/system routerboard print
routerboard: yes
model: CRS226-24G-2S+
serial-number: 50D404F4E131
current-firmware: 3.19
upgrade-firmware: 3.22
Hello!
I’ve been trying to solve a very simple task - to take one or two tagged vlans (66 and 101) from bonding interface (eth1-eth4) and put them to interface sfp-1, also tagged.
So, based on http://wiki.mikrotik.com/wiki/Manual:CRS_examples I configured the switch (configuration in the end of the question).
But for some reason the switch created two ingress translation rules by itself
[admin@MikroTik] > /interface ethernet switch ingress-vlan-translation print
Flags: X - disabled, I - invalid, D - dynamic
0 D ports=eth2,eth3,eth4,eth24 service-vlan-format=any customer-vlan-format=any new-customer-vid=4095 pcp-propagation=no sa-learning=no
1 D ports=eth1,sfp-2,sfp-1 service-vlan-format=any customer-vlan-format=any new-customer-vid=4091 pcp-propagation=no sa-learning=yes
And these rules put all the traffic from interfaces to special vlans 4091 and 4095.
They cannot be deleted or changed because they are dynamic.
And after that I see MAC addresses from 66 and 101 vlans in FDB with 4091 tag.
So, could you help me fix this and put the traffic into proper VLANs?
Full configuration file below:
# jan/25/1970 03:58:33 by RouterOS 6.27
# software id = 8CWY-W1KW
#
/interface ethernet
set [ find default-name=ether1 ] name=eth1
set [ find default-name=ether2 ] name=eth2
set [ find default-name=ether3 ] name=eth3
set [ find default-name=ether4 ] name=eth4
set [ find default-name=ether5 ] name=eth5
set [ find default-name=ether6 ] master-port=eth5 name=eth6
set [ find default-name=ether7 ] master-port=eth5 name=eth7
set [ find default-name=ether8 ] master-port=eth5 name=eth8
set [ find default-name=ether9 ] master-port=eth5 name=eth9
set [ find default-name=ether10 ] master-port=eth5 name=eth10
set [ find default-name=ether11 ] master-port=eth5 name=eth11
set [ find default-name=ether12 ] master-port=eth5 name=eth12
set [ find default-name=ether13 ] master-port=eth5 name=eth13
set [ find default-name=ether14 ] master-port=eth5 name=eth14
set [ find default-name=ether15 ] master-port=eth5 name=eth15
set [ find default-name=ether16 ] master-port=eth5 name=eth16
set [ find default-name=ether17 ] master-port=eth5 name=eth17
set [ find default-name=ether18 ] master-port=eth5 name=eth18
set [ find default-name=ether19 ] master-port=eth5 name=eth19
set [ find default-name=ether20 ] master-port=eth5 name=eth20
set [ find default-name=ether21 ] master-port=eth5 name=eth21
set [ find default-name=ether22 ] master-port=eth5 name=eth22
set [ find default-name=ether23 ] master-port=eth5 name=eth23
set [ find default-name=ether24 ] name=eth24
set [ find default-name=sfp-sfpplus1 ] master-port=eth1 name=sfp-1
set [ find default-name=sfpplus2 ] master-port=eth1 name=sfp-2
/interface bonding
add mode=balance-xor name=bonding1 slaves=eth1,eth2,eth3,eth4 transmit-hash-policy=layer-2-and-3
/interface ethernet switch
set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports=eth1,eth2,eth3,eth4,sfp-1
/port
set 0 name=serial0
/interface ethernet switch egress-vlan-tag
add tagged-ports=eth1,eth2,eth3,eth4,sfp-1 vlan-id=66
add tagged-ports=eth1,eth2,eth3,eth4 vlan-id=101
/interface ethernet switch port
set 24 qos-scheme-precedence=pcp-based,sa-based,da-based,dscp-based,protocol-based,vlan-based,pcp-based
/interface ethernet switch vlan
add ports=eth1,eth2,eth3,eth4,sfp-1 vlan-id=66
add ports=eth1,eth2,eth3,eth4 vlan-id=101
/ip address
add address=172.17.0.205/24 interface=eth24 network=172.17.0.0
/ip route
add distance=1 gateway=172.17.0.254
/lcd interface pages
set 0 interfaces=eth1,eth2,eth3
/system clock
set time-zone-autodetect=no
/tool sniffer
set file-limit=0KiB memory-limit=0KiB