Mikrotik bridge SFP to copper ethernet port for pppoe not working for external router to do pppoe

RouterOS General
1

Hi,

I have FTTH setup, and currently have the SFP connected to my CRS226-24G-2S+, and I have added the SFP port, and some copper ports to a bridge called "wanbridge". I did this because I want to use an external router (ER-X) to do the pppoe session through the CRS226, as well as my DHCP, NATing, etc.

The setup looks like this

ISP ===> CRS226 SFP port#1
ER-X eth0 => CRS226 copper port 24
ER-X eth1 => CRS226 copper port 1

Ports 1-20 are default setup, all part of bridge1 and are my internal LAN.
Ports 21,22,23,24, sfp1 are part of "wanbridge" which is tagged VLAN 35 to make the FTTH work.

I can get a pppoe session on the CRS226, and that works fine.

When I stop that pppoe session on the CRS226, and I try to initiate one from the ER-X or even the ISP's provided modem using copper, it fails and won't start up.

I have a dumb 8 port switch, which has a sftp and 8 copper ports, which works just fine.

I for the life of me can't figure this out and it is driving me absolutely nuts, I am hoping someone there can shed some light on what/where I've messed up....

This is the config of the CRS226

[admin@MikroTik] > /export compact

nov/15/2019 00:10:05 by RouterOS 6.42.11

software id = JH4Z-2J13

model = CRS226-24G-2S+

serial number = 6BF2066D0511

/interface bridge
add admin-mac=6C:3B:6B:49:22:56 auto-mac=no fast-forward=no name=bridge1
add name=wanbridge
/interface ethernet
set [ find default-name=ether1 ] name=ether1-master
/interface vlan
add interface=wanbridge name=vlan35 vlan-id=35
/interface pppoe-client
add interface=vlan35 keepalive-timeout=disabled max-mtu=1418 name=pppoe-out1
password=password user=b12cqsqd
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge1 interface=ether1-master
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether6
add bridge=bridge1 interface=ether7
add bridge=bridge1 interface=ether8
add bridge=bridge1 interface=ether9
add bridge=bridge1 interface=ether10
add bridge=bridge1 interface=ether11
add bridge=bridge1 interface=ether12
add bridge=bridge1 interface=ether13
add bridge=bridge1 interface=ether14
add bridge=bridge1 interface=ether15
add bridge=bridge1 interface=ether16
add bridge=bridge1 interface=ether17
add bridge=bridge1 interface=ether18
add bridge=bridge1 interface=ether19
add bridge=bridge1 interface=ether20
add bridge=wanbridge interface=ether21
add bridge=wanbridge interface=ether22
add bridge=wanbridge interface=ether23
add bridge=wanbridge interface=ether24
add auto-isolate=yes bridge=wanbridge interface=sfp-sfpplus1
add bridge=bridge1 interface=sfpplus2
/interface list member
add disabled=yes interface=ether1-master list=WAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=ether9 list=LAN
add interface=ether10 list=LAN
add interface=ether11 list=LAN
add interface=ether12 list=LAN
add interface=ether13 list=LAN
add interface=ether14 list=LAN
add interface=ether15 list=LAN
add interface=ether16 list=LAN
add interface=ether17 list=LAN
add interface=ether18 list=LAN
add interface=ether19 list=LAN
add interface=ether20 list=LAN
add interface=ether21 list=WAN
add interface=ether22 list=WAN
add interface=ether23 list=WAN
add interface=ether24 list=WAN
add interface=sfp-sfpplus1 list=WAN
add interface=sfpplus2 list=LAN
/ip address
add address=192.168.2.2/24 comment=lan interface=ether2 network=192.168.2.0
/ip dhcp-client
add dhcp-options=hostname,clientid interface=bridge1
add comment=test dhcp-options=clientid disabled=no interface=vlan35
/ip dns
set servers=8.8.4.4
/ip route
add distance=1 gateway=192.168.2.251
/lcd
set backlight-timeout=never default-screen=interfaces time-interval=daily
/lcd interface pages
set 0 interfaces=ether1-master,ether2,ether3,ether4
/special-login
add port=serial0 user=jc
/system clock
set time-zone-name=America/Toronto
/system leds
add interface=bridge1 leds=user-led type=interface-activity
/tool graphing
set store-every=24hours
/tool graphing interface
add interface=ether1-master
[admin@MikroTik] >


All I am trying to do is get a public ipv4 address on the ER-X, that isn't double nat-d, and keep my ER-X for my router/nat/vpn device - ideally the simpler the better for the setup.

Thanks for any help / suggestions.

Jonathan

2

The only two things which come to my mind:

  • try /interface bridge set wanbridge protocol-mode=none
  • while trying the PPPoE connection from the ER-X, keep only one cable connected between the ER-X and the Mikrotik (i.e. disconnect ER-X eth1 from CRS226 copper port 1)

If that doesn’t help, try /interface bridge port set [find bridge=wanbridge] hw=no to exclude influence of the switch chip; if that still doesn’t help, make the CLI window as wide as your screen allows, configure the sniffer to sniff into a file (/tool sniffer set file-name=er-x-pppoe.pcap file-limit=1000 and use /tool sniffer quick interface=sfp-sfpplus1,ether24 to see what exactly fails in the exchange between the ER-X and the ISP’s PPPoE server and be able to view the details using Wireshark if the brief output of /tool sniffer quick doesn’t shed light to it.

3

Wow! Thank you so much, I will have a go at all of these and report back!

Again, thanks for taking the time to reply!!!

Jonathan

4

Hey,

So disabling the protocol worked right away, and my PPPoE session came up

“/interface bridge set wanbridge protocol-mode=none”

I did try the other one as well, it seems to work too, but stuck with the first option.

“/interface bridge port set [find bridge=wanbridge] hw=no”

Thank you very much for helping me out, I am not certain I ever would have figured that out!

I am going to reset the switch to factory defaults, and do this test again though, as something else is “fishy” with my switch, meaning when I am in the GUI, if I select protocol back as “RSTP” on wanbridge - PPPoE still seems to work… Really want to get to the bottom of this, so I will start from scratch and see if I get the same result.

Will update here if I have anything else findings wise or new info to share, again:
thanks!
Jonathan

5

So what was your final config on the mikrotik? How did you get PPPoE to work on the ER-X?