Hello MikroTik Community,
We are setting up a hardware-in-the-loop testing environment using a CRS305-1G-4S+IN running RouterOS v7. We are encountering an issue where IPv6 Unicast traffic routes perfectly between two VLANs, but IPv6 Multicast stream traffic fails to reach destination receivers across subnets.
System Topology & Addressing Overview
-
Router/Switch: MikroTik CRS305-1G-4S+IN
-
Interface 1 (
sfp-sfpplus1): Connected to Receiver / Host (VLAN 4, Subnetfd53:7xxx:xxx:4::/64) -
Interface 2 (
sfp-sfpplus2): Connected to Transmitter / ECU (VLAN 2, Subnetfd53:7xxx:xxx:2::/64) -
Routing Type: Inter-VLAN Layer 3 IPv6 Routing (No NAT)
Multicast Signal Details
-
Source IPv6 Address:
fd53:7xxx:xxx:2::10f -
Destination Multicast Group 1:
ff14::63 -
Destination Multicast Group 2:
ff14::7f
The Problem
-
Unicast IPv6 (Diagnostic Traffic): Works flawlessly. TCP/UDP unicast packets route between VLAN 2 and VLAN 4 with low latency and zero drop rates.
-
Multicast IPv6 (High-Frequency Data Streams): The Transmitter at
fd53:7xxx:xxx:2::10femits IPv6 Multicast streams targeted at destination groupsff14::63andff14::7f. Receivers on VLAN 4 subscribe to these groups, but the multicast packets are dropped or fail to traverse the VLAN/subnet boundary through the switch.
Current Configuration Summary
We have created VLAN interfaces attached to SFP ports, assigned /64 IPv6 addresses as default gateways, and configured Neighbor Discovery (ND) on both interfaces:
Code snippet
VLAN Interfaces
/interface vlan add interface=sfp-sfpplus1 name=vlan4-tester vlan-id=4
/interface vlan add interface=sfp-sfpplus2 name=vlan2-ecu vlan-id=2
Gateways
/ipv6 address add address=fd53:7xxx:xxx:4::1/64 interface=vlan4-tester advertise=no
/ipv6 address add address=fd53:7xxx:xxx:2::1/64 interface=vlan2-ecu advertise=no
Firewall Filter Rules
/ipv6 firewall filter
add chain=forward action=accept protocol=icmpv6 comment="Allow ICMPv6"
add chain=forward action=accept src-address=fd53:7xxx:xxx:4::/64 dst-address=fd53:7xxx:xxx:2::/64 comment="Route Subnet 4 to 2"
add chain=forward action=accept src-address=fd53:7xxx:xxx:2::/64 dst-address=fd53:7xxx:xxx:4::/64 comment="Route Subnet 2 to 4"
Specific Multicast Rules
add chain=forward action=accept dst-address=ff14::63/64 comment="Allow Multicast Group 63"
add chain=forward action=accept dst-address=ff14::7f/64 comment="Allow Multicast Group 7f"
add chain=forward action=accept src-address=fd53:7xxx:xxx:2::10f/128 dst-address=ff00::/8 comment="Allow Multicast Source IP"
"Instead of routing multicast traffic across subnets, what is the best way to configure a single L2 Multicast VLAN across both SFP ports on the CRS305? We want to isolate the high-frequency UDP multicast streams (ff14::63 / ff14::7f) to Layer 2 so the switch chip handles them in hardware, while keeping unicast diagnostic traffic routed on L3 VLANs."
Any insight or working config snippets for inter-VLAN IPv6 multicast on CRS300 series hardware would be greatly appreciated!
Thanks in advance.