I’m running the CRS125 with 6.42.6. I mean to use HW offload as much as possible and I’m really only looking use the CRS125 as a switch for now. Also a priority for me is that there is no leakage between any of the VLAN’s.
I got the following VLAN’s
10 - WAN link net
20 - LAN net
30 - VPN net
40 - IPTV net
I want to configure the switch as so;
ether1 - trunk VLAN 20 and 40 (clients and IPTV clients)
ether2 - access port VLAN 20 (client)
ether3 - access port VLAN 20 (client)
ether4 - access port VLAN 20 AND trunk VLAN 30 (server)
ether5 - access port VLAN 20 (client)
ether6 - access port VLAN 20 (client)
ether22 - access port VLAN 20 (this is upstream IPTV)
ether23 - trunk port VLAN 10, 20 and 30 (this is my router)
ether24 - access port VLAN 10 (this is upstream WAN)
Based on that I have configured the following,
[admin@MikroTik] > export
# jan/02/1970 03:53:02 by RouterOS 6.42.6
# software id = 4ZWJ-QVRS
#
# model = CRS125-24G-1S
# serial number = 523E055AD021
/interface bridge
add fast-forward=no name=bridge1
/interface ethernet switch
set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports=ether1,ether2,ether3,ether4,ether5,ether6,ether22,ether23,ether24 forward-unknown-vlan=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether6
add bridge=bridge1 interface=ether22
add bridge=bridge1 interface=ether23
add bridge=bridge1 interface=ether24
add bridge=bridge1 interface=ether16
/interface ethernet switch egress-vlan-tag
add comment=WAN tagged-ports=ether23 vlan-id=10
add comment=LAN tagged-ports=ether1,ether23,switch1-cpu vlan-id=20
add comment=VPN tagged-ports=ether4,ether23 vlan-id=30
add comment=IPTV tagged-ports=ether1 vlan-id=40
/interface ethernet switch egress-vlan-translation
add comment=WAN customer-vid=10 customer-vlan-format=tagged new-customer-vid=0 ports=ether24
add comment=IPTV customer-vid=40 customer-vlan-format=tagged new-customer-vid=0 ports=ether22
add comment=LAN customer-vid=20 customer-vlan-format=tagged new-customer-vid=0 ports=ether2,ether3,ether4,ether5,ether6,switch1-cpu
/interface ethernet switch ingress-vlan-translation
add comment=WAN customer-vid=0 new-customer-vid=10 ports=ether24
add comment=IPTV customer-vid=0 new-customer-vid=40 ports=ether22
add comment=LAN customer-vid=0 new-customer-vid=20 ports=ether2,ether3,ether4,ether5,ether6,switch1-cpu
/interface ethernet switch vlan
add comment=WAN ports=ether23,ether24 vlan-id=10
add comment=LAN ports=ether1,ether2,ether3,ether4,ether5,ether6,ether23,switch1-cpu vlan-id=20
add comment=VPN ports=ether4,ether23 vlan-id=30
add comment=IPTV ports=ether1,ether22 vlan-id=40
/ip address
add address=192.168.1.2/24 interface=bridge1 network=192.168.1.0
/ip dns
set servers=192.168.1.1
/ip route
add distance=1 gateway=192.168.1.1
/system clock
set time-zone-name=Europe/Oslo
/system routerboard settings
set silent-boot=no
[admin@MikroTik] >
However I can’t seem to get any traffic through on any VLAN?