Im currently trying to deploy a Mikrotik CRS317 as a basic aggregation/core switch which is linked to a pfSense box as the main router.
The CRS317 is just doing basic L2. However, when it comes to the VLANs, im unable to get all but one vlan working which is the “Servers VLAN” on VLAN 10.
All others refused to work, even though theyre properly configured identically to that vlan in the bridge. I’ve spent countless hours on this and im trying to determine if theres a problem with my config or if the issues is in the pfSense machine…
Here is my list of VLANs
5: Access VLAN
10: Servers VLAN
20: Sound VLAN
30: Cameras VLAN
50: Management VLAN
60: WIFI VLAN
70: Printer VLAN
80: TV VLAN
Here is the configuration of the switch:
/interface bridge
add ingress-filtering=no name=BR_VLAN vlan-filtering=yes
/interface ethernet
set [ find default-name=sfp-sfpplus7 ] auto-negotiation=no
set [ find default-name=sfp-sfpplus8 ] auto-negotiation=no
set [ find default-name=sfp-sfpplus11 ] comment="Trunk to pfSense"
set [ find default-name=sfp-sfpplus14 ] comment="Uplink to NAS"
set [ find default-name=sfp-sfpplus15 ] comment="Uplink to Prader"
/interface bonding
add comment="LACP link towards SW01" lacp-rate=1sec mode=802.3ad name=AE1 \
slaves=sfp-sfpplus1,sfp-sfpplus2 transmit-hash-policy=layer-2-and-3
add comment="LACP link towards SW02" disabled=yes lacp-rate=1sec mode=802.3ad \
name=AE2 slaves=sfp-sfpplus3,sfp-sfpplus4 transmit-hash-policy=\
layer-2-and-3
add comment="LACP link towards SW03" lacp-rate=1sec mode=802.3ad name=AE3 \
slaves=sfp-sfpplus5,sfp-sfpplus6 transmit-hash-policy=layer-2-and-3
add comment="LACP link towards SW04" lacp-rate=1sec mode=802.3ad name=AE4 \
slaves=sfp-sfpplus7,sfp-sfpplus8 transmit-hash-policy=layer-2-and-3
add comment="LACP link towards SW05" lacp-rate=1sec mode=802.3ad name=AE5 \
slaves=sfp-sfpplus9,sfp-sfpplus10 transmit-hash-policy=layer-2-and-3
add comment="LACP link towards SW06" lacp-rate=1sec mode=802.3ad name=AE6 \
slaves=sfp-sfpplus12,sfp-sfpplus13 transmit-hash-policy=layer-2-and-3
/interface bridge port
add bridge=BR_VLAN comment="Trunk to SW02" interface=AE2
add bridge=BR_VLAN comment="Trunk to SW03" interface=AE3
add bridge=BR_VLAN comment="Trunk to SW04" interface=AE4
add bridge=BR_VLAN comment="Trunk to SW05" interface=AE5
add bridge=BR_VLAN comment="Trunk to SW06" interface=AE6
add bridge=BR_VLAN comment="Access port to NAS" interface=sfp-sfpplus15 pvid=\
10
add bridge=BR_VLAN comment="Access port to Prader" interface=sfp-sfpplus14 \
pvid=10
add bridge=BR_VLAN comment="Trunk port to pfSsense" interface=sfp-sfpplus11 \
trusted=yes
add bridge=BR_VLAN comment="Trunk to SW01" interface=AE1
add bridge=BR_VLAN ingress-filtering=no interface=sfp-sfpplus3 pvid=10
/ip neighbor discovery-settings
set discover-interface-list=all
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface bridge vlan
add bridge=BR_VLAN comment="Servers VLAN" tagged=AE5,AE6,sfp-sfpplus11 \
untagged=sfp-sfpplus14,sfp-sfpplus15 vlan-ids=10
add bridge=BR_VLAN comment="Cameras VLAN" tagged=AE4,BR_VLAN,sfp-sfpplus11 \
vlan-ids=30
add bridge=BR_VLAN comment="WIFI VLAN" tagged=BR_VLAN,AE4,sfp-sfpplus11 \
vlan-ids=60
add bridge=BR_VLAN comment="Management VLAN" tagged=AE4,sfp-sfpplus11 \
vlan-ids=50
add bridge=BR_VLAN comment="Printers VLAN" tagged=BR_VLAN,AE4,sfp-sfpplus11 \
vlan-ids=70
add bridge=BR_VLAN comment="TV VLAN" tagged=BR_VLAN,AE4,sfp-sfpplus11 \
vlan-ids=80
add bridge=BR_VLAN comment="Sound VLAN" tagged=sfp-sfpplus11,BR_VLAN,AE6 \
vlan-ids=20
add bridge=BR_VLAN comment=Access_Switch_VLAN disabled=yes tagged=\
sfp-sfpplus11 untagged=BR_VLAN vlan-ids=5
/ip address
add address=10.0.50.10/24 interface=ether1 network=10.0.50.0
All input is greatly appreciated!