RB2011UAS Duplicate Packets

Hello,

I’m trying to setup my old RB2011UAS for a small project.
I currently have it connected as follows:
eth1 - Uplink to ISP (Untagged)
eth2- Server 1 - Untagged VLAN 113, Tagged VLANs 114 + 115
eth3- Server 2 - Untagged VLAN 113, Tagged VLANs 114 + 115
eth4- Server 3 - Untagged VLAN 113, Tagged VLANs 114 + 115
eth5- Server 4 - Untagged VLAN 113, Tagged VLANs 114 + 115
eth6- Server 1 BMC - Untagged 112
eth7- Server 2 BMC - Untagged 112
eth8- Server 3 BMC - Untagged 112
eth9- Server 4 BMC - Untagged 112

I am able to ping every device from the router, and every device can ping each other, but for some reason I am getting duplicate packets. For example, if I ping from 10.254.113.2 to 10.254.113.3:

# ping -c4 10.254.113.3
PING 10.254.113.3 (10.254.113.3) 56(84) bytes of data.
64 bytes from 10.254.113.3: icmp_seq=1 ttl=64 time=0.226 ms
64 bytes from 10.254.113.3: icmp_seq=1 ttl=64 time=0.239 ms (DUP!)
64 bytes from 10.254.113.3: icmp_seq=1 ttl=64 time=0.321 ms (DUP!)
64 bytes from 10.254.113.3: icmp_seq=1 ttl=64 time=0.344 ms (DUP!)
64 bytes from 10.254.113.3: icmp_seq=2 ttl=64 time=0.245 ms
64 bytes from 10.254.113.3: icmp_seq=2 ttl=64 time=0.274 ms (DUP!)
64 bytes from 10.254.113.3: icmp_seq=2 ttl=64 time=0.281 ms (DUP!)
64 bytes from 10.254.113.3: icmp_seq=2 ttl=64 time=0.288 ms (DUP!)
64 bytes from 10.254.113.3: icmp_seq=3 ttl=64 time=0.265 ms
64 bytes from 10.254.113.3: icmp_seq=3 ttl=64 time=0.294 ms (DUP!)
64 bytes from 10.254.113.3: icmp_seq=3 ttl=64 time=0.302 ms (DUP!)
64 bytes from 10.254.113.3: icmp_seq=3 ttl=64 time=0.308 ms (DUP!)
64 bytes from 10.254.113.3: icmp_seq=4 ttl=64 time=0.252 ms

--- 10.254.113.3 ping statistics ---
4 packets transmitted, 4 received, +9 duplicates, 0% packet loss, time 71ms
rtt min/avg/max/mdev = 0.226/0.279/0.344/0.040 ms

My config is as follows:

/interface bridge
add igmp-snooping=yes name=bridge0
add igmp-snooping=yes name=bridge1

/interface ethernet
set [ find default-name=ether10 ] disabled=yes
set [ find default-name=sfp1 ] disabled=yes

/interface vlan
add interface=bridge0 name=vlan112 vlan-id=112
add interface=bridge1 name=vlan113 vlan-id=113
add interface=bridge1 name=vlan114 vlan-id=114

/interface ethernet switch port
set 1 vlan-header=always-strip vlan-mode=fallback
set 2 default-vlan-id=113 vlan-header=add-if-missing vlan-mode=secure
set 3 default-vlan-id=113 vlan-header=add-if-missing vlan-mode=secure
set 4 default-vlan-id=113 vlan-header=add-if-missing vlan-mode=secure
set 5 default-vlan-id=113 vlan-header=add-if-missing vlan-mode=secure
set 6 default-vlan-id=112 vlan-header=always-strip vlan-mode=secure
set 7 default-vlan-id=112 vlan-header=always-strip vlan-mode=secure
set 8 default-vlan-id=112 vlan-header=always-strip vlan-mode=secure
set 9 default-vlan-id=112 vlan-header=always-strip vlan-mode=secure
set 10 default-vlan-id=112 vlan-header=always-strip vlan-mode=secure
set 11 vlan-mode=secure
set 12 vlan-mode=secure

/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge0 interface=ether6
add bridge=bridge0 interface=ether7
add bridge=bridge0 interface=ether8
add bridge=bridge0 interface=ether9
add bridge=bridge0 interface=ether10

/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes

/interface ethernet switch vlan
add ports=ether6,ether7,ether8,ether9,ether10,switch2-cpu switch=switch2 vlan-id=112
add independent-learning=no ports=ether2,ether3,ether4,ether5,switch1-cpu switch=switch1 vlan-id=113
add independent-learning=no ports=ether2,ether3,ether4,ether5,switch1-cpu switch=switch1 vlan-id=114
add independent-learning=no ports=ether2,ether3,ether4,ether5,switch1-cpu switch=switch1 vlan-id=115

/ip address
add address=10.254.112.1/24 interface=vlan112 network=10.254.112.0
add address=10.254.113.1/24 interface=vlan113 network=10.254.113.0
add address=10.254.114.1/24 interface=vlan114 network=10.254.114.0

I can’t spot what could be causing the packet duplication. As far as I can see on all examples, this should be fine.

vlan issue

I´d try the interface bridge port settings for the vlans instead of the switchport, never had a problem with that so far.

The problem is, as far as I am aware, on the RB2011UAS using the bridge port for vlans uses CPU instead of the hardware offloading which is why i wanted to get it working purely with the switch port settings