Problem - Traffic Shaping on CRS3xx using Switch Rules

RouterOS General
1

Hey Mates,

I’ve a CRS309 (ver. 6.46.3), and trying to limit b/w on per VLAN bases using switch rules as described here: https://wiki.mikrotik.com/wiki/Manual:CRS3xx_series_switches#Traffic_Shaping . But somehow these rules do not seem to have any effect in terms of traffic shaping. Following is my running configuration. Please point out if I’ve missed something.

/interface ethernet
set [ find default-name=sfp-sfpplus1 ] advertise="10M-half,10M-full,100M-half,\
    100M-full,1000M-half,1000M-full,2500M-full,10000M-full"
set [ find default-name=sfp-sfpplus2 ] advertise="10M-half,10M-full,100M-half,\
    100M-full,1000M-half,1000M-full,2500M-full,5000M-full,10000M-full" \
    auto-negotiation=no speed=10Gbps
set [ find default-name=sfp-sfpplus8 ] advertise="10M-half,10M-full,100M-half,\
    100M-full,1000M-half,1000M-full,2500M-full,5000M-full,10000M-full"
/interface bridge
add frame-types=admit-only-vlan-tagged name=Bridge protocol-mode=none \
    vlan-filtering=yes
/interface vlan
add interface=Bridge name=MGMT_V99 vlan-id=99
/interface bridge port
add bridge=Bridge interface=sfp-sfpplus1
add bridge=Bridge interface=sfp-sfpplus2
add bridge=Bridge interface=sfp-sfpplus3
add bridge=Bridge interface=sfp-sfpplus4
add bridge=Bridge interface=sfp-sfpplus5
add bridge=Bridge interface=sfp-sfpplus6
add bridge=Bridge interface=sfp-sfpplus7
add bridge=Bridge interface=sfp-sfpplus8
add bridge=Bridge interface=ether1
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes
/interface bridge vlan
add bridge=Bridge tagged=Bridge,sfp-sfpplus8 vlan-ids=99
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=501
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=502
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=503
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=504
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=505
add bridge=Bridge tagged=\
    sfp-sfpplus1,sfp-sfpplus6 vlan-ids=521
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus6 vlan-ids=522
add bridge=Bridge tagged=\
    sfp-sfpplus1,sfp-sfpplus6 vlan-ids=601
add bridge=Bridge tagged=\
    sfp-sfpplus1,sfp-sfpplus6 vlan-ids=602
add bridge=Bridge tagged=\
    sfp-sfpplus1,sfp-sfpplus6 vlan-ids=603
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus6 \
    vlan-ids=604
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=1002
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=552
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=553
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=551
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=805
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=804
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=806
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=807
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=554
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=809
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=803
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=3175
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=1003
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=1004
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=555
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=556
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=557
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=558
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=559
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 \
    vlan-ids=1009
add bridge=Bridge tagged=sfp-sfpplus1,sfp-sfpplus8 vlan-ids=723
add bridge=Bridge tagged=\
    sfp-sfpplus1,sfp-sfpplus8 vlan-ids=560
/interface ethernet switch rule
add ports=sfp-sfpplus6,sfp-sfpplus1 rate=1100M switch=switch1 vlan-id=521
add ports=sfp-sfpplus6,sfp-sfpplus1 rate=400M switch=switch1 vlan-id=602

Any help will be appreciated.

Thank you.
Rahul

2

i think currently CRS3xx cannot do that kind of discrimination by VLAN

i only had tested global shapping per port in switch → port settings ingress egress

3

The wiki says it supports VLAN as well as MAC based traffic shaping: https://wiki.mikrotik.com/wiki/Manual:CRS3xx_series_switches#Traffic_Shaping

4

Update

I’ve tested on one CRS317 I have. The rule works perfectly fine. Bandwidth for that particular VLAN was limited to the rate defined in rule. But that 317 has ROS 6.46 vs 6.46.3 on this CRS309.

I’m not sure yet, if the issue is with 309 OR ROS-6.46.3 OR a combination of these two.