I am pretty new to Mikrotik switches, and after reading some documents on Wiki, I am still wondering - is there a way to configure Management access to a CRS1XX switch through UNTAGGED Vlan on Hybrid port? For example: Switch’s IP is 192.168.88.10/24 and it should be accessible through Untagged (native) Vlan on port with some other Tagged VLANS on the same port.
Possible? If so, how to configure the management access on a switch?
Any help is very appreciated!
Post current config (in terminal window execute /export hide-sensitive file=anynameyouwish, fetch resulting file, open it with text editor, redact any remaining sensitive data and copy-ćpaste it inside [__code] [/code] environment - the symbol above post editor).
Well, finally, I came up with the following config. that seems to be working:
# oct/19/2023 10:50:10 by RouterOS 6.49.10
#
# model = CRS112-8P-4S
/interface bridge
add name=bridge priority=0x4000
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge interface=ether1
add bridge=bridge interface=ether2
add bridge=bridge interface=ether7
add bridge=bridge interface=ether8
/interface ethernet switch egress-vlan-tag
add tagged-ports=ether1,ether2,ether8 vlan-id=41
add tagged-ports=ether1,ether2 vlan-id=50
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=0 ports=ether1,ether2,switch1-cpu
add customer-vid=0 new-customer-vid=50 ports=ether7,ether8
/interface ethernet switch vlan
add ports=switch1-cpu,ether1,ether2,ether7,ether8 vlan-id=0
add ports=ether1,ether2,ether7,ether8 vlan-id=50
add ports=ether1,ether2,ether7,ether8 vlan-id=41
/ip address
add address=192.168.88.104/24 interface=bridge network=192.168.88.0
/ip dns
set servers=192.168.88.1
/ip route
add distance=1 gateway=192.168.88.1
The only thing I can’t add, is the HW offloading on ports:
/interface bridge port
add bridge=bridge interface=ether1
but it maybe depends on a switch model?
Thanks
Ability to HW offload does depend on switch model and CRS1xx doesn’t support it. So you should configure your device according to these examples. You actually mostly did it.
Mostly? Is there any miss-configuration in my config that can overload switch’s CPU? and yes, I have read CSR1XX wiki
Thank You!
IMO switching should entirely be done by switch chip according to your config, so this is fine. I’d just use another VLAN ID for management of the switch, personally I have always bad feeling mixing untagged traffic with tagged in inner parts of ROS.
Yes, actually, I am also not happy with it.. but in that specific case I have to mix untagged and tagged traffic.