RouterOS: 6.47.10 (latest LTS for now)
Brief problem description: no Ethernet Broadcast packets forwarded to or from 802.1Q port
I have simple interconnection scheme:
Server - 2U - SW1 - 2T - SW2 - 2U - Client
Server is connected to SW1 port in access mode (VLAN2 Untagged).
SW1 is SF200 series Cisco switch.
SW1 and SW2 (port ether1) interconnected as 802.1Q Trunks.
Client is connected to ether2 port in access mode (VLAN2 Untagged).
About SW2 I have two versions of the test:
1. SW2 is RB750 device. There is no issue. Everything works fine.
2. SW2 is changed to CRS125-24G-1S-2HnD interconnected the same way. ether1 - to SW1, ether2 - to Client. Client can't get IP-address by DHCP.
I started Wireshark on Server with capture filter based on Client's MAC Address.
I can see for example IPv4 and IPv6 packets coming to Server with theese MAC Addresses as Destination:
- 01:00:5e:7f:ff:fa (SSDP Multicast)
- 01:00:5e:00:00:fc (LLMNR Multicast)
- 33:33:00:01:00:02 (DHCPv6 Multicast)
- 33:33:00:01:00:03 (LLMNR Multicast)
- 33:33:00:00:00:02 (ICMPv6 Multicast)
But not even one Ethernet Broadcast.
Also I have remote management on CRS125 in VLAN9 with no problem.
I did Packet Capture on SW2 port ether2 and I can see UDP packets to 0.0.0.0:bootps (ethernet broadcast) coming from Client.
And I didn't see this kind of packets on ether1.
Changing SW2 back to RB750 resolves an issue.
Can you please help me to resolve problem with CRS125?
CRS125 meanful configuration:
Code: Select all
/interface bridge
add admin-mac=CC:2D:E0:99:7E:EB auto-mac=no comment=defconf name=bridge
add name=bridge-wireless
add name=bridge1
/interface vlan
add interface=bridge1 name=vlan-mgmt vlan-id=9
add interface=ether1 name=vlan-wireless vlan-id=6
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge1 comment=defconf interface=ether2
add bridge=bridge1 comment=defconf interface=ether3
add bridge=bridge1 comment=defconf interface=ether4
add bridge=bridge1 comment=defconf interface=ether5
add bridge=bridge1 comment=defconf interface=ether6
add bridge=bridge1 comment=defconf interface=ether7
add bridge=bridge1 comment=defconf interface=ether8
add bridge=bridge1 comment=defconf interface=ether9
add bridge=bridge1 comment=defconf interface=ether10
add bridge=bridge1 comment=defconf interface=ether11
add bridge=bridge1 comment=defconf interface=ether12
add bridge=bridge1 comment=defconf interface=ether13
add bridge=bridge1 comment=defconf interface=ether14
add bridge=bridge comment=defconf interface=ether15
add bridge=bridge comment=defconf interface=ether16
add bridge=bridge comment=defconf interface=ether17
add bridge=bridge comment=defconf interface=ether18
add bridge=bridge comment=defconf interface=ether19
add bridge=bridge comment=defconf interface=ether20
add bridge=bridge comment=defconf interface=ether21
add bridge=bridge comment=defconf interface=ether22
add bridge=bridge comment=defconf interface=ether23
add bridge=bridge comment=defconf interface=ether24
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge-wireless comment=defconf interface=wlan1
add bridge=bridge1 interface=ether1 trusted=yes
add bridge=bridge disabled=yes interface=vlan-data
add bridge=bridge-wireless interface=vlan-wireless
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface ethernet switch egress-vlan-tag
add tagged-ports=ether1 vlan-id=2
add tagged-ports=ether1,switch1-cpu vlan-id=9
add tagged-ports=ether1 vlan-id=3
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=2 ports="ether2,ether3,ether4,ether5,ether6,\
ether7,ether8,ether9,ether10,ether11,ether12,ether14"
add customer-vid=0 new-customer-vid=3 ports=ether13
/interface ethernet switch vlan
add comment=DATA ports="ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,\
ether9,ether10,ether11,ether12,ether14" vlan-id=2
add comment=MGMT ports=ether1,switch1-cpu vlan-id=9
add comment=PRN ports=ether1,ether13 vlan-id=3
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf disabled=yes interface=ether1 list=WAN
add interface=vlan-mgmt list=LAN
add interface=bridge1 list=LAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
192.168.88.0
add address=10.0.0.2/28 interface=vlan-mgmt network=10.0.0.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" \
connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=\
out,none out-interface-list=WAN
/ip route
add distance=1 gateway=10.0.0.1
/system package update
set channel=long-term