Hi,
I made the following poc setup
Now the problem is when attaching the star. The network is looping hard.
On all the interfaces loop protections is enabled. RSTP is configured.
There’s something i did wrong but i can’t pin point the problem.
RT01
feb/18/2020 09:07:38 by RouterOS 6.46.3
model = CCR1009-7G-1C-1S+
/interface bridge
add fast-forward=no name=bridge priority=0x10
/interface ethernet
set [ find default-name=ether6 ] mac-address=C4:AD:34:18:CA:79
set [ find default-name=sfp-sfpplus1 ] loop-protect=on
/interface vlan
add interface=bridge name=vlan20 vlan-id=20
add interface=bridge name=vlan1020 vlan-id=1020
add interface=bridge name=vlan1021 vlan-id=1021
add interface=bridge name=vlan1022 vlan-id=1022
add interface=bridge name=vlan2000 vlan-id=2000
add interface=bridge name=vlan2010 vlan-id=2010
add interface=bridge name=vlan2012 vlan-id=2012
add interface=bridge name=vlan2055 vlan-id=2055
add interface=bridge name=vlan2524 vlan-id=2524
add interface=bridge name=vlan3000 vlan-id=3000
add interface=bridge name=vlan3001 vlan-id=3001
/interface bonding
add mode=802.3ad name=BondLACP slaves=ether6,ether5 transmit-hash-policy=
layer-2-and-3
/interface vrrp
add interface=vlan1020 name=vrrp1020 priority=200
add interface=vlan1021 name=vrrp1021 priority=200 vrid=2
add interface=vlan1022 name=vrrp1022 priority=200 vrid=3
add interface=vlan2010 name=vrrp2010 priority=200 vrid=5
add interface=vlan2012 name=vrrp2012 priority=200 vrid=6
add interface=vlan2055 name=vrrp2055 priority=200 vrid=7
add interface=vlan2524 name=vrrp2524 priority=200 vrid=8
add interface=vlan3000 name=vrrp3000 priority=200 vrid=10
add interface=vlan3001 name=vrrp3001 priority=200 vrid=11
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.255.2-192.168.255.254
add name=dhcp_pool1 ranges=192.168.255.2-192.168.255.254
add name=dhcp_pool2 ranges=192.168.255.2-192.168.255.254
add name=dhcp_pool3 ranges=192.168.255.2-192.168.255.254
add name=dhcp_pool4 ranges=192.168.255.2-192.168.255.254
/ip dhcp-server
add address-pool=dhcp_pool4 disabled=no name=dhcp1
/port
set 2 baud-rate=115200 data-bits=8 flow-control=none name=usb3 parity=none
stop-bits=1
/dude
set enabled=yes
/interface bridge port
add bridge=bridge interface=ether4
add bridge=bridge interface=ether3
add bridge=bridge interface=ether2 pvid=3000
add bridge=bridge interface=sfp-sfpplus1
add bridge=bridge interface=ether1 pvid=3000
add bridge=bridge interface=BondLACP
add bridge=bridge interface=combo1
/ip address
add address=10.200.10.2/24 interface=vlan1020 network=10.200.10.0
add address=10.200.10.1 interface=vrrp1020 network=10.200.10.1
add address=10.210.10.2/24 interface=vlan1021 network=10.210.10.0
add address=10.210.10.1 interface=vrrp1021 network=10.210.10.1
add address=10.220.10.2/24 interface=vlan1022 network=10.220.10.0
add address=10.220.10.1 interface=vrrp1022 network=10.220.10.1
add address=10.200.200.3/24 interface=vlan2000 network=10.200.200.0
add address=10.10.10.2/24 interface=vlan2010 network=10.10.10.0
add address=10.10.10.254 interface=vrrp2010 network=10.10.10.254
add address=10.10.12.2/24 interface=vlan2012 network=10.10.12.0
add address=10.10.12.1 interface=vrrp2012 network=10.10.12.1
add address=10.255.255.2/24 interface=vlan2055 network=10.255.255.0
add address=10.255.255.1 interface=vrrp2055 network=10.255.255.1
add address=10.25.24.2/24 interface=vlan2524 network=10.25.24.0
add address=10.25.24.1 interface=vrrp2524 network=10.25.24.1
add address=10.110.110.2/24 interface=vlan3001 network=10.110.110.0
add address=10.110.110.1 interface=vrrp3001 network=10.110.110.1
add address=172.20.255.2/24 interface=vlan3000 network=172.20.255.0
add address=172.20.255.1/24 interface=vrrp3000 network=172.20.255.0
/ip dhcp-server network
add address=192.168.255.0/24 gateway=192.168.255.1
/ip dns
set servers=1.1.1.1,1.0.0.1
/ip route
add distance=1 gateway=172.20.255.254
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api address=10.200.200.0/24
set api-ssl disabled=yes
/lcd
set backlight-timeout=never color-scheme=dark default-screen=stats
read-only-mode=yes
/lcd interface
set sfp-sfpplus1 disabled=yes
set combo1 disabled=yes
set ether1 disabled=yes
set ether2 disabled=yes
set ether3 disabled=yes
set ether4 disabled=yes
set ether5 disabled=yes
set ether6 disabled=yes
set ether7 disabled=yes
add disabled=yes timeout=1s
add interface=vrrp3000 timeout=1s
/lcd interface pages
add interfaces=vrrp3000
/snmp
set trap-version=2
/system clock
set time-zone-name=Europe/Amsterdam
/system console
add disabled=no port=usb3
/system identity
set name=-CORE-RT01
/system ntp client
set enabled=yes primary-ntp=95.46.198.21 secondary-ntp=5.79.108.34
/system routerboard settings
set auto-upgrade=yes
RT02
feb/18/2020 09:08:21 by RouterOS 6.46.2
model = CCR1009-7G-1C-1S+
/interface bridge
add fast-forward=no name=bridge priority=0x10
/interface ethernet
set [ find default-name=ether6 ] mac-address=C4:AD:34:1C:45:79
set [ find default-name=sfp-sfpplus1 ] loop-protect=on
/interface vlan
add interface=bridge name=vlan1020 vlan-id=1020
add interface=bridge name=vlan1021 vlan-id=1021
add interface=bridge name=vlan1022 vlan-id=1022
add interface=bridge name=vlan2000 vlan-id=2000
add interface=bridge name=vlan2010 vlan-id=2010
add interface=bridge name=vlan2012 vlan-id=2012
add interface=bridge name=vlan2055 vlan-id=2055
add interface=bridge name=vlan2524 vlan-id=2524
add interface=bridge name=vlan3000 vlan-id=3000
add interface=bridge name=vlan3001 vlan-id=3001
/interface bonding
add mode=802.3ad name=bondLACP slaves=ether6,ether5 transmit-hash-policy=
layer-2-and-3
/interface vrrp
add interface=vlan1020 name=vrrp1020
add interface=vlan1021 name=vrrp1021 vrid=2
add interface=vlan1022 name=vrrp1022 vrid=3
add interface=vlan2010 name=vrrp2010 vrid=5
add interface=vlan2012 name=vrrp2012 vrid=6
add interface=vlan2055 name=vrrp2055 vrid=7
add interface=vlan2524 name=vrrp2524 vrid=8
add interface=vlan3000 name=vrrp3000 vrid=10
add interface=vlan3001 name=vrrp3001 vrid=11
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.255.2-192.168.255.254
add name=dhcp_pool1 ranges=192.168.255.2-192.168.255.254
add name=dhcp_pool2 ranges=192.168.255.2-192.168.255.254
add name=dhcp_pool3 ranges=192.168.255.2-192.168.255.254
add name=dhcp_pool4 ranges=192.168.255.2-192.168.255.254
/interface bridge port
add bridge=bridge interface=ether4
add bridge=bridge interface=ether3
add bridge=bridge interface=ether2 pvid=3000
add bridge=bridge interface=sfp-sfpplus1
add bridge=bridge interface=ether1 pvid=3000
add bridge=bridge interface=bondLACP
/ip address
add address=10.200.10.3/24 interface=vlan1020 network=10.200.10.0
add address=10.200.10.1 interface=vrrp1020 network=10.200.10.1
add address=10.210.10.3/24 interface=vlan1021 network=10.210.10.0
add address=10.210.10.1 interface=vrrp1021 network=10.210.10.1
add address=10.220.10.3/24 interface=vlan1022 network=10.220.10.0
add address=10.220.10.1 interface=vrrp1022 network=10.220.10.1
add address=10.200.200.4/24 interface=vlan2000 network=10.200.200.0
add address=10.10.10.3/24 interface=vlan2010 network=10.10.10.0
add address=10.10.10.254 interface=vrrp2010 network=10.10.10.254
add address=10.10.12.3/24 interface=vlan2012 network=10.10.12.0
add address=10.10.12.1 interface=vrrp2012 network=10.10.12.1
add address=10.255.255.3/24 interface=vlan2055 network=10.255.255.0
add address=10.255.255.1 interface=vrrp2055 network=10.255.255.1
add address=10.25.24.3/24 interface=vlan2524 network=10.25.24.0
add address=10.25.24.1 interface=vrrp2524 network=10.25.24.1
add address=10.110.110.3/24 interface=vlan3001 network=10.110.110.0
add address=10.110.110.1 interface=vrrp3001 network=10.110.110.1
add address=172.20.255.3/24 interface=vlan3000 network=172.20.255.0
add address=172.20.255.1/24 interface=vrrp3000 network=172.20.255.0
/ip dhcp-server network
add address=192.168.255.0/24 gateway=192.168.255.1
/ip dns
set servers=1.1.1.1,1.0.0.1
/ip route
add distance=1 gateway=172.20.255.254
/ip service
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/lcd
set backlight-timeout=never color-scheme=dark default-screen=stats
read-only-mode=yes
/lcd interface
set sfp-sfpplus1 disabled=yes
set combo1 disabled=yes
set ether1 disabled=yes
set ether2 disabled=yes
set ether3 disabled=yes
set ether4 disabled=yes
set ether5 disabled=yes
set ether6 disabled=yes
set ether7 disabled=yes
add interface=vrrp3000 timeout=1s
/lcd interface pages
add interfaces=vrrp3000
/system clock
set time-zone-name=Europe/Amsterdam
/system identity
set name=-CORE-RT02
/system ntp client
set enabled=yes primary-ntp=95.46.198.21 secondary-ntp=5.79.108.34
/system routerboard settings
set auto-upgrade=yes
SW01
\
model = CRS326-24S+2Q+
/interface bridge
add fast-forward=no name=B_100
add fast-forward=no name=B_999
add fast-forward=no name=B_1015
add fast-forward=no name=B_1016
add fast-forward=no name=B_1020
add fast-forward=no name=B_1021
add fast-forward=no name=B_1022
add fast-forward=no name=B_1030
add fast-forward=no name=B_1031
add fast-forward=no name=B_1072
add fast-forward=no name=B_1073
add fast-forward=no name=B_1380
add fast-forward=no name=B_1381
add fast-forward=no name=B_1382
add fast-forward=no name=B_1895
add fast-forward=no name=B_1954
add fast-forward=no name=B_2000 priority=0x20
add fast-forward=no name=B_2010
add fast-forward=no name=B_2011
add fast-forward=no name=B_2012
add fast-forward=no name=B_2020
add fast-forward=no name=B_2055
add fast-forward=no name=B_2524
add fast-forward=no name=B_2525
add fast-forward=no name=B_3000
add fast-forward=no name=B_3001
/interface ethernet
set [ find default-name=qsfpplus1-1 ] speed=25Gbps
set [ find default-name=qsfpplus1-2 ] speed=25Gbps
set [ find default-name=qsfpplus1-3 ] speed=25Gbps
set [ find default-name=qsfpplus1-4 ] speed=25Gbps
set [ find default-name=qsfpplus2-1 ] speed=25Gbps
set [ find default-name=qsfpplus2-2 ] speed=25Gbps
set [ find default-name=qsfpplus2-3 ] speed=25Gbps
set [ find default-name=qsfpplus2-4 ] speed=25Gbps
set [ find default-name=sfp-sfpplus22 ] loop-protect=on
set [ find default-name=sfp-sfpplus23 ] loop-protect=on
set [ find default-name=sfp-sfpplus24 ] loop-protect=on
/interface vlan
add interface=sfp-sfpplus22 name=sfp-sfpplus22_vlan2000 vlan-id=2000
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan100 vlan-id=100
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan1015 vlan-id=1015
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan1016 vlan-id=1016
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan1020 vlan-id=1020
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan1021 vlan-id=1021
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan1022 vlan-id=1022
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan1030 vlan-id=1030
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan1031 vlan-id=1031
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan1072 vlan-id=1072
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan1073 vlan-id=1073
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan1380 vlan-id=1380
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan1381 vlan-id=1381
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan1382 vlan-id=1382
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan1895 vlan-id=1895
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan1954 vlan-id=1954
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan2000 vlan-id=2000
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan2010 vlan-id=2010
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan2011 vlan-id=2011
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan2012 vlan-id=2012
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan2020 vlan-id=2020
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan2055 vlan-id=2055
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan2524 vlan-id=2524
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan2525 vlan-id=2525
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan3000 vlan-id=3000
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan3001 vlan-id=3001
add interface=sfp-sfpplus23 name=sfp-sfpplus23_vlan999 vlan-id=999
add interface=sfp-sfpplus24 name=sfp-sfpplus24_vlan100 vlan-id=100
add interface=sfp-sfpplus24 name=sfp-sfpplus24_vlan1015 vlan-id=1015
add interface=sfp-sfpplus24 name=sfp-sfpplus24_vlan1016 vlan-id=1016
add interface=sfp-sfpplus24 name=sfp-sfpplus24_vlan1020 vlan-id=1020
add interface=sfp-sfpplus24 name=sfp-sfpplus24_vlan2000 vlan-id=2000
add interface=sfp-sfpplus24 name=sfp-sfpplus24_vlan2011 vlan-id=2011
add interface=sfp-sfpplus24 name=sfp-sfpplus24_vlan3000 vlan-id=3000
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge=B_2000 interface=sfp-sfpplus23_vlan2000
add bridge=B_2000 interface=sfp-sfpplus24_vlan2000
add bridge=B_100 interface=sfp-sfpplus23_vlan100
add bridge=B_999 interface=sfp-sfpplus23_vlan999
add bridge=B_1015 interface=sfp-sfpplus23_vlan1015
add bridge=B_1016 interface=sfp-sfpplus23_vlan1016
add bridge=B_1020 interface=sfp-sfpplus23_vlan1020
add bridge=B_1021 interface=sfp-sfpplus23_vlan1021
add bridge=B_1022 interface=sfp-sfpplus23_vlan1022
add bridge=B_1030 interface=sfp-sfpplus23_vlan1030
add bridge=B_1031 interface=sfp-sfpplus23_vlan1031
add bridge=B_1072 interface=sfp-sfpplus23_vlan1072
add bridge=B_1073 interface=sfp-sfpplus23_vlan1073
add bridge=B_1380 interface=sfp-sfpplus23_vlan1380
add bridge=B_1381 interface=sfp-sfpplus23_vlan1381
add bridge=B_1382 interface=sfp-sfpplus23_vlan1382
add bridge=B_1895 interface=sfp-sfpplus23_vlan1895
add bridge=B_1954 interface=sfp-sfpplus23_vlan1954
add bridge=B_2010 interface=sfp-sfpplus23_vlan2010
add bridge=B_2011 interface=sfp-sfpplus23_vlan2011
add bridge=B_2012 interface=sfp-sfpplus23_vlan2012
add bridge=B_2020 interface=sfp-sfpplus23_vlan2020
add bridge=B_2055 interface=sfp-sfpplus23_vlan2055
add bridge=B_2524 interface=sfp-sfpplus23_vlan2524
add bridge=B_2525 interface=sfp-sfpplus23_vlan2525
add bridge=B_3000 interface=sfp-sfpplus23_vlan3000
add bridge=B_3001 interface=sfp-sfpplus23_vlan3001
add bridge=B_100 interface=sfp-sfpplus24_vlan100
add bridge=B_1015 interface=sfp-sfpplus24_vlan1015
add bridge=B_1016 interface=sfp-sfpplus24_vlan1016
add bridge=B_1020 interface=sfp-sfpplus24_vlan1020
add bridge=B_2011 interface=sfp-sfpplus24_vlan2011
add bridge=B_3000 interface=sfp-sfpplus24_vlan3000
add bridge=B_2000 interface=sfp-sfpplus22_vlan2000
/ip address
add address=10.200.200.5/24 interface=B_2000 network=10.200.200.0
/ip dns
set servers=1.1.1.1,1.0.0.1
/ip route
add distance=1 gateway=10.200.200.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api address=172.16.205.0/24,10.200.200.0/24
set winbox address=10.200.200.0/24,172.16.205.0/24
set api-ssl disabled=yes
/system clock
set time-zone-name=Europe/Amsterdam
/system identity
set name=SW04997
/system ntp client
set enabled=yes primary-ntp=213.136.0.252 secondary-ntp=87.233.197.123
/system routerboard settings
set auto-upgrade=yes boot-os=router-os
sw02
feb/18/2020 09:09:25 by RouterOS 6.46.3
software id =
model = CRS326-24S+2Q+
serial number =
/interface bridge
add fast-forward=no name=B_100
add fast-forward=no name=B_999
add fast-forward=no name=B_1015
add fast-forward=no name=B_1016
add fast-forward=no name=B_1020
add fast-forward=no name=B_1021
add fast-forward=no name=B_1022
add fast-forward=no name=B_1030
add fast-forward=no name=B_1031
add fast-forward=no name=B_1072
add fast-forward=no name=B_1073
add fast-forward=no name=B_1380
add fast-forward=no name=B_1381
add fast-forward=no name=B_1382
add fast-forward=no name=B_1895
add fast-forward=no name=B_1954
add fast-forward=no name=B_2000 priority=0x30
add fast-forward=no name=B_2010
add fast-forward=no name=B_2011
add fast-forward=no name=B_2012
add fast-forward=no name=B_2020
add fast-forward=no name=B_2055
add fast-forward=no name=B_2524
add fast-forward=no name=B_2525
add fast-forward=no name=B_3000
add fast-forward=no name=B_3001
/interface ethernet
set [ find default-name=qsfpplus1-1 ] speed=25Gbps
set [ find default-name=qsfpplus1-2 ] speed=25Gbps
set [ find default-name=qsfpplus1-3 ] speed=25Gbps
set [ find default-name=qsfpplus1-4 ] speed=25Gbps
set [ find default-name=qsfpplus2-1 ] speed=25Gbps
set [ find default-name=qsfpplus2-2 ] speed=25Gbps
set [ find default-name=qsfpplus2-3 ] speed=25Gbps
set [ find default-name=qsfpplus2-4 ] speed=25Gbps
set [ find default-name=sfp-sfpplus22 ] loop-protect=on
set [ find default-name=sfp-sfpplus23 ] loop-protect=on
set [ find default-name=sfp-sfpplus24 ] loop-protect=on
/interface vlan
add interface=sfp-sfpplus23 name=eth23_vlan100 vlan-id=100
add interface=sfp-sfpplus23 name=eth23_vlan1015 vlan-id=1015
add interface=sfp-sfpplus23 name=eth23_vlan1016 vlan-id=1016
add interface=sfp-sfpplus23 name=eth23_vlan1020 vlan-id=1020
add interface=sfp-sfpplus23 name=eth23_vlan1021 vlan-id=1021
add interface=sfp-sfpplus23 name=eth23_vlan1022 vlan-id=1022
add interface=sfp-sfpplus23 name=eth23_vlan1030 vlan-id=1030
add interface=sfp-sfpplus23 name=eth23_vlan1031 vlan-id=1031
add interface=sfp-sfpplus23 name=eth23_vlan1072 vlan-id=1072
add interface=sfp-sfpplus23 name=eth23_vlan1073 vlan-id=1073
add interface=sfp-sfpplus23 name=eth23_vlan1380 vlan-id=1380
add interface=sfp-sfpplus23 name=eth23_vlan1381 vlan-id=1381
add interface=sfp-sfpplus23 name=eth23_vlan1382 vlan-id=1382
add interface=sfp-sfpplus23 name=eth23_vlan1895 vlan-id=1895
add interface=sfp-sfpplus23 name=eth23_vlan1954 vlan-id=1954
add interface=sfp-sfpplus23 loop-protect=on name=eth23_vlan2000 vlan-id=2000
add interface=sfp-sfpplus23 name=eth23_vlan2010 vlan-id=2010
add interface=sfp-sfpplus23 name=eth23_vlan2011 vlan-id=2011
add interface=sfp-sfpplus23 name=eth23_vlan2012 vlan-id=2012
add interface=sfp-sfpplus23 name=eth23_vlan2020 vlan-id=2020
add interface=sfp-sfpplus23 name=eth23_vlan2055 vlan-id=2055
add interface=sfp-sfpplus23 name=eth23_vlan2524 vlan-id=2524
add interface=sfp-sfpplus23 name=eth23_vlan2525 vlan-id=2525
add interface=sfp-sfpplus23 name=eth23_vlan3000 vlan-id=3000
add interface=sfp-sfpplus23 name=eth23_vlan3001 vlan-id=3001
add interface=sfp-sfpplus23 name=eth23_vlan999 vlan-id=999
add interface=sfp-sfpplus24 name=eth24_vlan100 vlan-id=100
add interface=sfp-sfpplus24 name=eth24_vlan1015 vlan-id=1015
add interface=sfp-sfpplus24 name=eth24_vlan1016 vlan-id=1016
add interface=sfp-sfpplus24 name=eth24_vlan1020 vlan-id=1020
add interface=sfp-sfpplus24 name=eth24_vlan1021 vlan-id=1021
add interface=sfp-sfpplus24 name=eth24_vlan1022 vlan-id=1022
add interface=sfp-sfpplus24 name=eth24_vlan1030 vlan-id=1030
add interface=sfp-sfpplus24 name=eth24_vlan1031 vlan-id=1031
add interface=sfp-sfpplus24 name=eth24_vlan1072 vlan-id=1072
add interface=sfp-sfpplus24 name=eth24_vlan1073 vlan-id=1073
add interface=sfp-sfpplus24 name=eth24_vlan1380 vlan-id=1380
add interface=sfp-sfpplus24 name=eth24_vlan1381 vlan-id=1381
add interface=sfp-sfpplus24 name=eth24_vlan1382 vlan-id=1382
add interface=sfp-sfpplus24 name=eth24_vlan1895 vlan-id=1895
add interface=sfp-sfpplus24 name=eth24_vlan1954 vlan-id=1954
add interface=sfp-sfpplus24 loop-protect=on name=eth24_vlan2000 vlan-id=2000
add interface=sfp-sfpplus24 name=eth24_vlan2010 vlan-id=2010
add interface=sfp-sfpplus24 name=eth24_vlan2011 vlan-id=2011
add interface=sfp-sfpplus24 name=eth24_vlan2012 vlan-id=2012
add interface=sfp-sfpplus24 name=eth24_vlan2020 vlan-id=2020
add interface=sfp-sfpplus24 name=eth24_vlan2055 vlan-id=2055
add interface=sfp-sfpplus24 name=eth24_vlan2524 vlan-id=2524
add interface=sfp-sfpplus24 name=eth24_vlan2525 vlan-id=2525
add interface=sfp-sfpplus24 name=eth24_vlan3000 vlan-id=3000
add interface=sfp-sfpplus24 name=eth24_vlan3001 vlan-id=3001
add interface=sfp-sfpplus24 name=eth24_vlan999 vlan-id=999
add interface=sfp-sfpplus22 name=sfp-sfpplus22_vlan2000 vlan-id=2000
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bpdu-guard=yes bridge=B_2000 interface=eth23_vlan2000
add bpdu-guard=yes bridge=B_2000 interface=eth24_vlan2000
add bpdu-guard=yes bridge=B_2000 interface=sfp-sfpplus22_vlan2000
/ip address
add address=10.200.200.6/24 interface=B_2000 network=10.200.200.0
/ip dns
set servers=1.1.1.1,1.0.0.1
/ip route
add distance=1 gateway=10.200.200.1
/system clock
set time-zone-name=Europe/Amsterdam
/system identity
set name=SW04998
/system ntp client
set enabled=yes primary-ntp=213.136.0.252 secondary-ntp=87.233.197.123
/system routerboard settings
set auto-upgrade=yes boot-os=router-os
sw03
jan/06/1970 01:03:47 by RouterOS 6.46.2
software id =
model = CRS326-24G-2S+
serial number =
/interface bridge
add fast-forward=no name=B_100
add fast-forward=no name=B_999
add fast-forward=no name=B_1015
add fast-forward=no name=B_1016
add fast-forward=no name=B_1020
add fast-forward=no name=B_1021
add fast-forward=no name=B_1022
add fast-forward=no name=B_1030
add fast-forward=no name=B_1031
add fast-forward=no name=B_1072
add fast-forward=no name=B_1073
add fast-forward=no name=B_1380
add fast-forward=no name=B_1381
add fast-forward=no name=B_1382
add fast-forward=no name=B_1895
add fast-forward=no name=B_1954
add fast-forward=no name=B_2000 priority=0x40
add fast-forward=no name=B_2010
add fast-forward=no name=B_2011
add fast-forward=no name=B_2012
add fast-forward=no name=B_2020
add fast-forward=no name=B_2055
add fast-forward=no name=B_2524
add fast-forward=no name=B_2525
add fast-forward=no name=B_3000
add fast-forward=no name=B_3001
/interface ethernet
set [ find default-name=sfp-sfpplus1 ] loop-protect=on
set [ find default-name=sfp-sfpplus2 ] loop-protect=on
/interface vlan
add interface=ether24 name=eth24_vlan100 vlan-id=100
add interface=ether24 name=eth24_vlan1015 vlan-id=1015
add interface=ether24 name=eth24_vlan1016 vlan-id=1016
add interface=ether24 name=eth24_vlan1020 vlan-id=1020
add interface=ether24 name=eth24_vlan1021 vlan-id=1021
add interface=ether24 name=eth24_vlan1022 vlan-id=1022
add interface=ether24 name=eth24_vlan1030 vlan-id=1030
add interface=ether24 name=eth24_vlan1031 vlan-id=1031
add interface=ether24 name=eth24_vlan1072 vlan-id=1072
add interface=ether24 name=eth24_vlan1073 vlan-id=1073
add interface=ether24 name=eth24_vlan1380 vlan-id=1380
add interface=ether24 name=eth24_vlan1381 vlan-id=1381
add interface=ether24 name=eth24_vlan1382 vlan-id=1382
add interface=ether24 name=eth24_vlan1895 vlan-id=1895
add interface=ether24 name=eth24_vlan1954 vlan-id=1954
add interface=ether24 name=eth24_vlan2000 vlan-id=2000
add interface=ether24 name=eth24_vlan2010 vlan-id=2010
add interface=ether24 name=eth24_vlan2011 vlan-id=2011
add interface=ether24 name=eth24_vlan2012 vlan-id=2012
add interface=ether24 name=eth24_vlan2020 vlan-id=2020
add interface=ether24 name=eth24_vlan2055 vlan-id=2055
add interface=ether24 name=eth24_vlan2524 vlan-id=2524
add interface=ether24 name=eth24_vlan2525 vlan-id=2525
add interface=ether24 name=eth24_vlan3000 vlan-id=3000
add interface=ether24 name=eth24_vlan3001 vlan-id=3001
add interface=ether24 name=eth24_vlan999 vlan-id=999
add interface=sfp-sfpplus1 name=sfp1_vlan100 vlan-id=100
add interface=sfp-sfpplus1 name=sfp1_vlan1015 vlan-id=1015
add interface=sfp-sfpplus1 name=sfp1_vlan1016 vlan-id=1016
add interface=sfp-sfpplus1 name=sfp1_vlan1020 vlan-id=1020
add interface=sfp-sfpplus1 name=sfp1_vlan1021 vlan-id=1021
add interface=sfp-sfpplus1 name=sfp1_vlan1022 vlan-id=1022
add interface=sfp-sfpplus1 name=sfp1_vlan1030 vlan-id=1030
add interface=sfp-sfpplus1 name=sfp1_vlan1031 vlan-id=1031
add interface=sfp-sfpplus1 name=sfp1_vlan1072 vlan-id=1072
add interface=sfp-sfpplus1 name=sfp1_vlan1073 vlan-id=1073
add interface=sfp-sfpplus1 name=sfp1_vlan1380 vlan-id=1380
add interface=sfp-sfpplus1 name=sfp1_vlan1381 vlan-id=1381
add interface=sfp-sfpplus1 name=sfp1_vlan1382 vlan-id=1382
add interface=sfp-sfpplus1 name=sfp1_vlan1895 vlan-id=1895
add interface=sfp-sfpplus1 name=sfp1_vlan1954 vlan-id=1954
add interface=sfp-sfpplus1 name=sfp1_vlan2000 vlan-id=2000
add interface=sfp-sfpplus1 name=sfp1_vlan2010 vlan-id=2010
add interface=sfp-sfpplus1 name=sfp1_vlan2011 vlan-id=2011
add interface=sfp-sfpplus1 name=sfp1_vlan2012 vlan-id=2012
add interface=sfp-sfpplus1 name=sfp1_vlan2020 vlan-id=2020
add interface=sfp-sfpplus1 name=sfp1_vlan2055 vlan-id=2055
add interface=sfp-sfpplus1 name=sfp1_vlan2524 vlan-id=2524
add interface=sfp-sfpplus1 name=sfp1_vlan2525 vlan-id=2525
add interface=sfp-sfpplus1 name=sfp1_vlan3000 vlan-id=3000
add interface=sfp-sfpplus1 name=sfp1_vlan3001 vlan-id=3001
add interface=sfp-sfpplus1 name=sfp1_vlan999 vlan-id=999
add interface=sfp-sfpplus2 name=sfp2_vlan100 vlan-id=100
add interface=sfp-sfpplus2 name=sfp2_vlan1015 vlan-id=1015
add interface=sfp-sfpplus2 name=sfp2_vlan1016 vlan-id=1016
add interface=sfp-sfpplus2 name=sfp2_vlan1020 vlan-id=1020
add interface=sfp-sfpplus2 name=sfp2_vlan1021 vlan-id=1021
add interface=sfp-sfpplus2 name=sfp2_vlan1022 vlan-id=1022
add interface=sfp-sfpplus2 name=sfp2_vlan1030 vlan-id=1030
add interface=sfp-sfpplus2 name=sfp2_vlan1031 vlan-id=1031
add interface=sfp-sfpplus2 name=sfp2_vlan1072 vlan-id=1072
add interface=sfp-sfpplus2 name=sfp2_vlan1073 vlan-id=1073
add interface=sfp-sfpplus2 name=sfp2_vlan1380 vlan-id=1380
add interface=sfp-sfpplus2 name=sfp2_vlan1381 vlan-id=1381
add interface=sfp-sfpplus2 name=sfp2_vlan1382 vlan-id=1382
add interface=sfp-sfpplus2 name=sfp2_vlan1895 vlan-id=1895
add interface=sfp-sfpplus2 name=sfp2_vlan1954 vlan-id=1954
add interface=sfp-sfpplus2 name=sfp2_vlan2000 vlan-id=2000
add interface=sfp-sfpplus2 name=sfp2_vlan2010 vlan-id=2010
add interface=sfp-sfpplus2 name=sfp2_vlan2011 vlan-id=2011
add interface=sfp-sfpplus2 name=sfp2_vlan2012 vlan-id=2012
add interface=sfp-sfpplus2 name=sfp2_vlan2020 vlan-id=2020
add interface=sfp-sfpplus2 name=sfp2_vlan2055 vlan-id=2055
add interface=sfp-sfpplus2 name=sfp2_vlan2524 vlan-id=2524
add interface=sfp-sfpplus2 name=sfp2_vlan2525 vlan-id=2525
add interface=sfp-sfpplus2 name=sfp2_vlan3000 vlan-id=3000
add interface=sfp-sfpplus2 name=sfp2_vlan3001 vlan-id=3001
add interface=sfp-sfpplus2 name=sfp2_vlan999 vlan-id=999
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge=B_2000 interface=sfp1_vlan2000
add bridge=B_2000 interface=sfp2_vlan2000
/ip address
add address=10.200.200.7/24 interface=B_2000 network=10.200.200.0
/ip dns
set servers=1.1.1.1,1.0.0.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set winbox address=10.200.200.0/24,172.16.205.0/24
set api-ssl disabled=yes
/system identity
set name=SW04999
/system routerboard settings
set boot-os=router-os