I have a Mikrotik RB951G-2HnD running RouterOS 6.
I created a switch with port2 as the master and 3,4,5 as slaves. Effectively creating a 4 port switch as I believe is the way to set it up in RouterOS.
The problem is that the switch is acting like a simple network hub, mirroring all traffic from any of the 4 ports to any other port. I was initially trying to setup port mirroring with LAPTOP-A connected to port5 as the source and LAPTOP-B connected to port 2 as the target, which seemed to work, only to find out that when I plugged LAPTOP-A in Port4, I was still seeing the unicast traffic from LAPTOP-A appearing in Wireshark on LAPTOP-B.
The way I tested this is a ping from LAPTOP-A to a particular IPadres, which would otherwise never show up on LAPTOP-B. What is going on here? Why is the switch acting as a hub?
Also, I couldn't remove the source/target mirror ports via the webgui. After removing them and applying, they simply return. I had to go into the CLI and disable them there. After verifying that the mirror source/targe were actually removed, I tested again and I'm still seeing unicast traffic from LAPTOP-A appearing in Wireshark on LAPTOP-B.
This is really doing my head in, how can such a simple feature turn out to cause so much headaches?! :S