CRS309-1G-8S+IN - From Routeros to Swos

SwOS
1

I currently use the router functions of it, so I am using Routeros. I am not very happy with the port speeds.

I have many (MANY!) Vlans on each FO port (bridged).

Can I switch to Swos and somehow preserve all the Vlan configuration of the ports, or I must reprogram them from the begining? Is there a script maybe to convert the config file (rsc) to a Swos format?

Thanks

2

What is wrong with the port speeds? Are you aware that you should have only 1 bridge to preserve hardware switching?

3

I have more that 30 bridges…

4

Then switching to another os makes no point?

5

I hope you mean 30 VLAN’s? Because anything can be handled with a single bridge (and will perform better).

6

Yes, 30+ Vlans that are spread over all FO ports, so each Vlan needs a bridge.

7

I think you don’t understand. You can use multiple vlans on a single bridge.
That way you keep hardware switching turned on.
See https://help.mikrotik.com/docs/display/ROS/Bridging+and+Switching for examples / explanation.

8

So, where I put the (router) address in each Vlan then? All IPs in the same bridge?

And do I bridge the FO ports or all the Vlans they contain? ALL Vlans in each port in the same ONE bridge?

9

Just an example:

/interface bridge
add name=BR vlan-filtering=yes frame-types=admit-only-vlan-tagged ingress-filtering=yes

#L2 setup ... all ports are trunk ports, tagged only
/interface bridge port
add bridge=BR interface=sfp-sfpplus1 frame-types=admit-only-vlan-tagged ingress-filtering=yes
add bridge=BR interface=sfp-sfpplus2 frame-types=admit-only-vlan-tagged ingress-filtering=yes
add bridge=BR interface=sfp-sfpplus3 frame-types=admit-only-vlan-tagged ingress-filtering=yes
#... etc
/interface bridge vlan
# this device does not interact with VID 100 on IP, hence BR interface is not member of this VLAN
add bridge=BR tagged=sfp-sfpplus1,sfp-sfpplus2 vlan-ids=100
add bridge=BR tagged=BR,sfp-sfpplus1,sfp-sfpplus2 vlan-ids=200
add bridge=BR tagged=BR,sfp-sfpplus2,sfp-sfpplus3 vlan-ids=300
# ... etc
/interface vlan
add interface=BR name=BR-v200 vlan-id=200
add interface=BR name=BR-v300 vlan-id=300
# ... etc
#
# then L3 setup
/ip address
add address=10.0.200.1/24 interface=BR-v200
add address=10.0.300.1/24 interface=BR-v300
# ... etc

You really should try harder to read document, linked by @onnoossendrijver … specially section Bridge VLAN filtering.

10

Thank you, I understand your example. This way Vlan traffic between ports will not reach the cpu, correct?

I have to totally reprogram the CRS309 for this setup…

11

So if I modify your example allowing untaged operation (setting a PVID), I will have Hybrid ports, correct?

12

Yes, this configuration will be offloaded to hardware, so traffic between a pair of SFP+ ports will not go via CPU. So it should match performance under SwOS.

Yes, if you also add PVID setting to bridge ports, those will become hybrid ports. Obviously you have to change also frame-types setting to “admit-all”. ROS will automatically add such port as untagged port to the VLAN table (in /interface bridge vlan), so you don’t have to do it manually. Make sure that hybrid port is not set as tagged member of same VLAN.

13

Thanks again, I now understand the principle.

I had in mind that RouterOS made this automatically by just adding interfaces to a bridge, but of course there is no magic in electronics!

14

ROS defaults for bridge ports are PVID=1, frame-types=admit-all and ingress-filtering=no … bridge interface has PVID set to 1 by default as well … so if one simply enables vlan-filtering (default is disabled), device will still act as dumb switch between all nember ports, but this time only for untagged traffic. Those defaults are not shown in configuration export because export normally only shows settings set to values different from defaults.

15

Mkx, i 've set up an CRS112 as per your example, and all layer 2 routing worked fine.

BUT, in Bridge, Ports menu, all ports set up as [Hardware Offload], but NONE worked, all showed [Hw. Offload] = OFF.

Maybe the CRS112 does not support this? Or did I miss something…

16

The vlan-filtering bridge can not be HW offloaded on CRS1xx or CRS2xx, only on newer CRS (3xx, 5xx, …). And a few other RB devices.

If you want to use CRS1xx and have it use hardware, then you have to configure it in /interface ethernet switch sub-menu…