One of working VLAN stopped

spv · March 13, 2025, 11:02am

Mikrotik CRS 326, all configured and running with Multiple VLAN, suddenly one of VLAN stop working. I updated firmware incase of any issue. Still not responding. Recheck interface, bridge VLAN, looks all okay. Any reason …

mkx · March 13, 2025, 5:58pm

Let me check my crystall ball … nah, I can’t see anything, it’s all foggy.

Sorry, you’ll have to give us much more details. Preferrably actual device config as a starting point (and test case which shows the problem).

spv · March 17, 2025, 6:05am

My config are below, issue is in VLAN 666, it was working and suddenly stopped.

/interface vlan
add interface=bridge name="vlan11 [ab]" vlan-id=11
add interface=bridge name="vlan12 [abc]" vlan-id=12
add interface=bridge name="vlan13 [abcd]" vlan-id=13
add interface=bridge name="vlan14 [abcde]" vlan-id=14
add interface=bridge name="vlan15 [abcdef]" vlan-id=15
add interface=bridge name="vlan16 [abcdefg]" vlan-id=16
add interface=bridge name="vlan17 [abcdefgh]" vlan-id=17
add interface=bridge name="vlan19 [abcdefghi]" vlan-id=19
add interface=bridge name="vlan43 [abcdefghij]" vlan-id=43
add interface=bridge name="vlan50 [abcdefghijk]" vlan-id=50
add interface=bridge name="vlan100 [abcdefghijkl]" vlan-id=100
add interface=bridge name="vlan221 [abcdefghijklm]" vlan-id=221
add interface=bridge name="vlan666 [abcdefghijklmn]" vlan-id=666
/port
set 0 name=serial0
/routing ospf instance
add disabled=no name=200 router-id=255.40.19.11
/routing ospf area
add disabled=no instance=200 name=backbone2
/ip smb
set enabled=no
/interface bridge port
add bridge=bridge interface=ether1 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether2 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether3 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether4 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether5 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether6 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether7 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether8 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether9 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether10 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether11 internal-path-cost=10 path-cost=10 pvid=43
add bridge=bridge interface=ether12 internal-path-cost=10 path-cost=10 pvid=43
add bridge=bridge interface=ether13 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether14 internal-path-cost=10 path-cost=10 pvid=666
add bridge=bridge interface=ether15 internal-path-cost=10 path-cost=10 pvid=666
add bridge=bridge interface=ether16 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether17 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether18 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether19 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether20 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether21 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=ether22 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface="ether23 trunk to" internal-path-cost=10 path-cost=\
    10 pvid=19
add bridge=bridge interface="ether24 trunk to" internal-path-cost=10 path-cost=\
    10 pvid=19
add bridge=bridge interface="sfp-sfpplus1 trunk to Test" \
    internal-path-cost=10 path-cost=10 pvid=19
add bridge=bridge interface="sfp-sfpplus2 trunk to" internal-path-cost=10 \
    path-cost=10 pvid=19
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=all
/interface bridge vlan
add bridge=bridge tagged="bridge,ether23 trunk to,ether24 trunk to,sfp-sfpplus1 \
    trunk to Test,sfp-sfpplus2 trunk to" untagged=\
    ether2,ether3,ether4,ether5,ether6,ether7,ether8,ether9,ether10 vlan-ids=11
add bridge=bridge tagged="bridge,ether23 trunk to,ether24 trunk to,sfp-sfpplus1 \
    trunk to Test,sfp-sfpplus2 trunk to" vlan-ids=19
add bridge=bridge tagged="bridge,ether23 trunk to,ether24 trunk to,sfp-sfpplus1 \
    trunk to Test,sfp-sfpplus2 trunk to" vlan-ids=16
add bridge=bridge tagged="bridge,ether23 trunk to,ether24 trunk to,sfp-sfpplus1 \
    trunk to Test,sfp-sfpplus2 trunk to" untagged=ether11,ether12 \
    vlan-ids=43
add bridge=bridge tagged="bridge,ether23 trunk to,ether24 trunk to,sfp-sfpplus1 \
    trunk to Test,sfp-sfpplus2 trunk to" vlan-ids=12
add bridge=bridge tagged="bridge,ether23 trunk to,ether24 trunk to,sfp-sfpplus1 \
    trunk to Test,sfp-sfpplus2 trunk to" untagged=ether1 vlan-ids=13
add bridge=bridge tagged="bridge,ether23 trunk to,ether24 trunk to,sfp-sfpplus1 \
    trunk to Test,sfp-sfpplus2 trunk to" vlan-ids=14
add bridge=bridge tagged="bridge,ether23 trunk to,ether24 trunk to,sfp-sfpplus1 \
    trunk to Test,sfp-sfpplus2 trunk to" vlan-ids=15
add bridge=bridge tagged="bridge,ether23 trunk to,ether24 trunk to,sfp-sfpplus1 \
    trunk to Test,sfp-sfpplus2 trunk to" vlan-ids=17
add bridge=bridge tagged="bridge,ether23 trunk to,ether24 trunk to,sfp-sfpplus1 \
    trunk to Test,sfp-sfpplus2 trunk to" vlan-ids=50
add bridge=bridge tagged="bridge,ether23 trunk to,ether24 trunk to,sfp-sfpplus1 \
    trunk to Test,sfp-sfpplus2 trunk to" vlan-ids=100
add bridge=bridge tagged="bridge,ether23 trunk to,ether24 trunk to,sfp-sfpplus1 \
    trunk to Test,sfp-sfpplus2 trunk to" vlan-ids=221
add bridge=bridge tagged="bridge,ether23 trunk to,ether24 trunk to,sfp-sfpplus1 \
    trunk to Test,sfp-sfpplus2 trunk to" untagged=ether14,ether15 \
    vlan-ids=666
add bridge=bridge tagged="bridge,ether23 trunk to,ether24 trunk to,sfp-sfpplus1 \
    trunk to Test,sfp-sfpplus2 trunk to" vlan-ids=1
/interface ovpn-server server
add mac-address=FE:68:95:6D:FE:BB name=ovpn-server1
/ip address
add address=10.40.19.11/24 interface="vlan19 [network]" network=10.40.19.0
/ip dns
set servers=10.40.13.30,10.20.13.30
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh port=2233
set api disabled=yes
set api-ssl disabled=yes
/radius
add address=10.40.13.30 require-message-auth=no service=login src-address=\
    10.40.19.11 timeout=500ms
/routing ospf interface-template
add area=backbone2 disabled=no interfaces="vlan19 [network]" networks=\
    10.40.19.0/24

erlinden · March 17, 2025, 9:00am

What does “VLAN stopped” exactly mean?
And how is the router configured?

From your config:

You don’t have to set untagged on /interface bridge vlan, as they are already set on /interface bridge port
You should not use VLAN ID=1
/interface vlan only requires a single vlan for management purposes…probably “vlan19 [network]”
Sure you want to set ether23 and ether24 to pvid=19 (/interface bridge port( while you set it to tagged vlan-ids=19 on (/interface bridge vlan)?

Can you explain (network diagram) what your network looks like (especially on the VLAN part)?

spv · March 17, 2025, 9:19am

VLAN stopped in the sense, device connected on that VLAN not responding, traffic is manage from core switch. Everything was working fine, suddenly this particular VLAN stopped, other VLAN on this switch working.
management is on vlan19,