Hi all,
I am currently setting up a CRS354-48P-4S+2Q+ using RouterOS (It is being used strictly as a switch, no routing). I have successfully set up VLANs, assigning them to bridge ports sucessfully puts my devices into the right network. However we have IP-Phones (Snom D725) that are supposed to be put into a seperate VLAN.
The first thing I tried was Switch/Rule, setting a rule for the MAC range of the phones to be put into that specific VLAN. But when I do, the phone just gets stuck in “Sending DHCP requests” even though on the same port I can put devices into that VLAN’s network just fine. The same rule with a different MAC range works with other devices, just not with those phones (Even setting the rule as putting all traffic on that port into that VLAN doesn’t work..). It can’t be that those rules don’t work with certain hardware can it?
The next thing I tried was trying to get it to work with LLDP-MED but this doesn’t seem to be working right either, the phone boots into the untagged VLAN and stays there. Which is weird cause the same phone model works on smaller switches using auto voice vlan. Maybe there’s another way to set up Voice-VLAN on RouterOS?
I’ll show you my current config, feel free to alert me of any other problems that might be in there as well if you notice anything.
/interface bridge
add admin-mac=48:A9:8A:5D:AC:78 auto-mac=no fast-forward=no ingress-filtering=no name=bridge pvid=4050 vlan-filtering=yes
/interface ethernet
set ether1 l2mtu=10218 mtu=10218
set ether2 l2mtu=10218 mtu=10218
set ether3 l2mtu=10218 mtu=10218
set ether4 l2mtu=10218 mtu=10218
set ether5 l2mtu=10218 mtu=10218
set ether6 l2mtu=10218 mtu=10218
set ether7 l2mtu=10218 mtu=10218
set ether8 l2mtu=10218 mtu=10218
set ether9 l2mtu=10218 mtu=10218
set ether10 l2mtu=10218 mtu=10218
set ether11 l2mtu=10218 mtu=10218
set ether12 l2mtu=10218 mtu=10218
set ether13 l2mtu=10218 mtu=10218
set ether14 l2mtu=10218 mtu=10218
set ether15 l2mtu=10218 mtu=10218
set ether16 l2mtu=10218 mtu=10218
set ether17 l2mtu=10218 mtu=10218
set ether18 l2mtu=10218 mtu=10218
set ether19 l2mtu=10218 mtu=10218
set ether20 l2mtu=10218 mtu=10218
set ether21 l2mtu=10218 mtu=10218
set ether22 l2mtu=10218 mtu=10218
set ether23 l2mtu=10218 mtu=10218
set ether24 l2mtu=10218 mtu=10218
set ether25 l2mtu=10218 mtu=10218
set ether26 l2mtu=10218 mtu=10218
set ether27 l2mtu=10218 mtu=10218
set ether28 l2mtu=10218 mtu=10218
set ether29 l2mtu=10218 mtu=10218
set ether30 l2mtu=10218 mtu=10218
set ether31 l2mtu=10218 mtu=10218
set ether32 l2mtu=10218 mtu=10218
set ether33 l2mtu=10218 mtu=10218
set ether34 l2mtu=10218 mtu=10218
set ether35 l2mtu=10218 mtu=10218
set ether36 l2mtu=10218 mtu=10218
set ether37 l2mtu=10218 mtu=10218
set ether38 l2mtu=10218 mtu=10218
set ether39 l2mtu=10218 mtu=10218
set ether40 l2mtu=10218 mtu=10218
set ether41 l2mtu=10218 mtu=10218
set ether42 l2mtu=10218 mtu=10218
set ether43 l2mtu=10218 mtu=10218
set ether44 l2mtu=10218 mtu=10218
set ether45 l2mtu=10218 mtu=10218
set ether46 l2mtu=10218 mtu=10218
set ether47 l2mtu=10218 mtu=10218
set ether48 l2mtu=10218 mtu=10218
set ether49 disabled=yes
set qsfpplus1-1 l2mtu=10218 mtu=10218
set qsfpplus1-2 l2mtu=10218 mtu=10218
set qsfpplus1-3 l2mtu=10218 mtu=10218
set qsfpplus1-4 l2mtu=10218 mtu=10218
set qsfpplus2-1 l2mtu=10218 mtu=10218
set qsfpplus2-2 l2mtu=10218 mtu=10218
set qsfpplus2-3 l2mtu=10218 mtu=10218
set qsfpplus2-4 l2mtu=10218 mtu=10218
set sfp-sfpplus1 l2mtu=10218 mtu=10218
set sfp-sfpplus2 l2mtu=10218 mtu=10218
set sfp-sfpplus3 l2mtu=10218 mtu=10218
set sfp-sfpplus4 l2mtu=10218 mtu=10218
/interface vlan
add interface=bridge mtu=10214 name=Deployment vlan-id=3999
add interface=bridge mtu=10214 name=Schulung vlan-id=4051
add interface=bridge mtu=10214 name=Verwaltung vlan-id=4050
add interface=bridge mtu=10214 name=Video vlan-id=4070
add interface=bridge mtu=10214 name=VoIP vlan-id=4052
/interface bridge port
add bridge=bridge ingress-filtering=no interface=ether1 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether2 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether3 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether4 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether5 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether6 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether7 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether8 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether9 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether10 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether11 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether12 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether13 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether14 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether15 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether16 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether17 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether18 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether19 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether20 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether21 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether22 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether23 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether24 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether25 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether26 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether27 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether28 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether29 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether30 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether31 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether32 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether33 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether34 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether35 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether36 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether37 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether38 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether39 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether40 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether41 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether42 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether43 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether44 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether45 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether46 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether47 pvid=4050
add bridge=bridge ingress-filtering=no interface=ether48 pvid=4050
add bridge=bridge ingress-filtering=no interface=sfp-sfpplus1 pvid=4050
add bridge=bridge ingress-filtering=no interface=sfp-sfpplus2 pvid=4050
add bridge=bridge ingress-filtering=no interface=sfp-sfpplus3 pvid=4050
add bridge=bridge ingress-filtering=no interface=sfp-sfpplus4 pvid=4050
/ip neighbor discovery-settings
set discover-interface-list=all lldp-med-net-policy-vlan=4052
/interface bridge vlan
add bridge=bridge comment=Verwaltung vlan-ids=4050
add bridge=bridge comment=Schulung tagged=sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=4051
add bridge=bridge comment=VoIP tagged=sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4,ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16,ether17,ether18,ether19,ether20,ether21,ether22,ether23,ether24,ether25,ether26,ether27,ether28,ether29,ether30,ether31,ether32,ether33,ether34,ether35,ether36,ether37,ether38,ether39,ether40,ether41,ether42,ether43,ether44,ether45,ether46,ether47,ether48 vlan-ids=4052
add bridge=bridge comment=Video tagged=sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=4070
add bridge=bridge comment=Deployment tagged=sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=3999
/interface ethernet switch rule
add new-vlan-id=4052 ports=ether2 src-mac-address=00:04:13:8B:00:00/FF:FF:FF:FF:00:00 switch=switch1
add dst-mac-address=00:04:13:8B:00:00/FF:FF:FF:FF:00:00 new-vlan-id=4052 ports=ether2 switch=switch1
/ip address
add address=10.20.1.246/23 interface=ether1 network=10.20.0.0
/ip dhcp-client
add disabled=yes interface=bridge
/ip dns
set allow-remote-requests=yes servers=10.10.10.10
/system clock
set time-zone-name=Europe/Berlin
/system identity
set name=SW-KI-HDP-NEU
/system routerboard settings
set boot-os=router-os enter-setup-on=delete-key
/system swos
set address-acquisition-mode=static identity=SW-KI-HDP-20 static-ip-address=10.20.1.246