I played around with switch rule ACLs and 802.1X and found out that I don't get the ACLs working properly.
My dynamic rules:
Code: Select all
/interface ethernet switch rule> print
Flags: X - disabled, I - invalid, D - dynamic
0 D ;;; dot1x dynamic
switch=switch1 ports=ether26
src-mac-address=00:24:54:XX:XX:XX/FF:FF:FF:FF:FF:FF mac-protocol=ipv6
copy-to-cpu=no redirect-to-cpu=no mirror=no
1 D ;;; dot1x dynamic
switch=switch1 ports=ether26
src-mac-address=00:24:54:XX:XX:XX/FF:FF:FF:FF:FF:FF mac-protocol=ip
dst-address=10.0.0.0/8 copy-to-cpu=no redirect-to-cpu=no mirror=no
2 D ;;; dot1x dynamic
switch=switch1 ports=ether26
src-mac-address=00:24:54:XX:XX:XX/FF:FF:FF:FF:FF:FF copy-to-cpu=no
redirect-to-cpu=no mirror=no new-dst-ports=""
Then I tried static rules:
Code: Select all
/interface ethernet switch rule> print
Flags: X - disabled, I - invalid, D - dynamic
0 X switch=switch1 ports=ether26 copy-to-cpu=no redirect-to-cpu=no mirror=no
new-dst-ports=""
1 switch=switch1 ports=ether26 mac-protocol=ip copy-to-cpu=no
redirect-to-cpu=no mirror=no new-dst-ports="" I also tried to swap bytes (0x0800 -> 0x0008) but without success (like mentioned here viewtopic.php?f=2&t=162887&p=802962).
This is on a CRS-354-48G-4S+2Q+ with RouterOS 6.47.2.
What could be wrong?
