Setting up VLANs on CRS-125-24G

RouterOS Beginner Basics
1

I'm trying to set up three VLANs (10, 20, 30) on this device with one trunk port (ether1) and ports 2, 3 , 4 as access ports.

[admin@MikroTik] /interface vlan> print
Flags: X - disabled, R - running, S - slave

NAME MTU ARP VLAN-ID INTERFACE

0 vlan10 1500 enabled 10 ether1-gateway
1 vlan20 1500 enabled 20 ether1-gateway
2 vlan30 1500 enabled 30 ether1-gateway

Here are the bridge settings;
[admin@MikroTik] /interface bridge> print
Flags: X - disabled, R - running
0 R name="br-vlan10" mtu=1500 l2mtu=1588 arp=enabled mac-address=D4:CA:6D:BD:FC:0B protocol-mode=none priority=0x8000 auto-mac=yes
admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m

1 R name="br-vlan20" mtu=1500 l2mtu=65535 arp=enabled mac-address=00:00:00:00:00:00 protocol-mode=none priority=0x8000 auto-mac=yes
admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m

2 R name="br-vlan30" mtu=1500 l2mtu=65535 arp=enabled mac-address=00:00:00:00:00:00 protocol-mode=none priority=0x8000 auto-mac=yes
admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m

However, when I attempt to add ports to the bridge (ether3-slave-local and above) I get this error;

[admin@MikroTik] > /interface bridge port add interface="ether3-slave-local" bridge="br-vlan20" disabled=no
failure: ether3-slave-local is already slave
[admin@MikroTik] >

I'm assuming this is because all ports 2-24 on this device are part of a bridge? If this is correct how do I remove ports from the switch as there is no switch menu on the CRS?

V6.5 Any help gratefully appreciated!

JT

2

Set their master port to none in the interface settings.

Sent from my SCH-I545 using Tapatalk

3

Yes, that’s what I’d do normally but it doesn’t show up under interface settings /webfig/#Interfaces.Interface.3, no master port shown (no gadget). I have no idea of how to do this from the CLI.

JT

4

After digging around a bit I found this link

http://wiki.mikrotik.com/wiki/Manual:CRS_examples

Hokay, looks as if everything (VLAN trunks) has to be on default master port which is set to ether2 by default. So far so good. However, down at the bottom it says that the management IP has to be set to ether2-master-local as well? Does anyone know a way around this? We really need to be able to manage the device from another port…

JT

5

I can’t help on the VLAN stuff but i can attest as another new user who just had to go through this, that you have to use the console (or the web console if you don’t have serial handy) in order to set the master interface to ‘none’.

From memory I think it’s /interface ethernet some-port master-port=“none”.

6

+1. Thats it. I don’t know about webfig/winbox since I just use the console.

7
  1. upgrade the CRS to V6.7, or perhaps V6.6 but 6.5 will not work.
  2. Follow the instructions at http://wiki.mikrotik.com/wiki/Manual:CRS_examples
  3. Make the required VLANs on ether2-master-local (trunks)
  4. It works.

One side note, since ether2-master-local is the default master for every port on the switch there is the possibility of ‘splash’ from your VLANs to non-vlan edge ports. We solved this by simply moving all ports not involved in our VLANs to another master.

JT