Community discussions

MikroTik App
 
dima1002
Member Candidate
Member Candidate
Topic Author
Posts: 160
Joined: Fri Jan 26, 2018 8:40 pm

CRS354-Switch – VLAN – CPU100 %

Sat May 13, 2023 9:38 am

Hello,

this is our configuration from our CRS354 switch, why is the CPU only running at 100%?
# may/13/2023 08:32:54 by RouterOS 7.6
# software id = 0PP4-P4QA
#
# model = CRS354-48P-4S+2Q+
# serial number = B5621FD89A64
/interface bridge
add name=BRIDGE protocol-mode=none vlan-filtering=yes
/interface ethernet
set [ find default-name=sfp-sfpplus1 ] auto-negotiation=no rx-flow-control=\
    auto tx-flow-control=auto
set [ find default-name=sfp-sfpplus2 ] auto-negotiation=no rx-flow-control=\
    auto tx-flow-control=auto
set [ find default-name=sfp-sfpplus3 ] auto-negotiation=no rx-flow-control=\
    auto tx-flow-control=auto
set [ find default-name=sfp-sfpplus4 ] auto-negotiation=no rx-flow-control=\
    auto tx-flow-control=auto
/interface vlan
add comment=MGT interface=BRIDGE name=VLAN_99 vlan-id=99
add comment=COMPANY interface=BRIDGE name=VLAN_100 vlan-id=100
add comment=GUEST interface=BRIDGE name=VLAN_200 vlan-id=200
add comment=DMZ interface=BRIDGE name=VLAN_300 vlan-id=300
add comment=HOTSPOT interface=BRIDGE name=VLAN_400 vlan-id=400
add comment=PRIVAT interface=BRIDGE name=VLAN_500 vlan-id=500
add comment=LTE interface=BRIDGE name=VLAN_600 vlan-id=600
add comment=BACKUP1 interface=BRIDGE name=VLAN_700 vlan-id=700
add comment=BACKUP2 interface=BRIDGE name=VLAN_800 vlan-id=800
add comment=TEL interface=BRIDGE name=VLAN_900 vlan-id=900
add comment=IOT interface=BRIDGE name=VLAN_1000 vlan-id=1000
add comment=PRINTER interface=BRIDGE name=VLAN_1100 vlan-id=1100
add comment=SONOS interface=BRIDGE name=VLAN_1200 vlan-id=1200
add comment=KAMERA interface=BRIDGE name=VLAN_1300 vlan-id=1300
add comment=SONSTIGES01 interface=BRIDGE name=VLAN_1400 vlan-id=1400
add comment=SONSTIGES02 interface=BRIDGE name=VLAN_1500 vlan-id=1500
add comment=SONSTIGES03 interface=BRIDGE name=VLAN_1600 vlan-id=1600
add comment=SONSTIGES04 interface=BRIDGE name=VLAN_1700 vlan-id=1700
add comment=SONSTIGES05 interface=BRIDGE name=VLAN_1800 vlan-id=1800
add comment=SONSTIGES06 interface=BRIDGE name=VLAN_1900 vlan-id=1900
add comment=SONSTIGES07 interface=BRIDGE name=VLAN_2000 vlan-id=2000
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/port
set 0 name=serial0
/snmp community
add addresses=192.168.111.0/24,10.16.0.0/16,10.99.0.0/16 \
    authentication-protocol=SHA1 encryption-protocol=AES name=snmpv3 \
    security=private
/interface bridge port
add bridge=BRIDGE interface=ether1 pvid=100
add bridge=BRIDGE interface=ether2 pvid=100
add bridge=BRIDGE interface=ether3 pvid=100
add bridge=BRIDGE interface=ether4 pvid=100
add bridge=BRIDGE interface=ether5 pvid=100
add bridge=BRIDGE interface=ether6 pvid=100
add bridge=BRIDGE interface=ether7 pvid=100
add bridge=BRIDGE interface=ether8 pvid=100
add bridge=BRIDGE interface=ether9 pvid=100
add bridge=BRIDGE interface=ether10 pvid=100
add bridge=BRIDGE interface=ether11 pvid=100
add bridge=BRIDGE interface=ether12 pvid=100
add bridge=BRIDGE interface=ether13 pvid=100
add bridge=BRIDGE interface=ether14 pvid=100
add bridge=BRIDGE interface=ether15 pvid=100
add bridge=BRIDGE interface=ether16 pvid=100
add bridge=BRIDGE interface=ether17 pvid=100
add bridge=BRIDGE interface=ether18 pvid=100
add bridge=BRIDGE interface=ether19 pvid=100
add bridge=BRIDGE interface=ether20 pvid=100
add bridge=BRIDGE interface=ether21 pvid=100
add bridge=BRIDGE interface=ether22 pvid=100
add bridge=BRIDGE interface=ether23 pvid=100
add bridge=BRIDGE interface=ether24 pvid=100
add bridge=BRIDGE interface=ether25 pvid=100
add bridge=BRIDGE interface=ether26 pvid=100
add bridge=BRIDGE interface=ether27 pvid=100
add bridge=BRIDGE interface=ether28 pvid=100
add bridge=BRIDGE interface=ether29 pvid=100
add bridge=BRIDGE interface=ether30 pvid=100
add bridge=BRIDGE interface=ether31 pvid=100
add bridge=BRIDGE interface=ether32 pvid=100
add bridge=BRIDGE interface=ether33 pvid=100
add bridge=BRIDGE interface=ether34 pvid=100
add bridge=BRIDGE interface=ether35 pvid=100
add bridge=BRIDGE interface=ether36 pvid=100
add bridge=BRIDGE interface=ether37 pvid=100
add bridge=BRIDGE interface=ether38 pvid=100
add bridge=BRIDGE interface=ether39 pvid=100
add bridge=BRIDGE interface=ether40 pvid=100
add bridge=BRIDGE interface=ether41 pvid=100
add bridge=BRIDGE interface=ether42 pvid=100
add bridge=BRIDGE interface=ether43 pvid=100
add bridge=BRIDGE interface=ether44 pvid=100
add bridge=BRIDGE interface=ether45 pvid=100
add bridge=BRIDGE interface=ether46 pvid=100
add bridge=BRIDGE interface=ether47 pvid=100
add bridge=BRIDGE interface=ether48 pvid=100
add bridge=BRIDGE interface=ether49 pvid=100
add bridge=BRIDGE interface=qsfpplus1-1
add bridge=BRIDGE interface=qsfpplus1-2
add bridge=BRIDGE interface=qsfpplus1-3
add bridge=BRIDGE interface=qsfpplus1-4
add bridge=BRIDGE interface=qsfpplus2-1
add bridge=BRIDGE interface=qsfpplus2-2
add bridge=BRIDGE interface=qsfpplus2-3
add bridge=BRIDGE interface=qsfpplus2-4
add bridge=BRIDGE interface=sfp-sfpplus1
add bridge=BRIDGE interface=sfp-sfpplus2
add bridge=BRIDGE interface=sfp-sfpplus3
add bridge=BRIDGE interface=sfp-sfpplus4
/interface bridge vlan
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=400
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=500
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=600
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=700
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=800
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=900
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1000
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1100
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1200
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1300
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1400
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1500
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1600
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1700
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1800
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1900
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=2000
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=300
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=200
add bridge=BRIDGE tagged="BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sf\
    pplus4,qsfpplus1-1,qsfpplus1-2,qsfpplus1-3,qsfpplus1-4,qsfpplus2-1,qsfpplu\
    s2-2,qsfpplus2-3,qsfpplus2-4" vlan-ids=99
add bridge=BRIDGE tagged="BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sf\
    pplus4,qsfpplus1-1,qsfpplus1-2,qsfpplus1-3,qsfpplus1-4,qsfpplus2-1,qsfpplu\
    s2-2,qsfpplus2-3,qsfpplus2-4" vlan-ids=100
/ip dhcp-client
add interface=VLAN_99
add disabled=yes interface=VLAN_100
add disabled=yes interface=VLAN_500
/snmp
set enabled=yes location=London \
    trap-community=snmpv3 trap-version=3
/system clock
set time-zone-name=Europe/London
/system identity
set name=APV01SW02
/system routerboard settings
set boot-os=router-os
/tool romon
set enabled=yes
 
tdw
Forum Guru
Forum Guru
Posts: 1841
Joined: Sat May 05, 2018 11:55 am

Re: CRS354-Switch – VLAN – CPU100 %

Sat May 13, 2023 2:27 pm

Difficult to say without knowing how you are using it - if it is for inter-VLAN routing then it would be expected as the CPU in CRS devices is not very capable. That Mikrotik does support L3 hardware offload, but you have to explicitly configure it https://help.mikrotik.com/docs/display/ ... Offloading
 
dima1002
Member Candidate
Member Candidate
Topic Author
Posts: 160
Joined: Fri Jan 26, 2018 8:40 pm

Re: CRS354-Switch – VLAN – CPU100 %

Sat May 13, 2023 4:30 pm

This is a switch that is supposed to release different VLANs on different ports. So that later I can choose any port freely.
Turned on L3 hardware support except for the uplinks. Is that correct so far?
# may/13/2023 15:24:29 by RouterOS 7.6
# software id = 0PP4-P4QA
#
# model = CRS354-48P-4S+2Q+
# serial number = B5621FD89A64
/interface bridge
add name=BRIDGE protocol-mode=none vlan-filtering=yes
/interface ethernet
set [ find default-name=sfp-sfpplus1 ] auto-negotiation=no rx-flow-control=\
    auto tx-flow-control=auto
set [ find default-name=sfp-sfpplus2 ] auto-negotiation=no rx-flow-control=\
    auto tx-flow-control=auto
set [ find default-name=sfp-sfpplus3 ] auto-negotiation=no rx-flow-control=\
    auto tx-flow-control=auto
set [ find default-name=sfp-sfpplus4 ] auto-negotiation=no rx-flow-control=\
    auto tx-flow-control=auto
/interface vlan
add comment=MGT interface=BRIDGE name=VLAN_99 vlan-id=99
add comment=COMPANY interface=BRIDGE name=VLAN_100 vlan-id=100
add comment=GUEST interface=BRIDGE name=VLAN_200 vlan-id=200
add comment=DMZ interface=BRIDGE name=VLAN_300 vlan-id=300
add comment=HOTSPOT interface=BRIDGE name=VLAN_400 vlan-id=400
add comment=PRIVAT interface=BRIDGE name=VLAN_500 vlan-id=500
add comment=LTE interface=BRIDGE name=VLAN_600 vlan-id=600
add comment=BACKUP1 interface=BRIDGE name=VLAN_700 vlan-id=700
add comment=BACKUP2 interface=BRIDGE name=VLAN_800 vlan-id=800
add comment=TELEFON interface=BRIDGE name=VLAN_900 vlan-id=900
add comment=IOT interface=BRIDGE name=VLAN_1000 vlan-id=1000
add comment=DRUCKER interface=BRIDGE name=VLAN_1100 vlan-id=1100
add comment=SONOS interface=BRIDGE name=VLAN_1200 vlan-id=1200
add comment=KAMERA interface=BRIDGE name=VLAN_1300 vlan-id=1300
add comment=SONSTIGES01 interface=BRIDGE name=VLAN_1400 vlan-id=1400
add comment=SONSTIGES02 interface=BRIDGE name=VLAN_1500 vlan-id=1500
add comment=SONSTIGES03 interface=BRIDGE name=VLAN_1600 vlan-id=1600
add comment=SONSTIGES04 interface=BRIDGE name=VLAN_1700 vlan-id=1700
add comment=SONSTIGES05 interface=BRIDGE name=VLAN_1800 vlan-id=1800
add comment=SONSTIGES06 interface=BRIDGE name=VLAN_1900 vlan-id=1900
add comment=SONSTIGES07 interface=BRIDGE name=VLAN_2000 vlan-id=2000
/interface ethernet switch
set 0 l3-hw-offloading=yes
/interface ethernet switch port
set 1 l3-hw-offloading=no
set 2 l3-hw-offloading=no
set 3 l3-hw-offloading=no
set 4 l3-hw-offloading=no
set 5 l3-hw-offloading=no
set 6 l3-hw-offloading=no
set 7 l3-hw-offloading=no
set 8 l3-hw-offloading=no
set 9 l3-hw-offloading=no
set 10 l3-hw-offloading=no
set 11 l3-hw-offloading=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/port
set 0 name=serial0
/snmp community
add addresses=192.168.254.0/24,10.16.0.0/16,10.99.0.0/16 \
    authentication-protocol=SHA1 encryption-protocol=AES name=snmpv3 \
    security=private
/interface bridge port
add bridge=BRIDGE interface=ether1 pvid=100
add bridge=BRIDGE interface=ether2 pvid=100
add bridge=BRIDGE interface=ether3 pvid=100
add bridge=BRIDGE interface=ether4 pvid=100
add bridge=BRIDGE interface=ether5 pvid=100
add bridge=BRIDGE interface=ether6 pvid=100
add bridge=BRIDGE interface=ether7 pvid=100
add bridge=BRIDGE interface=ether8 pvid=100
add bridge=BRIDGE interface=ether9 pvid=100
add bridge=BRIDGE interface=ether10 pvid=100
add bridge=BRIDGE interface=ether11 pvid=100
add bridge=BRIDGE interface=ether12 pvid=100
add bridge=BRIDGE interface=ether13 pvid=100
add bridge=BRIDGE interface=ether14 pvid=100
add bridge=BRIDGE interface=ether15 pvid=100
add bridge=BRIDGE interface=ether16 pvid=100
add bridge=BRIDGE interface=ether17 pvid=100
add bridge=BRIDGE interface=ether18 pvid=100
add bridge=BRIDGE interface=ether19 pvid=100
add bridge=BRIDGE interface=ether20 pvid=100
add bridge=BRIDGE interface=ether21 pvid=100
add bridge=BRIDGE interface=ether22 pvid=100
add bridge=BRIDGE interface=ether23 pvid=100
add bridge=BRIDGE interface=ether24 pvid=100
add bridge=BRIDGE interface=ether25 pvid=100
add bridge=BRIDGE interface=ether26 pvid=100
add bridge=BRIDGE interface=ether27 pvid=100
add bridge=BRIDGE interface=ether28 pvid=100
add bridge=BRIDGE interface=ether29 pvid=100
add bridge=BRIDGE interface=ether30 pvid=100
add bridge=BRIDGE interface=ether31 pvid=100
add bridge=BRIDGE interface=ether32 pvid=100
add bridge=BRIDGE interface=ether33 pvid=100
add bridge=BRIDGE interface=ether34 pvid=100
add bridge=BRIDGE interface=ether35 pvid=100
add bridge=BRIDGE interface=ether36 pvid=100
add bridge=BRIDGE interface=ether37 pvid=100
add bridge=BRIDGE interface=ether38 pvid=100
add bridge=BRIDGE interface=ether39 pvid=100
add bridge=BRIDGE interface=ether40 pvid=100
add bridge=BRIDGE interface=ether41 pvid=100
add bridge=BRIDGE interface=ether42 pvid=100
add bridge=BRIDGE interface=ether43 pvid=100
add bridge=BRIDGE interface=ether44 pvid=100
add bridge=BRIDGE interface=ether45 pvid=100
add bridge=BRIDGE interface=ether46 pvid=100
add bridge=BRIDGE interface=ether47 pvid=100
add bridge=BRIDGE interface=ether48 pvid=100
add bridge=BRIDGE interface=ether49 pvid=100
add bridge=BRIDGE interface=qsfpplus1-1
add bridge=BRIDGE interface=qsfpplus1-2
add bridge=BRIDGE interface=qsfpplus1-3
add bridge=BRIDGE interface=qsfpplus1-4
add bridge=BRIDGE interface=qsfpplus2-1
add bridge=BRIDGE interface=qsfpplus2-2
add bridge=BRIDGE interface=qsfpplus2-3
add bridge=BRIDGE interface=qsfpplus2-4
add bridge=BRIDGE interface=sfp-sfpplus1
add bridge=BRIDGE interface=sfp-sfpplus2
add bridge=BRIDGE interface=sfp-sfpplus3
add bridge=BRIDGE interface=sfp-sfpplus4
/interface bridge vlan
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=400
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=500
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=600
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=700
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=800
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=900
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1000
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1100
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1200
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1300
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1400
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1500
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1600
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1700
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1800
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1900
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=2000
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=300
add bridge=BRIDGE tagged=\
    BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=200
add bridge=BRIDGE tagged="BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sf\
    pplus4,qsfpplus1-1,qsfpplus1-2,qsfpplus1-3,qsfpplus1-4,qsfpplus2-1,qsfpplu\
    s2-2,qsfpplus2-3,qsfpplus2-4" vlan-ids=99
add bridge=BRIDGE tagged="BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sf\
    pplus4,qsfpplus1-1,qsfpplus1-2,qsfpplus1-3,qsfpplus1-4,qsfpplus2-1,qsfpplu\
    s2-2,qsfpplus2-3,qsfpplus2-4" vlan-ids=100
/ip dhcp-client
add interface=VLAN_99
add disabled=yes interface=VLAN_100
add disabled=yes interface=VLAN_500
/system clock
set time-zone-name=London/Berlin
/system identity
set name=APV01
/system routerboard settings
set boot-os=router-os
/tool romon
set enabled=yes
 
tdw
Forum Guru
Forum Guru
Posts: 1841
Joined: Sat May 05, 2018 11:55 am

Re: CRS354-Switch – VLAN – CPU100 %

Sat May 13, 2023 5:21 pm

If you are using it purely as a switch with the inter-VLAN routing done elsewhere you don't need L3 hardware offload. You also only likely need management access from a single VLAN, in which case remove all of the other /interface vlan items and the bridge as a tagged member of those /interface bridge vlan - these are only required to pass traffic from the switch-like part of the bridge to the CPU for access to services on the Mikrotik itself. If there is a lot of broadcast traffic on the non-management VLANs that will also be directed to the CPU with the current configuration.
 
dima1002
Member Candidate
Member Candidate
Topic Author
Posts: 160
Joined: Fri Jan 26, 2018 8:40 pm

Re: CRS354-Switch – VLAN – CPU100 %

Sat May 13, 2023 6:52 pm

I don't quite understand that, i.e. I can't, for example, go from VLAN 200 to VLAN 100 and then have to go through the router?
My management VLAN is 99, i.e. just leave the VLAN?
Do you have an example file for me?
 
tdw
Forum Guru
Forum Guru
Posts: 1841
Joined: Sat May 05, 2018 11:55 am

Re: CRS354-Switch – VLAN – CPU100 %

Sat May 13, 2023 7:46 pm

If the routing is done elsewhere the interface and bridge VLAN settings would be
/interface vlan
add comment=MGT interface=BRIDGE name=VLAN_99 vlan-id=99
add comment=COMPANY interface=BRIDGE name=VLAN_100 vlan-id=100
add comment=GUEST interface=BRIDGE name=VLAN_200 vlan-id=200
add comment=DMZ interface=BRIDGE name=VLAN_300 vlan-id=300
add comment=HOTSPOT interface=BRIDGE name=VLAN_400 vlan-id=400
add comment=PRIVAT interface=BRIDGE name=VLAN_500 vlan-id=500
add comment=LTE interface=BRIDGE name=VLAN_600 vlan-id=600
add comment=BACKUP1 interface=BRIDGE name=VLAN_700 vlan-id=700
add comment=BACKUP2 interface=BRIDGE name=VLAN_800 vlan-id=800
add comment=TEL interface=BRIDGE name=VLAN_900 vlan-id=900
add comment=IOT interface=BRIDGE name=VLAN_1000 vlan-id=1000
add comment=PRINTER interface=BRIDGE name=VLAN_1100 vlan-id=1100
add comment=SONOS interface=BRIDGE name=VLAN_1200 vlan-id=1200
add comment=KAMERA interface=BRIDGE name=VLAN_1300 vlan-id=1300
add comment=SONSTIGES01 interface=BRIDGE name=VLAN_1400 vlan-id=1400
add comment=SONSTIGES02 interface=BRIDGE name=VLAN_1500 vlan-id=1500
add comment=SONSTIGES03 interface=BRIDGE name=VLAN_1600 vlan-id=1600
add comment=SONSTIGES04 interface=BRIDGE name=VLAN_1700 vlan-id=1700
add comment=SONSTIGES05 interface=BRIDGE name=VLAN_1800 vlan-id=1800
add comment=SONSTIGES06 interface=BRIDGE name=VLAN_1900 vlan-id=1900
add comment=SONSTIGES07 interface=BRIDGE name=VLAN_2000 vlan-id=2000

/interface bridge vlan
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=400
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=500
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=600
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=700
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=800
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=900
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1000
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1100
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1200
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1300
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1400
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1500
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1600
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1700
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1800
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=1900
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=2000
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=300
add bridge=BRIDGE tagged=BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4 vlan-ids=200
add bridge=BRIDGE tagged="BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4,qsfpplus1-1,qsfpplus1-2,qsfpplus1-3,qsfpplus1-4,qsfpplus2-1,qsfpplus2-2,qsfpplus2-3,qsfpplus2-4" vlan-ids=99
add bridge=BRIDGE tagged="BRIDGE,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4,qsfpplus1-1,qsfpplus1-2,qsfpplus1-3,qsfpplus1-4,qsfpplus2-1,qsfpplus2-2,qsfpplus2-3,qsfpplus2-4" vlan-ids=100
/ip dhcp-client
add interface=VLAN_99
add disabled=yes interface=VLAN_100
add disabled=yes interface=VLAN_500

Who is online

Users browsing this forum: adimihaix, rplant and 68 guests