we have a CRS326-24s-2q and can't access an nas server connected via 10g base-t using uplink sfp plus port. But when we connect the ether2 (management port the nas replies.and we're able to access it.
We just want to use the switch as a TOR switch. for all the downlinks.. We're in NON_Prod so we can mess around.. I'll post our config. Also we're running OPNSense and created vlan's etc and running via dac cable. We can ping the other mikrotik switch that's connected the that crs326 but not google or the router. Once again when I plug in the mgt port to a switch anything works.. (sorry don't want to use 100meg port.. LOL
here's our config.
Code: Select all
# 2024-03-16 09:35:18 by RouterOS 7.14.1
# software id = 6D40-IJ76
#
# model = CRS326-24S+2Q+
# serial number = *************
/interface bridge
add name=bridge
/interface ethernet
set [ find default-name=sfp-sfpplus1 ] advertise=10G-baseSR-LR,10G-baseCR \
name=1-Downlink_2_OFFICE_SWITCH
set [ find default-name=sfp-sfpplus2 ] advertise=10G-baseSR-LR name=\
"2-Downlink to STORAGE SWITCH"
set [ find default-name=sfp-sfpplus3 ] advertise=10G-baseCR name=\
"3-DOWNLINK TO 48 PORT POE-1"
set [ find default-name=sfp-sfpplus4 ] advertise=10G-baseCR name=\
"4-DOWNLINK TO 48 PORT POE-2"
set [ find default-name=sfp-sfpplus5 ] advertise=10G-baseCR name=\
"5-DOWNLINK TO 8 PORT ENT.-1"
set [ find default-name=sfp-sfpplus6 ] advertise=10G-baseCR name=\
"6-DOWNLINK TO 8 PORT ENT.-2"
set [ find default-name=sfp-sfpplus7 ] advertise=\
10G-baseT,10G-baseSR-LR,10G-baseCR l2mtu=9000 mtu=9000 name=\
7-872XT_RJ45_10G rx-flow-control=auto tx-flow-control=auto
set [ find default-name=sfp-sfpplus8 ] advertise=10G-baseSR-LR name=\
"8-453D RJ45 10G" rx-flow-control=auto tx-flow-control=auto
set [ find default-name=sfp-sfpplus9 ] advertise=10G-baseSR-LR name=\
"9-HP WORKSTATION-1"
set [ find default-name=sfp-sfpplus10 ] advertise=10G-baseSR-LR name=\
"10-HP WORKSTATION-2"
set [ find default-name=sfp-sfpplus13 ] auto-negotiation=no name=\
"13-TEST UPLINK-1" rx-flow-control=auto tx-flow-control=auto
set [ find default-name=sfp-sfpplus14 ] auto-negotiation=no comment=\
"14-TEST UPLINK-2\
\n" name="14-TEST UPLINK-2" rx-flow-control=auto tx-flow-control=auto
set [ find default-name=sfp-sfpplus16 ] advertise=10G-baseSR-LR,10G-baseCR \
name=16-test_uplink
set [ find default-name=ether1 ] disabled=yes
set [ find default-name=qsfpplus1-1 ] auto-negotiation=no
set [ find default-name=qsfpplus1-2 ] disabled=yes
set [ find default-name=qsfpplus1-3 ] disabled=yes
set [ find default-name=qsfpplus1-4 ] disabled=yes
set [ find default-name=qsfpplus2-1 ] auto-negotiation=no
set [ find default-name=qsfpplus2-2 ] disabled=yes
set [ find default-name=qsfpplus2-3 ] disabled=yes
set [ find default-name=qsfpplus2-4 ] disabled=yes
set [ find default-name=sfp-sfpplus15 ] disabled=yes
set [ find default-name=sfp-sfpplus17 ] disabled=yes
set [ find default-name=sfp-sfpplus18 ] disabled=yes
set [ find default-name=sfp-sfpplus19 ] disabled=yes
set [ find default-name=sfp-sfpplus20 ] disabled=yes
set [ find default-name=sfp-sfpplus21 ] disabled=yes
set [ find default-name=sfp-sfpplus22 ] disabled=yes
set [ find default-name=sfp-sfpplus23 ] disabled=yes
set [ find default-name=sfp-sfpplus24 ] disabled=yes
/interface vlan
add interface=bridge name="LAN NETWORK" vlan-id=1
add interface=bridge name=MANAGEMENT vlan-id=98
/interface bonding
add mode=802.3ad name=opnsense slaves="13-TEST UPLINK-1,14-TEST UPLINK-2" \
transmit-hash-policy=layer-3-and-4
/interface ethernet switch
set 0 l3-hw-offloading=yes
/interface list
add name=WAN
add name=LAN
add name=LAN1
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge comment=MGT_INTERFACE interface=ether1
add bridge=*23 comment="UPLINK Opnsense-1" disabled=yes interface=qsfpplus1-1
add bridge=*23 comment="UPLINK Opnsense-2" disabled=yes interface=qsfpplus1-2
add bridge=*23 comment="UPLINK Opnsense 3" disabled=yes interface=qsfpplus1-3
add bridge=*23 comment="UPLINK Opnsense-4" disabled=yes interface=qsfpplus1-4
add bridge=bridge comment="UPLINK Opnsense-5" disabled=yes interface=\
qsfpplus2-1
add bridge=*23 comment="UPLINK Opnsense-6" disabled=yes interface=qsfpplus2-2
add bridge=*23 comment="UPLINK Opnsense-7" disabled=yes interface=qsfpplus2-3
add bridge=*23 comment="UPLINK Opnsense-8" disabled=yes interface=qsfpplus2-4
add bridge=bridge comment=defconf interface=1-Downlink_2_OFFICE_SWITCH
add bridge=bridge comment=defconf disabled=yes interface=\
"2-Downlink to STORAGE SWITCH"
add bridge=bridge comment=defconf disabled=yes interface=\
"3-DOWNLINK TO 48 PORT POE-1"
add bridge=bridge comment=defconf disabled=yes interface=\
"4-DOWNLINK TO 48 PORT POE-2"
add bridge=bridge comment=defconf disabled=yes interface=\
"5-DOWNLINK TO 8 PORT ENT.-1"
add bridge=bridge comment=defconf disabled=yes interface=\
"6-DOWNLINK TO 8 PORT ENT.-2"
add bridge=bridge comment=defconf disabled=yes interface="8-453D RJ45 10G"
add bridge=bridge comment=defconf disabled=yes interface="9-HP WORKSTATION-1"
add bridge=bridge comment=defconf disabled=yes interface=\
"10-HP WORKSTATION-2"
add bridge=bridge comment=defconf disabled=yes interface=sfp-sfpplus11
add bridge=bridge comment=defconf disabled=yes interface=sfp-sfpplus12
add bridge=bridge comment=defconf interface=16-test_uplink
add bridge=bridge interface=opnsense
add bridge=bridge interface=LAN1
/interface bridge vlan
add bridge=bridge tagged=16-test_uplink untagged=1-Downlink_2_OFFICE_SWITCH \
vlan-ids=1
add bridge=bridge tagged=16-test_uplink untagged=1-Downlink_2_OFFICE_SWITCH \
vlan-ids=99
/interface detect-internet
set wan-interface-list=WAN
/interface list member
add interface=ether1 list=LAN
add interface=1-Downlink_2_OFFICE_SWITCH list=LAN
add interface="2-Downlink to STORAGE SWITCH" list=LAN
add interface="3-DOWNLINK TO 48 PORT POE-1" list=LAN
add interface="4-DOWNLINK TO 48 PORT POE-2" list=LAN
add interface="5-DOWNLINK TO 8 PORT ENT.-1" list=LAN
add interface="6-DOWNLINK TO 8 PORT ENT.-2" list=LAN
add interface=7-872XT_RJ45_10G list=LAN
add interface="8-453D RJ45 10G" list=LAN
add interface="9-HP WORKSTATION-1" list=LAN
add interface="10-HP WORKSTATION-2" list=LAN
add interface=sfp-sfpplus11 list=LAN
add interface=sfp-sfpplus12 list=LAN
add interface=sfp-sfpplus15 list=LAN
add interface=sfp-sfpplus17 list=LAN
add interface=sfp-sfpplus18 list=LAN
add interface=sfp-sfpplus19 list=LAN
add interface=sfp-sfpplus20 list=LAN
add interface=sfp-sfpplus21 list=LAN
add interface=sfp-sfpplus22 list=LAN
add interface=sfp-sfpplus23 list=LAN
add interface=sfp-sfpplus24 list=LAN
add interface=qsfpplus1-1 list=LAN
add disabled=yes interface=qsfpplus1-2 list=LAN
add disabled=yes interface=qsfpplus1-3 list=LAN
add disabled=yes interface=qsfpplus1-4 list=LAN
add interface=qsfpplus2-1 list=LAN
add disabled=yes interface=qsfpplus2-2 list=LAN
add disabled=yes interface=qsfpplus2-3 list=LAN
add disabled=yes interface=qsfpplus2-4 list=LAN
add interface=1-Downlink_2_OFFICE_SWITCH list=LAN1
add interface=7-872XT_RJ45_10G list=LAN1
add interface=16-test_uplink list=LAN1
add interface=bridge list=LAN
/ip address
add address=10.11.11.2/24 interface=MANAGEMENT network=10.11.11.0
add address=10.11.12.99/24 interface=16-test_uplink network=10.11.12.0
/ip dhcp-client
add interface=*23
/ip dns
set allow-remote-requests=yes servers=1.1.1.1
/ip firewall filter
add action=accept chain=forward
/ipv6 firewall filter
add action=accept chain=forward
/system identity
set name=TOR_24
/system note
set show-at-login=no
/system routerboard settings
set boot-os=router-os enter-setup-on=delete-key
/system swos
set allow-from-ports="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p\
17,p18,p19,p20,p21,p22,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32" identity=\
"24 port Mikrotik" static-ip-address=10.11.12.99
/tool romon
set enabled=yes