VLAN-Filtering enabled -> no connection

[dvb91]

@anav

I am confused from the get go, (coming out of my mothers womb), but what the heck does this mean…..
I am using the CRS510 in switch mode??? The config provided shows you discussing LAN and WAN which is router speak???

Since the CRS510 has router capabilities, I assume that explains the LAN/WAN functionality. Personally, I only use the switch functions, so SwOS.

@anav

Your diagram gives NO indication of where the internet connection is located, I can only assume that an upstream router is connected to the CISCO switch. Thus we should expect a trunk port from the CISCO switch to the CRS510??

The diagram focused on my PC <> Mikrotik connection issue. Yes the overall diagram includes an upstream router and a firewall to manage internet access, inter-VLANs, etc.

@anav

Then there is the problem of your ports, Which one is the 10/100 Managment port ( is that identified as ether1 on this device??? Also if its a 510 it has 8 spf28 ports (25 gig) and 2 Qspf ports (100gig).
Why does your config show ( in /interface ethernet settings), 8 Qsfp ports??

For testing, I connected to the ether1 port with a simple laptop for monitoring. Then, I connected with another machine to an sfp28 port. Once configured, the CRS510 can be accessed from any port (if desired).

This machine only has two qsfp ports, but each composed of four sfp28 ports. Mikrotik displays the detail. I'm using QSFP in SFP mode with an adapter. Ultimately, I have a switch with 10 SFP28 ports.

@anav

I dont have one of these units but will consider the actual two ports to be named
qsfp28-1-1 and qsfp28-2-1 to match actual config usage ( as seen in /interface bridge vlans )

Yes, that's correct.

@anav

Regardless of the scenario, I highly recommend, especially when using vlan bridge filtering, is to create a safe spot, to both config the device, and to do any emergency access to the device that is INDEPENDENT of the bridge. AKA an off bridge dedicated port.

I agree with your comments.
Ether1 is ideal (laptop connection via Ethernet).

[Buckeye]

@dvb91

Personally, I only use the switch functions, so SwOS.

SwOS is fundamentally different from RouterOS. SwOS is a lightweight http only web configuration utility. And it has very little setup configuration compared to ROS. You don't even configure a default gateway. I've heard internally; it just sends replies back to the mac address it was contacted from. So it can't even establish tcpip connections, just reply to them.

See CSS106 (RB260) series Manual - SwOS - MikroTik Documentation for an example of the SwOS for the RB260GS/CSS106-5G-1S switch.

Some of MikroTiks switches support only SwOS, some only RouterOS, and a few can run either.

But just because you are using RouterOS in a "switching only" mode, does not make it SwOS.

Here is a MikroTik video about it SwOS basics: hardware types and choices