topics=interface
/system ntp client
set enabled=yes primary-ntp=10.0.0.1 secondary-ntp=10.0.0.1
/system package update
set channel=bugfix
/tool bandwidth-server
set enabled=no
/tool graphing
set store-every=hour
/tool mac-server
set [ find default=yes ] disabled=yes
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
/tool mac-server ping
set enabled=no
/tool sniffer
set filter-interface=ether19 filter-mac-address=\
00:00:00:00:00:00/00:00:00:00:00:00