Hi,
(Internet) <—> [MT Router] <–fiber–> [CRS125] ← two separate IP subnets
I want the CRS to route two separate IP subnets (one private and one public) and I need to filter the traffic (firewall) separately.
Basically, I want to use the SFP port as the uplink and break the unit into two separate switches…basically, I need to turn the CRS into a 3-port router and two 12-port dumb switches.
So far, I have created two master ports (ether1 and ether13) with two sets of slave ports:
/interface ethernet
set 0 name=ether1-master-local
set 12 name=ether13-master-local
set 1,2,3,4,5,6,7,8,9,10,11 master-port=ether1-master-local
set 13,14,15,16,17,18,19,20,21,22,23 master-port=ether13-master-local
Then I assigned IP addresses to the SFP (gateway) port and the two master ports and configured routing.
Is this the correct way to go? Or, is there a better way?
I’ve tried reading all the docs and forum posts I can find, but most of what I found is for more complicated stuff…
Thanks in advance,
G
p.s. I have disabled all bridging, all firewall and all NAT.