CRS125 and trunk ports

HumanDamned · Mon Feb 22, 2016 2:03 pm

Hi everyone,

I'm trying to setup some VLAN networks on the CRS125 routerboard.
Routerboard generates all the vlan networks, there are no VLANs on the upstream.
I have created several VLANs on the master port and added the tags. Everything seems to work, but when many devices (ex. 30 laptops and cellphones, 150 devices total) try to connect over vlan, connectivity problem start to appear.
Windows shows "no connectivity" and amount of lost ping requests increases to 20%, ping time also increases.
I'm using UniFi AP-LR as endpoint AP for laptops and cellphones.

Could that be because of the misconfiguration? Can somebody check it?

/interface ethernet
set [ find default-name=ether1 ] name=ether1-master
set [ find default-name=ether2 ] master-port=ether1-master
set [ find default-name=ether3 ] master-port=ether1-master
set [ find default-name=ether4 ] master-port=ether1-master
...

/interface vlan
add comment=K201 interface=ether1-master name=vlan2 vlan-id=2
add comment=K203 interface=ether1-master name=vlan3 vlan-id=3
add comment=STUDENTS interface=ether1-master name=vlan4 vlan-id=4
add comment=K205 interface=ether1-master name=vlan5 vlan-id=5
add comment=GUESTS interface=ether1-master name=vlan6 vlan-id=6

/interface ethernet switch egress-vlan-tag
add tagged-ports=ether2,ether3,switch1-cpu vlan-id=4
add tagged-ports=ether2,switch1-cpu vlan-id=2
add tagged-ports=ether2,switch1-cpu vlan-id=3
add tagged-ports=ether2,switch1-cpu vlan-id=5
add tagged-ports=ether4,switch1-cpu vlan-id=6

/interface ethernet switch vlan
add ports=ether1-master,ether2,ether3,ether4,switch1-cpu vlan-id=4
add ports=ether1-master,ether2,switch1-cpu vlan-id=2
add ports=ether1-master,ether2,switch1-cpu vlan-id=3
add ports=ether1-master,ether2,switch1-cpu vlan-id=5
add ports=ether4,switch1-cpu vlan-id=6

mpreissner · Mon Feb 22, 2016 2:15 pm

I think you've got every part of this right EXCEPT for using egress-vlan-tag. Unless your endpoints are tagging packets (uncommon when dealing with PC endpoints), you want to use ingress-vlan-translation.

HumanDamned · Mon Feb 22, 2016 2:27 pm

I think you've got every part of this right EXCEPT for using egress-vlan-tag. Unless your endpoints are tagging packets (uncommon when dealing with PC endpoints), you want to use ingress-vlan-translation.

Thanks for the reply and sorry for the schematic image.
The endpoint devices are using untagged pockets, but before that AccessPoints in the building receives the tagged traffic.

IPS ---> Mikrotik ---tagged--> SW ---tagged--> UniFi AP-LR---untagged--> PC and sellphones

mpreissner · Mon Feb 22, 2016 4:56 pm

I think you've got every part of this right EXCEPT for using egress-vlan-tag. Unless your endpoints are tagging packets (uncommon when dealing with PC endpoints), you want to use ingress-vlan-translation.
Thanks for the reply and sorry for the schematic image.
The endpoint devices are using untagged pockets, but before that AccessPoints in the building receives the tagged traffic.

IPS ---> Mikrotik ---tagged--> SW ---tagged--> AP ---untagged--> PC and sellphones

So, answer this...are you trying to do your routing with the CRS, or is there a router upstream that's doing all the layer 3 forwarding? I have an RB750GL doing my routing for a CRS226, so if that's the case, then my config sounds pretty much the same as what you're trying to do. Your initial post didn't indicate an upstream router...only the CRS.

HumanDamned · Mon Feb 22, 2016 9:30 pm

No, there is no upstream router that I can manage.

Mon Feb 22, 2016 10:29 pm

is better to configure CRS switch via winbox, i had problems with terminal configuration

HumanDamned · Mon Feb 29, 2016 11:23 am

is better to configure CRS switch via winbox, i had problems with terminal configuration

Thanks for the suggestion, I'm using only winbox

By the way...when I have these VLAN connection problems winbox also disconnects and for 5-10 sec routerbord i not accessible =( whan cound be the problem?

Mon Feb 29, 2016 8:10 pm

is better to configure CRS switch via winbox, i had problems with terminal configuration
Thanks for the suggestion, I'm using only winbox

By the way...when I have these VLAN connection problems winbox also disconnects and for 5-10 sec routerbord i not accessible =( whan cound be the problem?

i suggest you to leave eth24 without master port, assign a ip to it and use it to manage the switch only via winbox

HumanDamned · Thu Mar 03, 2016 1:02 pm

Hi everyone, I have an update about my problem. I have tried to disable the the egress-vlan-tag rules and now the Routerboard works more stable. Lost ping requests dropped to 2% and CPU usage also decreased. Who can comment that?

/interface ethernet switch egress-vlan-tag
add disabled=yes tagged-ports=ether2,ether3,switch1-cpu vlan-id=4
add disabled=yes tagged-ports=ether2,switch1-cpu vlan-id=2
add disabled=yes tagged-ports=ether2,switch1-cpu vlan-id=3
add disabled=yes tagged-ports=ether2,switch1-cpu vlan-id=5
add disabled=yes tagged-ports=ether4,switch1-cpu vlan-id=6

CRS125 and trunk ports

CRS125 and trunk ports

Re: CRS125 and trunk ports

Re: CRS125 and trunk ports

Re: CRS125 and trunk ports

Re: CRS125 and trunk ports

Re: CRS125 and trunk ports

Re: CRS125 and trunk ports

Re: CRS125 and trunk ports

Re: CRS125 and trunk ports

Who is online