Hello there, I have just bought a new Mikrotik SwOS for CRS112-8P-4S-IN smart switch. But it comes with RouterOS and I want it to be in SwOS as per my requirement. Could anybody help me which SwOS firmware i must have to reload for this on my CRS switch? Any help on this will be appreciated a lot. Thanks.
Thanks for keep supporting. I know RoS has more configuration features than SwOS, but some features i didn’t get in RoS what i see with SwOS such as port isolation, port forwarding, port locking, port mirroring, bandwidth limit etc. Thanks.
All is there, in switch menu, with far more possibilities to fine-tune, than in SwOS.
CRS1XX/2XX is even more “powerful” in this field, than CRS3XX that runs RoS.
But that comes at it’s own price (literally too) - but mainly it’s the complexity of configuration.
Yes! I completely agreed with you. Also, thanks a lot for providing links to know more about CRS1xx series switches and its configurations. I really appreciated your assistance on this to me. Have a great time.
I get that the SwOS web UI is a little more “one click fix” than WebFig in RouterOS, but the functionality of SwOS is all there, plus more. Let’s take the incorrect list of “missing” features up-thread:
port isolation: you can do this several ways in RouterOS:
port locking: there are several ways to accomplish this in RouterOS:
use RouterOS’s “dot1x” feature to do strong authentication rather than participate in the security-through-obscurity that is MAC filtering; MACs are easily spoofed
use the Bridge → Filters (or IP → Firewall) rules to define which MACs are allowed to appear, either at the whole-bridge level or at the per-port level, depending on whether you want to give the client freedom to move to different ports; note that this latter isn’t even an option with SwOS port locking
set the ARP setting on the bridge to “reply only”, then under IP → ARP click “Make Static” on the MAC to IP mappings you want to keep, and delete the rest; manually add others in the future as they’re allowed; MACs not on the static ARP list cannot communicate to or through this router
port mirroring: it’s right there; alternately, if the reason you were wanting mirroring is to do things like packet sniffing on a PC, you can use RouterOS tools like Torch to do this monitoring on-device
bandwidth limit: many of MikroTik’s switches (including this thread’s CRS112) offer QoS traffic shaping, which is essentially the same thing as SwOS’s ingress rate limiting. RouterOS also offers customizable queueing that’s so much more powerful that MikroTik has a whole certification program for it, the MTCTCE.
I highly doubt there’s anything SwOS can do that RouterOS cannot.