Hi,
I have a problem with my configuration.
I have several swithes (RB951G-2HnD and one RB3011
My core router (RB951G-2HnD) is connected from Ether5 to the RB3011 Ether 1.
On the RB3011 Ether 10 I want to connect an other RB951G-2HnD Ether1).
My Management network is VLAN 9
From the Core to the RB3011 it is working but I can's see the RB951G-2HnD connected to ether10 on the RB3011.
I think it is going wrong with the two switch chips in the RB3011 and to connect them to each other.
Below the configuration of the RB3011.
Can someone see the mistake of me?
###################################################################################
# #
# MMM MMM KKK TTTTTTTTTTT KKK #
# MMMM MMMM KKK TTTTTTTTTTT KKK #
# MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK #
# MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK #
# MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK #
# MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK #
# #
###################################################################################
# Installation SW01 (RB3011
# Set the Identity of the device
/system identity set name=SW01
# Create a group of switch ports (Switch chip 1)
/interface ethernet
set numbers=,1,2,3,4 master-port=ether1
# Create a gropu of switch ports (Switch chip 2)
/interface ethernet
set numbers=5,6,7,8 master-port=ether10
# Create a Bridge
/interface bridge
add name=BRIDGE01
# Create the needed VLANs
/interface vlan
add name=VLAN_LAN_MGMT interface=ether1 vlan-id=9
add name=VLAN_WLAN_DATA interface=BRIDGE01 vlan-id=12
add name=VLAN_WLAN_GUEST interface=BRIDGE01 vlan-id=14
add name=VLAN_LAN_MFP interface=BRIDGE01 vlan-id=15
add name=VLAN_LAN_GAME interface=BRIDGE01 vlan-id=16
add name=VLAN_LAN_CAMERA interface=BRIDGE01 vlan-id=17
add name=VLAN_LAN_TVMM interface=BRIDGE01 vlan-id=18
add name=VLAN_WLAN_SP interface=BRIDGE01 vlan-id=19
add name=VLAN_LAN_SERVER interface=BRIDGE01 vlan-id=900
# Add an IP address for management
/ip address
add address=172.16.0.2/25 network=172.16.0.0 interface=VLAN_LAN_MGMT
# Add VLAN table entries
/interface ethernet switch vlan
add port=switch1-cpu,ether1,ether2,ether3,ether4 switch=switch1 vlan-id=9
add port=ether1,ether4 switch=switch1 vlan-id=10
add port=ether1 switch=switch1 vlan-id=12
add port=ether1 switch=switch1 vlan-id=14
add port=ether1 switch=switch1 vlan-id=15
add port=ether1 switch=switch1 vlan-id=16
add port=ether1 switch=switch1 vlan-id=17
add port=ether1 switch=switch1 vlan-id=18
add port=ether1 switch=switch1 vlan-id=19
add port=ether5 switch=switch1 vlan-id=900
add port=switch2-cpu,ether8,ether9,ether10 switch=switch2 vlan-id=9
add port=ether8,ether9,ether10 switch=switch2 vlan-id=10
add port=ether8,ether9,ether10 switch=switch2 vlan-id=12
add port=ether8,ether9,ether10 switch=switch2 vlan-id=14
add port=ether8,ether9,ether10 switch=switch2 vlan-id=15
add port=ether8,ether9,ether10 switch=switch2 vlan-id=16
add port=ether7,ether8,ether9,ether10 switch=switch2 vlan-id=17
add port=ether8,ether9,ether10 switch=switch2 vlan-id=18
add port=ether8,ether9,ether10 switch=switch2 vlan-id=19
add port=ether4,ether6,ether8,ether9,ether10 switch=switch2 vlan-id=900
# Assign "vlan-mode" and "vlan-header" mode for each port and also "default-vlan-id" on ingress for each access port.
## Setting "vlan-mode=secure" ensures strict use of VLAN table.
## Setting "vlan-header=always-strip" for access ports removes VLAN header from frame when it leaves the switch chip.
## Setting "vlan-header=add-if-missing" for trunk port adds VLAN header to untagged frames.
## "Default-vlan-id" specifies what VLAN ID is added for untagged ingress traffic of the access port.
/interface ethernet switch port
set switch1-cpu vlan-mode secure vlan-header=leave-as-is
set switch2-cpu vlan-mode secure vlan-header=leave-as-is
set ether2 vlan-mode secure vlan-header=always-strip default-vlan-id=9
set ether3 vlan-mode secure vlan-header=always-strip default-vlan-id=9
set ether4 vlan-mode=secure vlan-header=add-if-missing
set ether5 vlan-mode secure vlan-header=always-strip default-vlan-id=900
set ether6 vlan-mode secure vlan-header=always-strip default-vlan-id=900
set ether7 vlan-mode secure vlan-header=always-strip default-vlan-id=17
set ether8 vlan-mode=secure vlan-header=add-if-missing
set ether9 vlan-mode=secure vlan-header=add-if-missing
set ether10 vlan-mode=secure vlan-header=add-if-missing
# Bridge the two switch groups together
/interface bridge port
add bridge=BRIDGE01 interface=ether5
add bridge=BRIDGE01 interface=ether10
# DNS Instellen
/ip dns set server=172.16.0.130
# Default route toevoegen
/ip route add dst-address=0.0.0.0/0 gateway=172.16.0.1
# SNTP Client configureren
/system ntp client set primary-ntp=172.16.0.130 secondary-ntp=172.16.0.131 enabled=yes
# SNMP Server configureren
/snmp community
set [ find default=yes ] addresses=172.16.0.60/32
add addresses=172.16.0.60/32 authentication-password=O7ac6eV0TnpLJ155 authentication-protocol=SHA1 \
encryption-password=hHWhgw91Hed6s4S5 encryption-protocol=AES name=SNMPuser1 security=private
/snmp
set contact=ronald.verheij@skiffkick.nl.nl enabled=yes engine-id=SNMPuser1 location="Ring 225, Pernis, The Netherlands" \
trap-generators=interfaces trap-interfaces=all trap-target=172.16.0.60 trap-version=3 trap-community=SNMPuser1
/snmp community set [find name=public] read-access=no
# IP SERVICES configureren
/ip service set api disabled=yes
/ip service set telnet disabled=yes
/ip service set ftp disabled=yes
/ip service set api-ssl disabled=yes
/ip service set www address=172.16.0.0/21 disabled=yes
/ip service set www-ssl certificate=WEB_CONF port=4443 disabled=no
# SYSLOG Server configureren
/system logging action
set 3 remote=172.16.0.20
/system logging
add action=remote topics=warning
add action=remote topics=info
add action=remote topics=critical
add action=remote topics=error
add action=remote topics=wireless
# Zet de tijdzone goed
/system clock set time-zone-name=Europe/Amsterdam
# Route instellen voor locale netwerk
/ip route add dst-address=172.16.0.0/21 gateway=172.16.0.1