Hi,
I’m trying to test a basic port isolation but fail.
I read and apply:
http://wiki.mikrotik.com/wiki/Manual:CRS_examples (port isolation example)
I want use 3 ports:
ether1-master as uplink (it can see all ports)
sfp1: only can see ether1 (isolated port)
sfp3: only can see ether1 (isolated port)
so sfp1 can’t see sfp3 (and all other ports are not used in this example)
ether1 is the master port in the switch, and sfpXX are slave
I execute this code under default factory configuration:
/interface ethernet switch port set ether1-master-local isolation-leakage-profile-override=0
/interface ethernet switch port set sfp1-slave-local isolation-leakage-profile-override=1
/interface ethernet switch port set sfp3-slave-local isolation-leakage-profile-override=1
/interface ethernet switch port-isolation add port-profile=1 ports=ether1-master-local type=dst
Code is simple… but sfp1 can see sfp3 with ping of devices connected…
What is worng?
The actual export config is this:
/interface ethernet switch port-isolation add port-profile=1 ports=ether1-master-local type=dst
I will attach images, export is confuse
