Switch all ports

Hello,

i have install my new router and now i have an question about the Function Switch → switch1 → switch all ports
can someone explain me this function?
i have read abaout an master port setup but in 6.41 and newer this funktion cannceld

# jan/05/2020 17:28:58 by RouterOS 6.43.12
# software id = S7TX-H5YC
#
# model = RB2011UiAS-2HnD
# serial number = B4DE0A745605
/interface bridge
add admin-mac=74:4D:28:81:F5:50 auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether2 ] name=SW1-e2
set [ find default-name=ether3 ] name=SW1-e3
set [ find default-name=ether4 ] name=SW1-e4-NAS
set [ find default-name=ether5 ] name=SW1-e5-AP
set [ find default-name=ether10 ] advertise=\
    10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full \
    auto-negotiation=no name=SW2-e10 speed=1Gbps
set [ find default-name=ether6 ] name=SW2-e6
set [ find default-name=ether7 ] name=SW2-e7
set [ find default-name=ether8 ] name=SW2-e8
set [ find default-name=ether9 ] name=SW2-e9-Tahoma
set [ find default-name=ether1 ] name=WAN-e1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
    distance=indoors frequency=auto mode=ap-bridge ssid=MikroTik-81F559 \
    wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=Pool-dhcp ranges=192.168.1.2-192.168.1.254
/ip dhcp-server
add address-pool=Pool-dhcp disabled=no interface=bridge name=DHCP
/interface bridge port
add bridge=bridge comment=defconf interface=SW1-e2
add bridge=bridge comment=defconf interface=SW1-e3
add bridge=bridge comment=defconf interface=SW1-e4-NAS
add bridge=bridge comment=defconf interface=SW1-e5-AP
add bridge=bridge comment=defconf interface=SW2-e6
add bridge=bridge comment=defconf interface=SW2-e7
add bridge=bridge comment=defconf interface=SW2-e9-Tahoma
add bridge=bridge comment=defconf interface=SW2-e10
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge interface=SW2-e8
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=all
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=WAN-e1 list=WAN
/ip address
add address=192.168.1.1/24 comment=Ipadresse interface=bridge network=\
    192.168.1.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=WAN-e1
/ip dhcp-server lease
add address=192.168.1.2 allow-dual-stack-queue=no client-id=1:cc:2d:e0:c4:34:51 \
    comment=e5-Homeland-AP mac-address=CC:2D:E0:C4:34:51 server=DHCP
add address=192.168.1.99 client-id=1:e0:3f:49:a0:7d:b9 comment=e3-Master \
    mac-address=E0:3F:49:A0:7D:B9 server=DHCP
add address=192.168.1.49 client-id=1:f8:81:1a:4:6f:da comment=e9-Tahoma \
    mac-address=F8:81:1A:04:6F:DA server=DHCP
add address=192.168.1.50 comment=e5-AP-Saugroboter mac-address=\
    40:9F:38:27:76:C2 server=DHCP
add address=192.168.1.100 client-id=1:2c:b0:5d:bf:4:f6 comment=e4-NAS \
    mac-address=2C:B0:5D:BF:04:F6 server=DHCP
add address=192.168.1.5 client-id=1:c0:4a:0:5e:4a:cb comment=e5-AP-ClientKeller \
    mac-address=C0:4A:00:5E:4A:CB server=DHCP
add address=192.168.1.200 client-id=1:98:6d:35:c0:1:13 comment=\
    e5-AP-ClientKeller-Heizstab mac-address=98:6D:35:C0:01:13 server=DHCP
add address=192.168.1.6 client-id=1:14:cc:20:7b:93:75 comment=\
    e5-AP-ClientDachboden mac-address=14:CC:20:7B:93:75 server=DHCP
add address=192.168.1.201 client-id=1:0:3:ac:d:58:23 comment=\
    e5-AP-ClientDachboden-Wechselrichter mac-address=00:03:AC:0D:58:23 server=\
    DHCP
/ip dhcp-server network
add address=192.168.1.0/24 comment=DHCP gateway=192.168.1.1
/ip dns
set allow-remote-requests=yes servers=192.168.1.1,8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
    invalid
add action=drop chain=forward comment=\
    "defconf:  drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=\
    out,none out-interface-list=WAN
/system clock
set time-zone-name=Europe/Vienna
/system ntp client
set enabled=yes primary-ntp=86.59.80.170 secondary-ntp=81.16.38.161
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN

Thanks

The “switch” function has now been moved into “bridge”.
There is an option “hw offload” in the port entries for the bridge (default enabled) and when it is active, the switch functionality will be used if possible.
The checkmark on the “general” tab indicates the desired state of hw offload, the actual state is indicated on the Status page.

For simple setups like you have this will work OK (of course only within switched port groups, i.e. 1-5 and 6-10), but once you start to add advanced features
to the bridge e.g. VLAN filtering, the hw offload will stop working (automatically) and everything is software bridged.

okay thanks for explain :slight_smile:

  1. Switch Chip Features § Switch All Ports Feature
  2. Bridging and Switching § Bridge Hardware Offloading

Questions:

  • Item 1 says Changes ether1 switch group only on RB450G/RB435G/RB850Gx2 devices.
    • If so, why does hAP ax3 support the option in both Console and WebFig?
    • Default is off. Is enabling option compatible with Bridge VLAN Filtering?
  • Item 2 shows [IPQ-PPE] in the table with just one feature in green:
  • Features in Switch menu
    Footnote 6. Currently, HW offloaded bridge support for the IPQ-PPE switch chip is still a work in progress. We recommend using, the default, non-HW offloaded bridge (enabled RSTP).
  • I take this to mean Bridge VLAN Filtering won’t enjoy hardware offloading but works otherwise.
  • Does MSTP work on hAP ax3? With Switch All Ports enabled?