Community discussions

MikroTik App
 
blingblouw
Member
Member
Topic Author
Posts: 345
Joined: Wed Aug 25, 2010 9:43 am

Atheros 8227 - Port-Isolation

Wed May 10, 2023 12:39 pm

https://help.mikrotik.com/docs/display/ ... tisolation

According to the docs, if you're using vlan-mode secure, fallback etc then you should create a switch rule with a new-dst-ports, however if you try do that, the switch complains that it is not supported.

/interface ethernet switch rule> add ports=ether2,ether3,ether4,ether5 new-dst-ports=ether1  switch=switch1 
failure: not supported for this switch
So how do you enable port-isolation using this switch chip?
 
blingblouw
Member
Member
Topic Author
Posts: 345
Joined: Wed Aug 25, 2010 9:43 am

Re: Atheros 8227 - Port-Isolation

Fri May 12, 2023 11:38 am

anyone know?
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11968
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Atheros 8227 - Port-Isolation

Fri May 12, 2023 12:01 pm

anyone know?
What is your device? RouterOS version?
Provide everytime details.
You are sure that the device have one Atheros8227 ???
 
blingblouw
Member
Member
Topic Author
Posts: 345
Joined: Wed Aug 25, 2010 9:43 am

Re: Atheros 8227 - Port-Isolation

Fri May 12, 2023 1:58 pm

Yes, I'm sure it is. Thats what the router shows

[admin@Switch-1-2] > sys routerboard print           
       routerboard: yes
        board-name: PowerBOX
             model: RouterBOARD 750P r2
     serial-number: 5BBC052DEA60
     firmware-type: qca9531L
  factory-firmware: 3.22
  current-firmware: 3.22
  upgrade-firmware: 6.48.6
[admin@Switch-1-2] > interface ethernet switch print 
Flags: I - invalid 
 #   NAME                                                         TYPE             MIRROR-SOURCE                                                       MIRROR-TARGET                                                       SWITCH-ALL-PORTS
 0   switch1                                                      Atheros-8227     none                                                                none                                                               
[admin@Switch-1-2] > interface ethernet switch rule add ports=ether1,ether2,ether3,ether5 new-dst-ports=ether4 
switch: switch1
failure: not supported for this switch
[admin@Switch-1-2] > 
Running 6.48.6 (long-term)
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11968
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Atheros 8227 - Port-Isolation

Fri May 12, 2023 2:33 pm

Uh.... upgrade firmware with
/sys rou upgrade
Because your device still use the old 3.22
Can be the problem.

Your device is supposed to support such feature.

If not work the update, contact directly support@mikrotik.com
 
User avatar
chechito
Forum Guru
Forum Guru
Posts: 2989
Joined: Sun Aug 24, 2014 3:14 am
Location: Bogota Colombia
Contact:

Re: Atheros 8227 - Port-Isolation

Fri May 12, 2023 10:42 pm

https://help.mikrotik.com/docs/display/ ... tisolation

According to the docs, if you're using vlan-mode secure, fallback etc then you should create a switch rule with a new-dst-ports, however if you try do that, the switch complains that it is not supported.

/interface ethernet switch rule> add ports=ether2,ether3,ether4,ether5 new-dst-ports=ether1  switch=switch1 
failure: not supported for this switch
So how do you enable port-isolation using this switch chip?

rules not supported on that switch

you must use
/interface ethernet switch port-isolation

Who is online

Users browsing this forum: anav, Andrey05, ivicask and 88 guests