Hi,
I have a problem with my configuration.
I have several swithes (RB951G-2HnD and one RB3011
My core router (RB951G-2HnD) is connected from Ether5 to the RB3011 Ether 1.
On the RB3011 Ether 10 I want to connect an other RB951G-2HnD Ether1).
My Management network is VLAN 9
From the Core to the RB3011 it is working but I can's see the RB951G-2HnD connected to ether10 on the RB3011.
I think it is going wrong with the two switch chips in the RB3011 and to connect them to each other.
Below the configuration of the RB3011.
Can someone see the mistake of me?
###################################################################################
MMM MMM KKK TTTTTTTTTTT KKK
MMMM MMMM KKK TTTTTTTTTTT KKK
MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK
###################################################################################
Installation SW01 (RB3011
Set the Identity of the device
/system identity set name=SW01
Create a group of switch ports (Switch chip 1)
/interface ethernet
set numbers=,1,2,3,4 master-port=ether1
Create a gropu of switch ports (Switch chip 2)
/interface ethernet
set numbers=5,6,7,8 master-port=ether10
Create a Bridge
/interface bridge
add name=BRIDGE01
Create the needed VLANs
/interface vlan
add name=VLAN_LAN_MGMT interface=ether1 vlan-id=9
add name=VLAN_WLAN_DATA interface=BRIDGE01 vlan-id=12
add name=VLAN_WLAN_GUEST interface=BRIDGE01 vlan-id=14
add name=VLAN_LAN_MFP interface=BRIDGE01 vlan-id=15
add name=VLAN_LAN_GAME interface=BRIDGE01 vlan-id=16
add name=VLAN_LAN_CAMERA interface=BRIDGE01 vlan-id=17
add name=VLAN_LAN_TVMM interface=BRIDGE01 vlan-id=18
add name=VLAN_WLAN_SP interface=BRIDGE01 vlan-id=19
add name=VLAN_LAN_SERVER interface=BRIDGE01 vlan-id=900
Add an IP address for management
/ip address
add address=172.16.0.2/25 network=172.16.0.0 interface=VLAN_LAN_MGMT
Add VLAN table entries
/interface ethernet switch vlan
add port=switch1-cpu,ether1,ether2,ether3,ether4 switch=switch1 vlan-id=9
add port=ether1,ether4 switch=switch1 vlan-id=10
add port=ether1 switch=switch1 vlan-id=12
add port=ether1 switch=switch1 vlan-id=14
add port=ether1 switch=switch1 vlan-id=15
add port=ether1 switch=switch1 vlan-id=16
add port=ether1 switch=switch1 vlan-id=17
add port=ether1 switch=switch1 vlan-id=18
add port=ether1 switch=switch1 vlan-id=19
add port=ether5 switch=switch1 vlan-id=900
add port=switch2-cpu,ether8,ether9,ether10 switch=switch2 vlan-id=9
add port=ether8,ether9,ether10 switch=switch2 vlan-id=10
add port=ether8,ether9,ether10 switch=switch2 vlan-id=12
add port=ether8,ether9,ether10 switch=switch2 vlan-id=14
add port=ether8,ether9,ether10 switch=switch2 vlan-id=15
add port=ether8,ether9,ether10 switch=switch2 vlan-id=16
add port=ether7,ether8,ether9,ether10 switch=switch2 vlan-id=17
add port=ether8,ether9,ether10 switch=switch2 vlan-id=18
add port=ether8,ether9,ether10 switch=switch2 vlan-id=19
add port=ether4,ether6,ether8,ether9,ether10 switch=switch2 vlan-id=900
Assign "vlan-mode" and "vlan-header" mode for each port and also "default-vlan-id" on ingress for each access port.
Setting "vlan-mode=secure" ensures strict use of VLAN table.
Setting "vlan-header=always-strip" for access ports removes VLAN header from frame when it leaves the switch chip.
Setting "vlan-header=add-if-missing" for trunk port adds VLAN header to untagged frames.
"Default-vlan-id" specifies what VLAN ID is added for untagged ingress traffic of the access port.
/interface ethernet switch port
set switch1-cpu vlan-mode secure vlan-header=leave-as-is
set switch2-cpu vlan-mode secure vlan-header=leave-as-is
set ether2 vlan-mode secure vlan-header=always-strip default-vlan-id=9
set ether3 vlan-mode secure vlan-header=always-strip default-vlan-id=9
set ether4 vlan-mode=secure vlan-header=add-if-missing
set ether5 vlan-mode secure vlan-header=always-strip default-vlan-id=900
set ether6 vlan-mode secure vlan-header=always-strip default-vlan-id=900
set ether7 vlan-mode secure vlan-header=always-strip default-vlan-id=17
set ether8 vlan-mode=secure vlan-header=add-if-missing
set ether9 vlan-mode=secure vlan-header=add-if-missing
set ether10 vlan-mode=secure vlan-header=add-if-missing
Bridge the two switch groups together
/interface bridge port
add bridge=BRIDGE01 interface=ether5
add bridge=BRIDGE01 interface=ether10
DNS Instellen
/ip dns set server=172.16.0.130
Default route toevoegen
/ip route add dst-address=0.0.0.0/0 gateway=172.16.0.1
SNTP Client configureren
/system ntp client set primary-ntp=172.16.0.130 secondary-ntp=172.16.0.131 enabled=yes
SNMP Server configureren
/snmp community
set [ find default=yes ] addresses=172.16.0.60/32
add addresses=172.16.0.60/32 authentication-password=O7ac6eV0TnpLJ155 authentication-protocol=SHA1
encryption-password=hHWhgw91Hed6s4S5 encryption-protocol=AES name=SNMPuser1 security=private
/snmp
set contact=ronald.verheij@skiffkick.nl.nl enabled=yes engine-id=SNMPuser1 location="Ring 225, Pernis, The Netherlands"
trap-generators=interfaces trap-interfaces=all trap-target=172.16.0.60 trap-version=3 trap-community=SNMPuser1
/snmp community set [find name=public] read-access=no
IP SERVICES configureren
/ip service set api disabled=yes
/ip service set telnet disabled=yes
/ip service set ftp disabled=yes
/ip service set api-ssl disabled=yes
/ip service set www address=172.16.0.0/21 disabled=yes
/ip service set www-ssl certificate=WEB_CONF port=4443 disabled=no
SYSLOG Server configureren
/system logging action
set 3 remote=172.16.0.20
/system logging
add action=remote topics=warning
add action=remote topics=info
add action=remote topics=critical
add action=remote topics=error
add action=remote topics=wireless
Zet de tijdzone goed
/system clock set time-zone-name=Europe/Amsterdam
Route instellen voor locale netwerk
/ip route add dst-address=172.16.0.0/21 gateway=172.16.0.1