CRS326 port 15 → ipphone GXP1620 → Computer
GXP1620 in vlan10
Computer in vlan20
SFP tag vlan10 and vlan20
Please tell me how to set up CRS326.
Their VLAN14 traffic does not reach the PC.
Please tell me the settings for the switch.
Phone specialists assure me that the settings on the phone are correct and the GRS326 switch needs to be configured correctly.
Post export of current CRS settings … execute /export hide-sensitive file=anynameyouwish, open resulting file in a text editor and copy-paste contens into [__code] [/code] block.
Damn… nifty trick !!
/interface bridge
add admin-mac=2C:C8:1B:07:1C:D6 auto-mac=no comment=defconf name=bridge \
vlan-filtering=yes
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,pas\
sword,web,sniff,sensitive,api,romon,dude,tikapp"
/interface bridge port
add bridge=bridge comment=defconf interface=ether1 pvid=14
add bridge=bridge comment=defconf interface=ether2 pvid=14
add bridge=bridge comment=defconf interface=ether3 pvid=14
add bridge=bridge comment=defconf interface=ether4 pvid=14
add bridge=bridge comment=defconf interface=ether5 pvid=14
add bridge=bridge comment=defconf interface=ether6 pvid=14
add bridge=bridge comment=defconf interface=ether7 pvid=14
add bridge=bridge comment=defconf interface=ether8 pvid=14
add bridge=bridge comment=defconf interface=ether9 pvid=14
add bridge=bridge comment=defconf interface=ether10 pvid=14
add bridge=bridge comment=defconf interface=ether11 pvid=14
add bridge=bridge comment=defconf interface=ether12 pvid=14
add bridge=bridge comment=defconf interface=ether13 pvid=14
add bridge=bridge comment=defconf interface=ether14 pvid=14
add bridge=bridge comment=defconf interface=ether15 pvid=14
add bridge=bridge comment=defconf interface=ether16 pvid=14
add bridge=bridge comment=defconf interface=ether17 pvid=14
add bridge=bridge comment=defconf interface=ether18 pvid=14
add bridge=bridge comment=defconf interface=ether19 pvid=14
add bridge=bridge comment=defconf interface=ether20 pvid=14
add bridge=bridge comment=defconf interface=ether21 pvid=1720
add bridge=bridge comment=defconf interface=ether22 pvid=14
add bridge=bridge comment=defconf interface=ether23
add bridge=bridge comment=defconf interface=ether24
add bridge=bridge comment=defconf interface=sfp-sfpplus1
add bridge=bridge comment=defconf interface=sfp-sfpplus2
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface bridge vlan
add bridge=bridge tagged=sfp-sfpplus1,ether21 vlan-ids=14
add bridge=bridge tagged=sfp-sfpplus1,ether21 vlan-ids=1720
/interface ethernet switch rule
add disabled=yes ports=ether23 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether23 switch=switch1
add disabled=yes ports=ether5 src-mac-address=\
18:C0:4D:9F:C5:E7/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether5 switch=switch1
add disabled=yes ports=ether7 src-mac-address=\
00:17:C8:BE:72:C3/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether7 switch=switch1
add disabled=yes ports=ether14 src-mac-address=\
E0:D5:5E:C4:25:24/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether14 switch=switch1
add disabled=yes ports=ether19 src-mac-address=\
40:F4:13:48:C3:26/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether19 switch=switch1
add disabled=yes ports=ether21 src-mac-address=\
C0:74:AD:18:FE:01/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether21 switch=switch1
add disabled=yes ports=ether1 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether1 switch=switch1
add disabled=yes ports=ether2 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether2 switch=switch1
add disabled=yes ports=ether3 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether3 switch=switch1
add disabled=yes ports=ether4 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether4 switch=switch1
add disabled=yes ports=ether6 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether6 switch=switch1
add disabled=yes ports=ether8 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether8 switch=switch1
add disabled=yes ports=ether9 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether9 switch=switch1
add disabled=yes ports=ether10 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether10 switch=switch1
add disabled=yes ports=ether11 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether11 switch=switch1
add disabled=yes ports=ether12 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether12 switch=switch1
add disabled=yes ports=ether13 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether13 switch=switch1
add disabled=yes ports=ether15 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether15 switch=switch1
add disabled=yes ports=ether16 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether16 switch=switch1
add disabled=yes ports=ether17 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether17 switch=switch1
add disabled=yes ports=ether18 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether18 switch=switch1
add disabled=yes ports=ether20 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether20 switch=switch1
add disabled=yes ports=ether22 src-mac-address=\
18:C0:4D:9F:BB:CE/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether22 switch=switch1
add disabled=yes ports=ether23 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether23 switch=switch1
add disabled=yes ports=ether24 src-mac-address=\
18:18:18:18:18:18/FF:FF:FF:FF:FF:FF switch=switch1
add disabled=yes new-dst-ports="" ports=ether24 switch=switch1
/interface list member
add interface=ether1 list=WAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=ether9 list=LAN
add interface=ether10 list=LAN
add interface=ether11 list=LAN
add interface=ether12 list=LAN
add interface=ether13 list=LAN
add interface=ether14 list=LAN
add interface=ether15 list=LAN
add interface=ether16 list=LAN
add interface=ether17 list=LAN
add interface=ether18 list=LAN
add interface=ether19 list=LAN
add interface=ether20 list=LAN
add interface=ether21 list=LAN
add interface=ether22 list=LAN
add interface=ether23 list=LAN
add interface=ether24 list=LAN
add interface=sfp-sfpplus1 list=LAN
add interface=sfp-sfpplus2 list=LAN
/ip address
add address=192.168.255.85/24 comment=defconf interface=ether2 network=\
192.168.255.0
/ip arp
add address=192.168.211.163 disabled=yes interface=ether21 mac-address=\
C0:74:AD:18:FE:01
add address=192.168.6.145 disabled=yes interface=ether21 mac-address=\
18:C0:4D:9F:BB:CE published=yes
/ip dns
set servers=77.88.8.8
/ip route
add distance=1 gateway=192.168.255.1
/system clock
set time-zone-name=Europe/Moscow
/system identity
set name=CAIR
/system ntp client
set enabled=yes primary-ntp=194.190.168.1 secondary-ntp=89.175.22.41
/system package update
set channel=upgrade
/system routerboard settings
set boot-os=router-os
The only thing incorrect that I can spot is pvid setting on ether21 … since both VIDs 14 and 1720 are supposed to be tagged on that connection, pvid should be set to some unrelated value (e.g. 1).
This, however, doesn’t explain non-working PC connection which should be using tagged VID 14. What if you set pvid on port ether21 to 14?
Tried that, didn’t help. (
Are you sure that phone has PC port configured as untagged (access) port for VLAN 14? Wording in the image says “tagged”, but it’s not entirely sure to which port (PC or upstream) that applies.
Do not know. Logically, there is no need to make the PC port tagged. I tried different options and come to the conclusion that all the same, the reason is in the phone.
I remember on the mes2124 switch I did it according to the instructions:
If VoIP equipment and a PC are connected to the same switch port and both devices transmit untagged traffic, then you can use the map mac function to configure a separate vlan for telephony. In the example, VLAN 10 is used for voice traffic, VLAN 20 is used for DATA traffic.
Set up map mac, where we use the mac address of the phone:
vlan database
vlan 10.20
map mac aa:bb:cc:dd:00:00 32 macs-group 1
exit
We configure the switch port:
interface gigabitethernet 1/0/10
switchport mode general
switchport general allowed vlan add 10.20 untagged
switchport general map macs-group 1 vlan 20
switchport general pvid 10
exit
At the same time, the default settings on the phone are 0 everywhere.
How to do this on CRS326?
Personally I necer set-up MAC based VLANs. You may want to read up about it in the manual.
You need a Hybrid VLAN configuration…
Set the PVID on port 21 to PVID=14.
So, port 21 will be using tagged traffic on VID 1720 and Untagged traffic on VID 14…
But since reading on a previous post you say that this does not work ( it should ), maybe a wrong configuration on the VLAN side of the GXP ? Since you were passing VID 14 as tagged to the phone makes me think that you have some misconfigured option there… All untagged traffic coming from the PC port of the phone towards the CRS should be successfully added to Vlan 14…
Other than that MAC based VLANs as suggested before from @mkx is an option too…