Help needed with crs125-24g-1s-2hnd-in and VLANs

Hello all,

I feel stupid, so hope some one could help me.

I just bought new crs125-24g-1s-2hnd-in and I need to create 4 VLAN.
I did create all 4 VLAN, 2 of them is for wifi and 2 are just for some servers.

First 2 VLAN-s goes to port 15 ( I created ether15-master-local, and added few ports on it as slaves-local of port 15. Same thing I did for port 19-master-local, and added ports 17,18,20,21,22,23,24 )
All incoming VLANs are tagged, and I want to distributed it over different ports.

Here are what I did :

/interface ethernet
set ether13-slave-local master-port=ether15-master-local
set ether14-slave-local master-port=ether15-master-local

set ether16-slave-local master-port=ether15-master-local


set ether17-slave-local master-port=ether19-master-local
set ether18-slave-local master-port=ether19-master-local
set ether20-slave-local master-port=ether19-master-local
set ether21-slave-local master-port=ether19-master-local
set ether22-slave-local master-port=ether19-master-local
set ether23-slave-local master-port=ether19-master-local
set ether24-slave-local master-port=ether19-master-local




/interface ethernet switch ingress-vlan-translation

add ports=ether13-slave-local customer-vid=0 new-customer-vid=10 sa-learning=yes
add ports=ether14-slave-local customer-vid=0 new-customer-vid=10 sa-learning=yes

add ports=ether16-slave-local customer-vid=0 new-customer-vid=5 sa-learning=yes


add ports=ether17-slave-local customer-vid=0 new-customer-vid=30 sa-learning=yes
add ports=ether18-slave-local customer-vid=0 new-customer-vid=30 sa-learning=yes

add ports=ether20-slave-local customer-vid=0 new-customer-vid=20 sa-learning=yes
add ports=ether21-slave-local customer-vid=0 new-customer-vid=20 sa-learning=yes
add ports=ether22-slave-local customer-vid=0 new-customer-vid=20 sa-learning=yes
add ports=ether23-slave-local customer-vid=0 new-customer-vid=20 sa-learning=yes
add ports=ether24-slave-local customer-vid=0 new-customer-vid=20 sa-learning=yes

/interface ethernet switch egress-vlan-tag

add tagged-ports=ether15-master-local vlan-id=5
add tagged-ports=ether15-master-local vlan-id=10

add tagged-ports=ether19-master-local vlan-id=20
add tagged-ports=ether19-master-local vlan-id=30


/interface ethernet switch vlan

add ports=ether15-master-local,ether16-slave-local vlan-id=5 learn=yes
add ports=ether15-master-local,ether13-slave-local,ether14-slave-local vlan-id=10 learn=yes


add ports=ether19-master-local,ether17-slave-local,ether18-slave-local vlan-id=20 learn=yes
add ports=ether19-master-local,ether20-slave-local,ether21-slave-local,ether22-slave-local,ether23-slave-local,ether24-slave-local vlan-id=30 learn=yes

/interface ethernet switch

set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports=ether13-slave-local,ether14-slave-local,ether15-master-local,ether16-slave-local,ether17-slave-local,ether18-slave-local,ether19-master-local,ether20-slave-local,ether21-slave-local,ether22-slave-local,ether23-slave-local,ether24-slave-local

This is done according to wiki for crs examples

After that I create virtual APs for VLAN5 and for VLAN10, and create bridge:

wifi_VAP_5 → VLAN_5
VLAN_5 → birdge_VLAN_5

same thing for VLAN_10

Now it comes what is bothering me :

VLAN_10 is working, on local ports and on wifi
VLAN_5 works on local port and on wifi
VLAN_20 and VLAN_30 are not working on local ports, but if I create new VAPs and bridge it than VAP is working but not on local ports

All VLANs are tagged on same machine, same way, just different cabless, on that machine I have Intel 2port GB NIC, and tagging is set on that card.


Please some one help me with this, since I’m pulling my hare and not getting where I did go wrong.


Thank You all in advance

Hi,

I got answer from mikrotik support, so I wanted to share my solution with everybody

"Hello,

Using 2 master-ports in CRS makes it into 2 switches, but it restricts full VLAN
functionality.
Wiki Note: Multiple master-port configuration is designed as fast and simple port
isolation solution, but it limits part of VLAN functionality supported by CRS
switch-chip.

The configuration should work if you use one master-port for all ports. It will
not break functionality because VLANs already ensure isolation between different
VLAN ports.

Regards,
Janis B. "

Now what I would like to know, if I could create mirror port and than connect my second VLANs group, and fix it this whay