Packet loss routing between VLANs on RB4011

Hi All,

I’ve got an RB4011iGS+5HacQ2HnD running RouterOS and firmware 6.49.13 which exhibits a small amount of packet loss at regular intervals when routing between VLANs (via the same port).

The topology is pretty straightforward:
ether1: VDSL2 modem
ether2: CRS125 switch 1
ether3: CRS125 switch 2 (usually blocked by RSTP)

ether2 and 3 carry multiple VLANs and there’s a link between the two switches with RSTP avoiding bridging loops. the RB4011 is the root bridge and ether3 is usually blocking traffic.

The packet loss is < 1% and difficult to pick up using ICMP, but impacts RTP and related traffic significantly. Throughput is usually less than 10Mbps, although this doesn’t appear to change the rate of loss if it goes up into the 100s of Mbps. CPU utilisation is always under 5%.

Packet loss correlates with “rx-pause” frames on the switch1-cpu port and rx-drop on ether2. I also see some drops on ether1 which is connected directly to the VDSL2 modem.

Reading through the forums, I’ve tried:

  1. Disabling HW acceleration on the bridge ports for ether2,3.
  2. Changing the queue type to “multi-queue-ethernet-default” on ether2,3 and also mq-pfifo-limit=300 for the “multi-queue-ethernet-default” type.
  3. Disabling snmp as it’s not being used.

None of these have changed the behaviour.

Looking at L2 configuration, I have:

/interface ethernet
set [ find default-name=ether1 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-full comment=“Internet uplink” mtu=1492
set [ find default-name=ether2 ] advertise=1000M-full comment=“Connects to SW1 ether2”
set [ find default-name=ether3 ] advertise=1000M-full comment=“Connects to SW2 ether3”

/interface bridge
add admin-mac=C4:AD:34:DB:A1:FE auto-mac=no mtu=1500 name=bridge1 priority=0x1 vlan-filtering=yes

/interface bridge port
add bridge=bridge1 comment=defconf hw=no interface=ether2 internal-path-cost=100 path-cost=100 priority=0x50
add bridge=bridge1 comment=defconf hw=no interface=ether3 priority=0x60
add bridge=bridge1 interface=wlan1 pvid=40
add bridge=bridge1 interface=wlan2 pvid=40
add bridge=bridge1 interface=ether1 pvid=50

/interface bridge vlan
add bridge=bridge1 tagged=bridge1,ether2,ether3,ether4 vlan-ids=10
add bridge=bridge1 tagged=bridge1,ether2,ether3,ether4 untagged=ether5 vlan-ids=20
add bridge=bridge1 tagged=bridge1,ether2,ether3,ether4 vlan-ids=25
add bridge=bridge1 tagged=bridge1,ether2,ether3,ether4 vlan-ids=30
add bridge=bridge1 tagged=bridge1,ether2,ether3,ether4 vlan-ids=40
add bridge=bridge1 tagged=bridge1,ether2,ether3,ether4 untagged=ether1 vlan-ids=50
add bridge=bridge1 tagged=bridge1,ether2,ether3,ether4 vlan-ids=35

/interface vlan
add interface=bridge1 name=v10 vlan-id=10
add interface=bridge1 name=v20 vlan-id=20
add arp=proxy-arp interface=bridge1 name=v25 vlan-id=25
add interface=bridge1 name=v30 vlan-id=30
add interface=bridge1 name=v35 vlan-id=35
add interface=bridge1 name=v40 vlan-id=40
add interface=bridge1 name=v50_nbn vlan-id=50

/interface vrrp
add interface=v35 name=vrrp_v35 vrid=35
add interface=v20 name=vrrp_v20 vrid=20
add interface=v40 name=vrrp_40 vrid=40
add interface=v30 name=vrrp_v30 vrid=30
add interface=v10 name=vrrp_v10 priority=255 vrid=10
add interface=v25 name=vrrp_v25 vrid=25

/ip address
add address=192.168.255.1/30 interface=v50_nbn network=192.168.255.0
add address=192.168.10.1 interface=vrrp_v10 network=192.168.10.1
add address=192.168.20.1 interface=vrrp_v20 network=192.168.20.1

add address=192.168.10.2/24 interface=v10 network=192.168.10.0
add address=192.168.20.2/24 interface=v20 network=192.168.20.0

/queue type
set 8 mq-pfifo-limit=300
/queue interface
set ether2 queue=multi-queue-ethernet-default
set ether3 queue=multi-queue-ethernet-default


Is there anything in this configuration that appears amiss or any suggestions on how I can troubleshoot this further?