Hello, I’m new to the mikrotik world, and I would need just a little bit of help:
-
I have 2 CRS312-4C+8XG
-
the 4 combo ports are going to be used as SFP with bonding to link the 2 switches together
-
i have a bunch of VLANs I would like to pass trough the bond, so that i can link together two separate branches of a company, 50 meters away from each other, nothing more
I followed this excellent guide: https://help.mikrotik.com/docs/display/ROS/CRS3xx%2C+CRS5xx%2C+CCR2116%2C+CCR2216+VLANs+with+Bonds
and I came up with this config (for 1 of the 2 switches, almost the same on the other):
#creating bond interface with 4 combo ports:
/interface bonding
add mode=802.3ad name=bond1 slaves=combo1,combo2,combo3,combo4
#creating bridge, without VLAN filtering
/interface bridge
add name=bridge vlan-filtering=no
#adding interfaces to the bridge, also adding the bond
/interface bridge port
add bridge=bridge interface=ether1 pvid=10
add bridge=bridge interface=ether2 pvid=20
add bridge=bridge interface=ether3 pvid=30
add bridge=bridge interface=ether4 pvid=40
add bridge=bridge interface=ether5 pvid=50
add bridge=bridge interface=ether6 pvid=60
add bridge=bridge interface=ether7 pvid=70
add bridge=bridge interface=ether8 pvid=80
add bridge=bridge interface=bond1
#creating management interface with VLAN ID 99
/interface vlan
add interface=bridge name=MGMT vlan-id=99
#IP on management interface
/ip address
add address=192.168.99.1/24 interface=MGMT
#DNS and gateway on management interface
/ip route
add gateway=192.168.99.254
/ip dns
set servers=192.168.99.254
#all ports are untagged on the bridge
/interface bridge port
set [ find ] frame-types=admit-only-untagged-and-priority-tagged
#except ether1 and the bond
/interface bridge port
set [find where interface=ether1] frame-types=admit-all
set [find where interface=bond1] frame-types=admit-only-vlan-tagged
#disabling VLAN 1 from the bridge
/interface bridge set [find name=bridge] frame-types=admit-only-vlan-tagged
#tagging VLANs on bond interface
/interface bridge vlan
add bridge=bridge tagged=bond1 vlan-ids=10
add bridge=bridge tagged=bond1 vlan-ids=20
add bridge=bridge tagged=bond1 vlan-ids=30
add bridge=bridge tagged=bond1 vlan-ids=40
add bridge=bridge tagged=bond1 vlan-ids=50
add bridge=bridge tagged=bond1 vlan-ids=60
add bridge=bridge tagged=bond1 vlan-ids=70
add bridge=bridge tagged=bond1 vlan-ids=80
#tagging management VLAN on bond, bridge and ether1
add bridge=bridge tagged=bridge,bond1,ether1 vlan-ids=99
#enabling VLAN filtering
/interface bridge
set bridge vlan-filtering=yes
I would like to know if it is correct and I have a couple questions:
- could I configure the management port (ether9) to be used instead of ether1 to avoid burning 1 port? In that case, should I put ether9 into the bridge? Or keep it away from the other ports? I should then put a pvid of 99 on ether9, and it should become untagged on that VLAN, so i could use a normal PC to manage the switches, correct?
many thanks and happy holidays 
Stefano