We have 4 Mikrotik switches CRS125-24G-1S and we have issues with Winbox that is disconnecting randomly. Also SSH is disconnecting.
The connection is made with IP address, not MAC. We tried Winbox 3.4, 3.7, 3.10 but no changes. Routerboard firmware is 3.24 and packages version is 6.38.
It is worth mentioning that these switches are connected to other Cisco switches and PFSense.
Hopefully someone can help us with this problem.
This is the configuration:
Code: Select all
MikroTik RouterOS 6.38 (c) 1999-2016 http://www.mikrotik.com/
[?] Gives the list of available commands
command [?] Gives help on the command and list of arguments
[Tab] Completes the command/word. If the input is ambiguous,
a second [Tab] gives possible options
/ Move up to base level
.. Move up one level
/command Use command at the base level
[switch1] > export
# jan/31/2017 12:10:10 by RouterOS 6.38
# software id = 05X7-G3AX
#
/interface ethernet
set [ find default-name=ether1 ] comment="Port Trunk" mac-address=E4:8D:8C:42:B1:73 name=ether1-master
set [ find default-name=ether2 ] auto-negotiation=no comment="Port Trunk" mac-address=E4:8D:8C:42:B1:74 master-port=ether1-master
set [ find default-name=ether3 ] comment="Port Trunk" mac-address=E4:8D:8C:42:B1:75 master-port=ether1-master
set [ find default-name=ether4 ] auto-negotiation=no comment="Port Trunk" mac-address=E4:8D:8C:42:B1:76 master-port=ether1-master
set [ find default-name=ether5 ] comment="Port Trunk" mac-address=E4:8D:8C:42:B1:77 master-port=ether1-master
set [ find default-name=ether6 ] comment="Port Trunk" mac-address=E4:8D:8C:42:B1:78 master-port=ether1-master
set [ find default-name=ether7 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:79 master-port=ether1-master
set [ find default-name=ether8 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:7A master-port=ether1-master
set [ find default-name=ether9 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:7B master-port=ether1-master
set [ find default-name=ether10 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:7C master-port=ether1-master
set [ find default-name=ether11 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:7D master-port=ether1-master
set [ find default-name=ether12 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:7E master-port=ether1-master
set [ find default-name=ether13 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:7F master-port=ether1-master
set [ find default-name=ether14 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:80 master-port=ether1-master
set [ find default-name=ether15 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:81 master-port=ether1-master
set [ find default-name=ether16 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:82 master-port=ether1-master
set [ find default-name=ether17 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:83 master-port=ether1-master speed=1Gbps
set [ find default-name=ether18 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:84 master-port=ether1-master
set [ find default-name=ether19 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:85 master-port=ether1-master
set [ find default-name=ether20 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:86 master-port=ether1-master
set [ find default-name=ether21 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:87 master-port=ether1-master
set [ find default-name=ether22 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:88 master-port=ether1-master
set [ find default-name=ether23 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:89 master-port=ether1-master
set [ find default-name=ether24 ] comment="Port Access" mac-address=E4:8D:8C:42:B1:8A master-port=ether1-master
set [ find default-name=sfp1 ] mac-address=E4:8D:8C:42:B1:8B
/interface vlan
add interface=ether1-master name=xxx vlan-id=10
add interface=ether1-master name=xxx vlan-id=2
add interface=ether1-master name=xxx vlan-id=3
add interface=ether1-master name=xxx vlan-id=217
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/snmp community
set [ find default=yes ] read-access=no
add addresses=xxx name=xxx
/interface ethernet switch egress-vlan-tag
add tagged-ports=ether1-master,ether2,ether3,ether4,ether5,ether6 vlan-id=112
add tagged-ports=ether1-master,ether2,ether3,ether4,ether5,ether6,switch1-cpu vlan-id=217
add tagged-ports=ether1-master,ether2,ether3,ether4,ether5,ether6 vlan-id=142
add tagged-ports=ether1-master,ether2,ether3,ether4,ether5,ether6 vlan-id=234
add tagged-ports=ether1-master,ether2,ether3,ether4,ether5,ether6 vlan-id=10
add tagged-ports=ether1-master,ether2,ether3,ether4,ether5,ether6 vlan-id=2
add tagged-ports=ether1-master,ether2,ether3,ether4,ether5,ether6 vlan-id=3
add tagged-ports=ether1-master,ether2,ether3,ether4,ether5,ether6 vlan-id=320
/interface ethernet switch egress-vlan-translation
add customer-vid=112 customer-vlan-format=untagged-or-tagged new-customer-vid=0 ports=ether20 service-vlan-format=untagged-or-tagged
add customer-vid=320 customer-vlan-format=untagged-or-tagged new-customer-vid=0 ports=\
ether7,ether8,ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16,ether17,ether18,ether19,ether21,ether22,ether23,ether24 service-vlan-format=untagged-or-tagged
/interface ethernet switch ingress-port-policer
add meter-unit=packet packet-types=broadcast port=ether1-master rate=500
add meter-unit=packet packet-types=broadcast port=ether2 rate=500
add meter-unit=packet packet-types=broadcast port=ether2 rate=500
add meter-unit=packet packet-types=broadcast port=ether3 rate=500
add meter-unit=packet packet-types=broadcast port=ether4 rate=500
add meter-unit=packet packet-types=broadcast port=ether5 rate=500
add meter-unit=packet packet-types=broadcast port=ether6 rate=500
add meter-unit=packet packet-types=broadcast port=ether7 rate=500
add meter-unit=packet packet-types=broadcast port=ether8 rate=500
add meter-unit=packet packet-types=broadcast port=ether9 rate=500
add meter-unit=packet packet-types=broadcast port=ether10 rate=500
add meter-unit=packet packet-types=broadcast port=ether11 rate=500
add meter-unit=packet packet-types=broadcast port=ether12 rate=500
add meter-unit=packet packet-types=broadcast port=ether13 rate=500
add meter-unit=packet packet-types=broadcast port=ether14 rate=500
add meter-unit=packet packet-types=broadcast port=ether15 rate=500
add meter-unit=packet packet-types=broadcast port=ether16 rate=500
add meter-unit=packet packet-types=broadcast port=ether17 rate=500
add meter-unit=packet packet-types=broadcast port=ether18 rate=500
add meter-unit=packet packet-types=broadcast port=ether19 rate=500
add meter-unit=packet packet-types=broadcast port=ether20 rate=500
add meter-unit=packet packet-types=broadcast port=ether21 rate=500
add meter-unit=packet packet-types=broadcast port=ether22 rate=500
add meter-unit=packet packet-types=broadcast port=ether23 rate=500
add meter-unit=packet packet-types=broadcast port=ether24 rate=500
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether1-master rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether2 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether3 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether4 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether5 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether6 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether7 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether8 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether9 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether10 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether11 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether12 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether13 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether14 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether15 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether16 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether17 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether18 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether19 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether20 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether21 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether22 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether23 rate=5k
add meter-unit=packet packet-types=arp-or-nd,unregistered-multicast port=ether24 rate=5k
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=112 ports=ether20
add customer-vid=0 new-customer-vid=320 ports=ether7,ether8,ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16,ether17,ether18,ether19,ether21,ether22,ether23,ether24
/interface ethernet switch port
set 0 isolation-leakage-profile-override=2
set 1 isolation-leakage-profile-override=2
set 2 isolation-leakage-profile-override=2
set 3 isolation-leakage-profile-override=2
set 4 isolation-leakage-profile-override=2
set 5 isolation-leakage-profile-override=2
set 6 isolation-leakage-profile-override=2
set 7 isolation-leakage-profile-override=2
set 8 isolation-leakage-profile-override=2
set 9 isolation-leakage-profile-override=2
set 10 isolation-leakage-profile-override=2
set 11 isolation-leakage-profile-override=2
set 12 isolation-leakage-profile-override=2
set 13 isolation-leakage-profile-override=2
set 14 isolation-leakage-profile-override=2
set 15 isolation-leakage-profile-override=2
set 16 isolation-leakage-profile-override=2
set 17 isolation-leakage-profile-override=2
set 18 isolation-leakage-profile-override=2
set 19 isolation-leakage-profile-override=2
set 20 isolation-leakage-profile-override=2
set 21 isolation-leakage-profile-override=2
set 22 isolation-leakage-profile-override=2
set 23 isolation-leakage-profile-override=2
/interface ethernet switch port-isolation
add disabled=yes port-profile=29 ports=\
ether1-master,ether2,ether3,ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16,ether17,ether18,ether19,ether20,ether21,ether22,ether23,ether24,sfp1,switch1-cpu \
type=dst
/interface ethernet switch vlan
add ports=ether1-master,ether2,ether3,ether4,ether5,ether6,switch1-cpu vlan-id=217
add ports=ether1-master,ether2,ether3,ether4,ether5,ether6,ether20 vlan-id=112
add ports=ether1-master,ether2,ether3,ether4,ether5,ether6 vlan-id=142
add ports=ether1-master,ether2,ether3,ether4,ether5,ether6 vlan-id=234
add ports=ether1-master,ether2,ether3,ether4,ether5,ether6 vlan-id=10
add ports=ether1-master,ether2,ether3,ether4,ether5,ether6 vlan-id=2
add ports=ether1-master,ether2,ether3,ether4,ether5,ether6 vlan-id=3
add ports=ether1-master,ether2,ether3,ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16,ether17,ether18,ether19,ether21,ether22,ether23,ether24 vlan-id=320
/ip address
add address=xxx interface=vlan217 network=xxx
/ip dns
set servers=xxx,xxx
/ip route
add distance=1 gateway=xxx
add distance=1 gateway=xxx
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/lcd
set time-interval=daily
/snmp
set contact=xxx enabled=yes location=xxx trap-community=xxx trap-generators=interfaces trap-interfaces=all
/system clock
set time-zone-name=Europe/Bucharest
/system identity
set name="switch1"
