Hi all. The configuration below (CRS309) works fine. Can anyone help me change this to the new style on vlan so that i can hardware offload it?
Regards
Andy
anyone?
Have you seen this topic?
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
For help you have to share the config:
/export hide-sensitive file=anynameyoulike
And please post it in between code tags (to make it more readable).
/interface bridge
add ether-type=0x88a8 ingress-filtering=no name=bridge830 pvid=830 \
vlan-filtering=yes
add ether-type=0x88a8 ingress-filtering=no name=bridge831 pvid=831 \
vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] name=ether1-management
set [ find default-name=sfp-sfpplus1 ] name=sfp-sfpplus1 \
rx-flow-control=auto tx-flow-control=auto
set [ find default-name=sfp-sfpplus2 ] name=sfp-sfpplus2
set [ find default-name=sfp-sfpplus3 ] name=sfp-sfpplus3
/interface vlan
add interface=sfp-sfpplus1 name=vlan16-kam vlan-id=16
add interface=sfp-sfpplus1 name=vlan21-mak vlan-id=21
add interface=sfp-sfpplus1 name=vlan47-lca vlan-id=47
add interface=vlan16-kam name=vlan950-16 vlan-id=950
add interface=vlan21-mak name=vlan950-21 vlan-id=950
add interface=vlan47-lca name=vlan950-47 vlan-id=950
add interface=vlan950-16 name=vlan830-16 vlan-id=830
add interface=vlan950-47 name=vlan830-47 vlan-id=830
add interface=vlan950-21 name=vlan831-21 vlan-id=831
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
set 1 name=serial1
/interface bridge port
add bridge=bridge831 interface=sfp-sfpplus3
add bridge=bridge831 interface=vlan831-21
add bridge=bridge830 interface=sfp-sfpplus2
add bridge=bridge830 horizon=1 interface=vlan830-16
add bridge=bridge830 horizon=1 interface=vlan830-47
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface bridge vlan
add bridge=bridge831 untagged=sfp-sfpplus3 vlan-ids=831
add bridge=bridge830 untagged=sfp-sfpplus2 vlan-ids=830
/interface ovpn-server server
set auth=sha1,md5
/ip dhcp-client
add interface=ether1-management
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system package update
set channel=long-term
/system resource irq rps
set ether1-management disabled=no
Your current setup is mostly wrong. Go through this tutorial to get an idea. If you will have problems afterwards, come back for advice.
(1) orangekey, DONT Set any vlan on the bridge itself.
It needs to be set back to the default of 1.
(2) ONLY ONE bridge is needed.
Conceptually…
List all the subnets on your router.
Go to interfaces and create vlans for each subnet, with the interface setting on those set to the bridge.
Then assign IP pool, IP address, dhcp-server, dhcp-server-network to each vlan.
Then identify which ports are trunk ports and which are access ports etc via /interface bridge ports.
Then identify the tagging and untagging of ports required via /interface bridge vlans.
Adjust firewall rules on the input and forward chain accordingly.
While you should understand what is in this tutorial that has been offered, what it covers is quite basic compared to the Q-in-Q-in-Q config you posted.
@orangetekcy can you explain what the intent is?
Are you just relaying frames that happen to have stacked frames from one sfp to another?
Before you get your hopes up, I won’t be able to help, as I have never used Q-in-Q, and the only MikroTik router I have is a low end hEX S (5 port + 1 SPF). But I can recognize that this config is more complex than those help articles deal with.
What version of ROS is running on the CRS309?
My suggestion is to go straight to the Official Help
Bridge VLAN Filtering good overview
Bridge VLAN Table very detailed information, although there are some places where they don’t specify whether bridge vlan or bridge port command should be used, but you can determine this by trying and using tab completion to see possible completions.
These youtube videos may be helpful, I would start with the first, then the second.
Mikrotik VLANs - CRS3XX Step by Step - Mikrotik Tutorial The Network Trip youtube video.
Switching, VLAN, QinQ in ROS 6.41 Onwards and their application to CRS 3.xx models. MUM India 2018 slides