PVID

[ashleo]

Hi all,

I currently have 2 of the crs305-1g-4s+in working along side another manufacturers switches… they currently have a PVID of 1 but whenever i change the connected ports PVID to 100 on the ports i lose comms?

Thanks,
Ash

[holvoetn]

Interesting read:

Rules of the Mikrotik Club:

1. You do not use VLAN1
2. You DO NOT use VLAN1
3. You remove default user admin and set a strong password before connecting to the internet.
4. You do not use Quickset.
5. You do not use detect internet.
   6)…

Now #6 might be added as either:
6) You set automatic updates for routerboard firmware but not for ROS.
or
6) You do not set automatic updates.
.

And then this:

@mibarra88

Actually VLAN ID 1 is no different than others. If everything is configured correctly, also VLAN 1 should work just fine. But there’s a gotcha: VLAN ID 1 is used as default all over the place, it is not shown in output of export (since it’s default) - unless export is run with verbose option. So it’s really easy to miss some VLAN ID 1 setting somewhere where it should not be and sometimes it’s hard to get rid of that setting as well. Hence the easiest way of not getting into trouble is to stay away from using VLAN ID 1.

Which means you should not just change a port PVID without first making sure pvid=1 (and VLAN in general) is handled correctly all over the place on those Mikrotik devices.
Or things will break …

[ashleo]

Thanks for the reply.

So i have PVID of 100 (also vlan100 configured) on the ‘other manufacturers’ ports, vlan100 configured on the Mikrotik along with OSPF, I configure the bridge to PVID 100 but lose connection to the Mikrotiks…

all works nicely on PVID1…

Any advice?

Thanks,

[tdw]

Likely you are mixing tagged and untagged on the bridge-to-CPU port, if you set pvid= on the bridge itself there should not be an /interface vlan attached to the bridge with the same VLAN ID. Post your configuration, otherwise it is just guesswork.

[anav]

All smart switches come with PVID of 1 on all ports, its removed only when setting up access ports with a different vlan tag.
All trunk ports keep pvid1 as untagged, in the background. Normal.

1. Ensure you identify the trusted or management vlan, should not be 1 obviously. This is the vlan where the smart device will get its IP address from.

2. The MIKROTIK switch bridge is only tagged on /interface bridge vlan on the managment or trusted vland ID.
   The rest of the vlans are tagged on the incoming trunk port and either tagged on outgoing trunk ports or untagged on local switch access ports.

See pcunites article, (look at switch examples) - http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/303
See a decent vid: https://www.youtube.com/watch?v=YLtGQAQ8iS0&t=77s

[ashleo]

software id = 3JHN-JCBX

model = CRS305-1G-4S+

serial number = HGP09KGBNNP

/interface bridge
add name=Loopback
add admin-mac=D4:01:C3:F2:01:90 auto-mac=no comment=defconf name=bridge
/interface vlan
add interface=bridge name=vlan100 vlan-id=100
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/routing id
add disabled=no id=101.101.101.101 name=id-101 select-dynamic-id=""
/routing ospf instance
add disabled=no name=ospf-instance-1
/routing ospf area
add disabled=no instance=ospf-instance-1 name=ospf-area-1
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=sfp-sfpplus1
add bridge=bridge comment=defconf interface=sfp-sfpplus2
add bridge=bridge comment=defconf interface=sfp-sfpplus3
add bridge=bridge comment=defconf interface=sfp-sfpplus4
/ip address
add address=192.168.88.101/24 comment=defconf interface=ether1 network=
192.168.88.0
add address=101.101.101.101 interface=Loopback network=101.101.101.101
add address=10.0.0.101/22 interface=vlan100 network=10.0.0.0
/routing ospf interface-template
add area=ospf-area-1 disabled=no
/system note
set show-at-login=no
/system routerboard settings
set boot-os=router-os
/system swos
set address-acquisition-mode=static identity=Mikrotik-1

[anav]

confused, you only have one vlan. Suggest expensive switches can be ditched for some basic 5 port TPLINK switches.
I will gladly take these overkill devices off your hands. Will send $$ for postage.

In other words I see no effort to neither actually read the offered article, nor watch the offered video, and apply that to
a. data vlans
b. management vlan

Good day, will move to others.

[tdw]

Currently the bridge is not set to be VLAN aware so all tagged or untagged packets will pass between any ports, management will use VLAN 100 tagged. What are you trying to achieve?

[ashleo]

Hi TDW

Not sure if the poor drawing will help but we are using vlan 100 between all switches as its OSPF routing vlan 100 and in turn PVID 100 between ports.

I can’t crack the PVID on the MikroTiks (i have kind of worked out OSPF on them)…

[tdw]

“vlan 100 between all switches as its OSPF routing vlan 100 and in turn PVID 100 between ports” is confusing - is VLAN 100 tagged or untagged from Site A - CRS / CRS - CRS / CRS - Site B. The posted configuration currently expects VLAN 100 tagged so changing ports to have a PVID of 100 wouldn’t work in any case. Also, OSPF routing has nothing directly to do with VLANs.

[ashleo]

Thanks TDW

Are you able to help with the config?

Many thanks,

Ash