RB3011 VLAN config problem

RouterOS General
1

Hi,

i Just got a fresh RB3011 and try to migrate my working PPPoE config from an existing ROS device.
But I am running into some trouble that gives me serious headache: I don’t get that PPPoE config running on the RB3011.

The setup is trivial:

  • ether5 used in standard LAN for VDSL2 modem connectivity
  • ether5 gets VLAN tag 7 to run PPPoE on

The rock solid working config goes like this: (PC hardware, no switch chips)

[admin@Grobi] /interface> export
# dec/15/2016 21:45:24 by RouterOS 6.37.3
# software id = XXXX-YYYY
#
/interface bridge
add name=bridge-vlan1
add name=bridge-vlan7
add name=bridge-vlan8
add name=bridge-vlan10

/interface pppoe-client
add add-default-route=yes default-route-distance=10 dial-on-demand=yes disabled=no interface=bridge-vlan7 max-mru=1492 \
    max-mtu=1492 name=pppoe-Telekom password=something use-peer-dns=yes user=something

/interface vlan
add comment=Telekom interface=ether1 name=VLAN7 vlan-id=7

/interface bridge port
add bridge=bridge-vlan1 interface=ether1
add bridge=bridge-vlan7 interface=VLAN7

[admin@Grobi] /interface>

After trying half a day with the switch chips VLAN tagging options I went back to the most basic setup on the RB3011: (no success at all)

# dec/15/2016 21:51:32 by RouterOS 6.37.3
# software id = XXXX-YYYY
#
/interface ethernet
set [ find default-name=ether1 ] name=ether1-master
set [ find default-name=ether2 ] master-port=ether1-master
set [ find default-name=ether3 ] master-port=ether1-master
set [ find default-name=ether4 ] master-port=ether1-master
--> ether5 not a slave!
set [ find default-name=ether6 ] name=ether6-master
set [ find default-name=ether7 ] master-port=ether6-master
set [ find default-name=ether8 ] master-port=ether6-master
set [ find default-name=ether9 ] master-port=ether6-master
set [ find default-name=ether10 ] master-port=ether6-master
/interface ethernet switch port
set 0 default-vlan-id=1
set 1 default-vlan-id=1
set 2 default-vlan-id=1
set 3 default-vlan-id=1
set 4 default-vlan-id=1
set 5 default-vlan-id=1
set 6 default-vlan-id=1
set 7 default-vlan-id=1
set 8 default-vlan-id=1
set 9 default-vlan-id=1
set 10 default-vlan-id=1
set 11 default-vlan-id=1

/interface bridge
add admin-mac=6C:3B:6B:F8:BD:91 auto-mac=no comment=defconf name=bridge-vlan1
add name=bridge-vlan7 protocol-mode=none
/interface bridge port
add bridge=bridge-vlan1 comment=defconf interface=ether6-master
add bridge=bridge-vlan1 comment=defconf interface=sfp1
add bridge=bridge-vlan1 interface=ether1-master
add bridge=bridge-vlan1 interface=ether5
add bridge=bridge-vlan7 interface=ether5-vlan7

/interface vlan
add interface=ether5 loop-protect-disable-time=0s loop-protect-send-interval=0s name=ether5-vlan7 vlan-id=7
add interface=bridge-vlan1 name=vlan8 vlan-id=8
add interface=bridge-vlan1 name=vlan10 vlan-id=10

/interface pppoe-client
add add-default-route=yes default-route-distance=10 dial-on-demand=yes disabled=no interface=ether5-vlan7 max-mru=1492 \
    max-mtu=1492 name=pppoe-Telekom password=something use-peer-dns=yes user=something

Of course this is not the most elegant but the simplest solution - that simply does not work.
The router is unable to communicate to the modem on VLAN 7. Communication on VLAN 1 (default here) works fine.

Any idea?

Regards
Uwe

2

Don’t set the PPPoe client to a slave interface. Either set it to the bridge or remove ether5-vlan7 from the bridge.

3

Hi,

removing it from the slave doesn’t get it running. Here I changed to the bridge interface:

[admin@temp] /interface pppoe-client> pri
Flags: X - disabled, R - running 
 0  R name="pppoe-Telekom" max-mtu=1492 max-mru=1492 mrru=disabled interface=bridge-vlan7 
      user="something" password="something" profile=default keepalive-timeout=60 
      service-name="" ac-name="" add-default-route=yes default-route-distance=10 dial-on-demand=yes use-peer-dns=yes 
      allow=pap,chap,mschap1,mschap2 
[admin@temp] /interface pppoe-client> monitor pppoe-Telekom 
  status: waiting for packets...

Your proposal to remove the interface from the bridge and use ether5-vlan7 directly doesn’t work as well.
I tried both already before opening this post. :frowning:
Normally I am quite well aware of what I am doing on ROS. I have several VLAN trunks and mixed mode configs running on my devices.
I have to admit I have no further ideas, suspect it is something obvious I am overlooking or something quirky with the RB3011. It was never an issue on x86 or on MIPS.
Frustrated - need professional help :wink:

4

Hello, your config should be something like this :

/interface vlan

add interface=ether5 name=vlan-pppoe vlan-id=7

/interface pppoe-client
add disabled=no interface=vlan-pppoe max-mru=1480 max-mtu=1480 mrru=1600 name=pppoepassword=****** user=******

5

The switch chip is stripping the vlan tag. Default is to treat packets with a tag that isn’t in the vlan table as not being tagged (fallback). Add vlan 7 and 1 to the switch vlan table for the ports needing it or change the mode on the ports to check.
http://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features

6

SOLVED - nothing wrong with the RB3011 in that aspect :slight_smile:

As I said in a previous post it is something simple I overlook or something quirky. Well it is in fact simple:
The PPPoE client has a dial-on-demand option that prevents the link to be established if no data is waiting.
The “old” setup had enough constant load to trigger a constant online situation. This was obviously not the case in my bare minimum test setup.

Anyway thanks for all your hints and ideas!
I’ll have a beer now, that config gave me a headache and was so easy to solve in the end.

Cheers
Uwe