Heloo friends,
I have Mikrotik RB951Ui-2nD 6.47.4 and they do NAT and act as access point for my home.
Few days ago I managed to install MikroTik on some custom made switch with 10 Gigabit ports ( RB951Ui-2Nd dont have it ).
Custom made switch was using some propriatery firmware which is pain in a** to renew so I decidet to try RouterOS.
Specs: Intel E5300 and 2 GB of DDR2 ram. Great
I intalled X86 RouterOS version 6.46.7 and registered for L1 licence. I put all ports in bridge since I need only switch, and want to act as a Gigabit switch ( even it is capable more then this ). Connected cable from RB951Ui to port on X86 and each few mins in log I get:
“ether10: bridge port received packet with own address as source address (00:23:54:66:74:09), probably loop”
Only one cable is connected to x86 and it is cable from RB951.
How to fix this or how to remove this error warning? Second question is how to enable logging on WEB and SSH port on RB951 because when I was using TP link I was getting to much SSH and WEB logins from China and Russia?
The issue is not to know what the message means - it means exactly what it says. Some frame sent with the source MAC address of that port has somehow made it back to it. The real issue is to guess the topology of the rest of your network to find out why it happens
The loop can exist anywhere in the network, the fact that your new hardware is connected using a single cable means nothing. All switches broadcast frames for yet unknown destinations through all ports except the one through which they have received it. So if the frame arrives through port A of some external switch, then leaves via its port B and comes back via its port C, the one received from C is broadcast to port A again.
So to get a useful response, provide an useful input for the analysis: the configuration of both Mikrotik devices and a drawing of the rest of the network. A photo of a handmade drawing is sufficient, the contents is important, not the form.
You dont need to guess topology, here it is. RB951Ui-2nD, ether1 as WAN, and ether1-ether5 in SWITCH mode togoether with switch1-cpu. On other end ( x86 device ) All ports from port0-port9 in bridge mode and cable connected to RB951Ui-2nD. I dont have SWITCH option in winbox for x86 device. Is it problem?
If nothing is connected to the other ports of the RB951Ui-2nD, the issue must be within the RB951Ui-2nD or within the x86 router, but is that really the case? Other people with this issue on this forum were getting frames back from a Sonos wireless system connected to one port of their Mikrotik box, which is just an example, not the only external system capable of doing this.
But you wrote ether1 is a WAN and also listed ether1 in “switch mode”; as there is no such thing as “switch mode”, better post the export of the configuration of the 951. All the ethernet interfaces of the 951 are ports of the switch chip; it depends on the bridge configuration whether traffic is forwarded among them by the switch chip itself or whether all the L2 forwarding decisions are made in the software bridge(s), i.e. by the CPU.
The fact that no switch section is shown in WinBox is no surprise as the x86 version of RouterOS doesn’t expect any switch chip to be available on a PC hardware for which it is designed. So it is not related to your issue.
Hey @Sindy
There is in attachments. I scrambled my public IP with X.X.X.X because I run some services and I dont like to expose my network config, SSID and PASS. Ether1 cannot be removed from switch as you see on screenshot. Italic ports are emppty ( 4 and 5 ). myconfig.cfg.rsc (4.49 KB)
Of course, that’s what I said before, all the Ethernet interfaces are in fact ports of the switch chip, it only depends on the rest of the configuration whether the switch is allowed to forward traffic between them autonomously or whether it can only send the ingress traffic from a given port to the CPU which then eventually forwards it to another port.
The only weird thing I can see in your configuration is that /interface pppoe server server is attached to interface called which is nonexistent anywhere in the configuration. But ether1 is not a member port of the LAN bridge, unlike all the other Ethernet interfaces, so the configuration is not the reason why the frames with the x86 machine’s MAC address as source are being returned to it.
So the analytical approach is to sniff on the ether10 of the x86 into a large file with filter-direction=rx until the error message appears, and then open the file using Wireshark and find a frame which came in with ether10’s own MAC address as source. Then sniff again, this time filtering in both directions, this time matching for the ethertype (mac-protocol) of that frame, to find out what the issue may be. At this stage, I can imagine two possibilities:
a misconfiguration of the switch chip done by the 6.47.4, not by your configuration of RouterOS but by RouterOS itself generating a wrong setup for the switch chip internally (there were reports here that VLAN filtering on switch chip stopped working after upgrade to 6.47.4, so something may be broken there)
the Ethernet cards of your x86 machine sending some proprietary frames which the switch chip of the 951 sends back to the sender even if configured properly.
The fast shot approach would be to load 6.46.7 (the latest stable RouterOS as of the time of writing this) to the 951 and possibly also to the x86 and see whether it changes anything. Unless you plan to use some of the features only provided by “stable” release, I can see no reason for not using the “long-term” one.
I have one more concearn. I need hypervisor static adress 192.168.0.12. I went to DHCP Server > Leases > click on make static and in General tab enter 192.168.0.12. I run this config since I bought this device ( 1 year more or less ) and this works for me. Is it better to ( winbox ) IP > Adresses > + sign and add s 192.168.0.12 on ether2 ?
Hey @sindy
I completely removed x86 from network, and it still happens.
“Detected conflict by ARP response for 192.168.0.64 from F8:2F:A8:DD:4C:C9”
4C:C9 - Is my second laptop connected via wifi. 192.168.0.64 is non leased IP and at atm laptop is bound on 192.168.0.36.