Here is the config for my main CRS326-24S+2Q+
And the config for my CRS326-24S+2Q+ that is our production top of rack switch# oct/02/2021 11:00:08 by RouterOS 6.47.10
# software id =
#
# model = CRS326-24S+2Q+
# serial number =
/interface ethernet
set [ find default-name=sfp-sfpplus1 ] advertise=1000M-full
set [ find default-name=sfp-sfpplus2 ] advertise=1000M-full auto-negotiation=\
no
set [ find default-name=sfp-sfpplus3 ] advertise=1000M-full auto-negotiation=\
no
set [ find default-name=sfp-sfpplus24 ] advertise=1000M-full \
auto-negotiation=no
/interface bridge
add admin-mac=2C:C8:1B:CD:D0:57 auto-mac=no comment=defconf name=bridge \
vlan-filtering=yes
/interface bonding
add mode=802.3ad name=CRS326-24S+2Q+RM-1 slaves=qsfpplus1-1,qsfpplus2-1
add mode=802.3ad name=CRS328-24P-4S+RM-1 slaves=sfp-sfpplus7,sfp-sfpplus8
add mode=802.3ad name=CRS328-24P-4S+RM-2 slaves=sfp-sfpplus9,sfp-sfpplus10
add mode=802.3ad name=CRS328-24P-4S+RM-3 slaves=sfp-sfpplus11,sfp-sfpplus12
add mode=802.3ad name=CRS328-24P-4S+RM-4 slaves=sfp-sfpplus13,sfp-sfpplus14
add mode=802.3ad name=CRS328-24P-4S+RM-5 slaves=sfp-sfpplus15,sfp-sfpplus16
add mode=802.3ad name=CRS328-24P-4S+RM-6 slaves=sfp-sfpplus17,sfp-sfpplus18
add mode=802.3ad name=CRS328-24P-4S+RM-7 slaves=sfp-sfpplus19,sfp-sfpplus20
add mode=802.3ad name=CRS328-24P-4S+RM-8 slaves=sfp-sfpplus21,sfp-sfpplus22
add mode=802.3ad name=CRS328-24P-4S+RM-9 slaves=sfp-sfpplus23,sfp-sfpplus24
/interface bridge port
add bridge=bridge comment=defconf ingress-filtering=yes interface=\
sfp-sfpplus1
add bridge=bridge comment=defconf ingress-filtering=yes interface=\
sfp-sfpplus2
add bridge=bridge comment=defconf ingress-filtering=yes interface=\
sfp-sfpplus3
add bridge=bridge comment=defconf ingress-filtering=yes interface=\
sfp-sfpplus4
add bridge=bridge interface=CRS326-24S+2Q+RM-1
add bridge=bridge interface=CRS328-24P-4S+RM-9
add bridge=bridge ingress-filtering=yes interface=CRS328-24P-4S+RM-8
add bridge=bridge ingress-filtering=yes interface=CRS328-24P-4S+RM-7
add bridge=bridge ingress-filtering=yes interface=CRS328-24P-4S+RM-6
add bridge=bridge ingress-filtering=yes interface=CRS328-24P-4S+RM-5
add bridge=bridge ingress-filtering=yes interface=CRS328-24P-4S+RM-4
add bridge=bridge ingress-filtering=yes interface=CRS328-24P-4S+RM-3
add bridge=bridge ingress-filtering=yes interface=CRS328-24P-4S+RM-2
add bridge=bridge ingress-filtering=yes interface=CRS328-24P-4S+RM-1
add bridge=bridge comment=defconf interface=sfp-sfpplus5
add bridge=bridge comment=defconf interface=sfp-sfpplus6
/ip neighbor discovery-settings
set discover-interface-list=all
/interface bridge vlan
add bridge=bridge comment=Workstation tagged=bridge vlan-ids=22
add bridge=bridge comment=Static tagged=bridge vlan-ids=23
add bridge=bridge comment=Lab tagged=bridge vlan-ids=24
add bridge=bridge comment=Wifi tagged=bridge vlan-ids=26
add bridge=bridge comment=Avaya tagged=bridge vlan-ids=27
add bridge=bridge comment=Storage tagged=bridge vlan-ids=200
add bridge=bridge comment=DMZ tagged=bridge vlan-ids=10
add bridge=bridge comment="Guest Wifi" tagged=bridge vlan-ids=100
add bridge=bridge comment=Registration tagged=bridge vlan-ids=102
add bridge=bridge comment=Isolation tagged=bridge vlan-ids=103
add bridge=bridge comment=Serenade tagged=bridge vlan-ids=206
add bridge=bridge comment=VoIP vlan-ids=20
add bridge=bridge comment=Management untagged=bridge vlan-ids=1
/ip address
add address=192.168.250.20/24 interface=bridge network=192.168.250.0
add address=192.168.88.1/24 interface=ether1 network=192.168.88.0
add address=192.168.23.253/24 interface=bridge network=192.168.23.0
/ip dhcp-client
add disabled=no interface=bridge
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip ssh
set strong-crypto=yes
/system clock
set time-zone-name=America/Chicago
/system identity
set name=CRS326-24S+2Q+RM-1
/system package update
set channel=long-term
/system routerboard settings
set boot-os=router-os
/tool mac-server
set allowed-interface-list=none
/tool mac-server mac-winbox
set allowed-interface-list=none
/tool mac-server ping
set enabled=no
Anyone notice any simple thing I'm missing?# sep/25/2021 18:36:15 by RouterOS 6.47.10
# software id =
#
# model = CRS326-24S+2Q+
# serial number =
/interface ethernet
set [ find default-name=sfp-sfpplus1 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full,10000M-full
set [ find default-name=sfp-sfpplus3 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full,10000M-full
set [ find default-name=sfp-sfpplus7 ] advertise=1000M-full auto-negotiation=\
no
set [ find default-name=sfp-sfpplus8 ] advertise=1000M-full auto-negotiation=\
no
set [ find default-name=sfp-sfpplus9 ] advertise=1000M-full auto-negotiation=\
no
set [ find default-name=sfp-sfpplus10 ] advertise=1000M-full \
auto-negotiation=no
set [ find default-name=sfp-sfpplus11 ] advertise=1000M-full \
auto-negotiation=no
set [ find default-name=sfp-sfpplus12 ] advertise=1000M-full \
auto-negotiation=no
set [ find default-name=sfp-sfpplus13 ] advertise=1000M-full \
auto-negotiation=no
set [ find default-name=sfp-sfpplus14 ] advertise=1000M-full \
auto-negotiation=no
set [ find default-name=sfp-sfpplus15 ] advertise=1000M-full \
auto-negotiation=no
set [ find default-name=sfp-sfpplus16 ] advertise=1000M-full \
auto-negotiation=no
set [ find default-name=sfp-sfpplus17 ] advertise=1000M-full \
auto-negotiation=no
set [ find default-name=sfp-sfpplus18 ] advertise=1000M-full \
auto-negotiation=no
set [ find default-name=sfp-sfpplus19 ] advertise=1000M-full \
auto-negotiation=no
set [ find default-name=sfp-sfpplus20 ] advertise=1000M-full \
auto-negotiation=no
set [ find default-name=sfp-sfpplus24 ] advertise=100M-full auto-negotiation=\
no
/interface bridge
add admin-mac=2C:C8:1B:CD:D0:1D auto-mac=no comment=defconf name=bridge \
vlan-filtering=yes
/interface bonding
add mode=802.3ad name=CRS326-24S+2Q+RM-1 slaves=qsfpplus1-1,qsfpplus2-1 \
transmit-hash-policy=layer-2-and-3
add mode=802.3ad name=prodbackup slaves=sfp-sfpplus15,sfp-sfpplus16 \
transmit-hash-policy=layer-2-and-3
add mode=802.3ad name=prodbackup-storage slaves=sfp-sfpplus17,sfp-sfpplus18 \
transmit-hash-policy=layer-2-and-3
add mode=802.3ad name=unimaxdc3 slaves=sfp-sfpplus19,sfp-sfpplus20 \
transmit-hash-policy=layer-2-and-3
add mode=802.3ad name=unimaxeng slaves=sfp-sfpplus7,sfp-sfpplus8 \
transmit-hash-policy=layer-2-and-3
add mode=802.3ad name=unimaxeng-storage slaves=sfp-sfpplus9,sfp-sfpplus10 \
transmit-hash-policy=layer-2-and-3
add mode=802.3ad name=wsbackup slaves=sfp-sfpplus11,sfp-sfpplus12 \
transmit-hash-policy=layer-2-and-3
add mode=802.3ad name=wsbackup-storage slaves=sfp-sfpplus13,sfp-sfpplus14 \
transmit-hash-policy=layer-2-and-3
/interface list
add name=WAN
add name=LAN
/interface bridge port
add bridge=bridge comment=defconf interface=sfp-sfpplus21
add bridge=bridge comment=defconf interface=sfp-sfpplus22
add bridge=bridge comment=defconf interface=sfp-sfpplus23
add bridge=bridge comment=defconf interface=sfp-sfpplus24
add bridge=bridge interface=CRS326-24S+2Q+RM-1
add bridge=bridge interface=unimaxeng
add bridge=bridge interface=unimaxeng-storage
add bridge=bridge interface=wsbackup
add bridge=bridge interface=wsbackup-storage
add bridge=bridge interface=prodbackup
add bridge=bridge interface=prodbackup-storage
add bridge=bridge comment=esxcorpa interface=sfp-sfpplus1
add bridge=bridge comment=esxcorpa interface=sfp-sfpplus2
add bridge=bridge comment=esxcorpb interface=sfp-sfpplus3
add bridge=bridge comment=esxcorpb interface=sfp-sfpplus4
add bridge=bridge comment=esxcorpc interface=sfp-sfpplus5
add bridge=bridge comment=esxcorpc interface=sfp-sfpplus6
add bridge=bridge interface=unimaxdc3 pvid=23
/ip neighbor discovery-settings
set discover-interface-list=all
/interface bridge vlan
add bridge=bridge comment=Workstation tagged=bridge vlan-ids=22
add bridge=bridge comment=Lab tagged=bridge vlan-ids=24
add bridge=bridge comment=Wifi tagged=bridge vlan-ids=26
add bridge=bridge comment=Avaya tagged=bridge vlan-ids=27
add bridge=bridge comment=Storage tagged=bridge vlan-ids=200
add bridge=bridge comment=DMZ tagged=bridge vlan-ids=10
add bridge=bridge comment="Guest Wifi" tagged=bridge vlan-ids=100
add bridge=bridge comment=Registration tagged=bridge vlan-ids=102
add bridge=bridge comment=Isolation tagged=bridge vlan-ids=103
add bridge=bridge comment=Static tagged=bridge vlan-ids=23
add bridge=bridge comment=Serenade tagged=bridge vlan-ids=206
add bridge=bridge comment=VoIP vlan-ids=20
add bridge=bridge comment=Management untagged=bridge vlan-ids=1
/interface list member
add interface=ether1 list=WAN
add interface=sfp-sfpplus1 list=LAN
add interface=sfp-sfpplus2 list=LAN
add interface=sfp-sfpplus3 list=LAN
add interface=sfp-sfpplus4 list=LAN
add interface=sfp-sfpplus5 list=LAN
add interface=sfp-sfpplus6 list=LAN
add interface=sfp-sfpplus7 list=LAN
add interface=sfp-sfpplus8 list=LAN
add interface=sfp-sfpplus9 list=LAN
add interface=sfp-sfpplus10 list=LAN
add interface=sfp-sfpplus11 list=LAN
add interface=sfp-sfpplus12 list=LAN
add interface=sfp-sfpplus13 list=LAN
add interface=sfp-sfpplus14 list=LAN
add interface=sfp-sfpplus15 list=LAN
add interface=sfp-sfpplus16 list=LAN
add interface=sfp-sfpplus17 list=LAN
add interface=sfp-sfpplus18 list=LAN
add interface=sfp-sfpplus19 list=LAN
add interface=sfp-sfpplus20 list=LAN
add interface=sfp-sfpplus21 list=LAN
add interface=sfp-sfpplus22 list=LAN
add interface=sfp-sfpplus23 list=LAN
add interface=sfp-sfpplus24 list=LAN
add interface=qsfpplus1-1 list=LAN
add interface=qsfpplus1-2 list=LAN
add interface=qsfpplus1-3 list=LAN
add interface=qsfpplus1-4 list=LAN
add interface=qsfpplus2-1 list=LAN
add interface=qsfpplus2-2 list=LAN
add interface=qsfpplus2-3 list=LAN
add interface=qsfpplus2-4 list=LAN
/ip address
add address=192.168.250.21/24 interface=bridge network=192.168.250.0
add address=192.168.88.1/24 interface=ether1 network=192.168.88.0
/ip route
add distance=1 dst-address=192.168.23.0/24 gateway=bridge
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip ssh
set strong-crypto=yes
/system clock
set time-zone-name=America/New_York
/system identity
set name=CRS326-24S+2Q+RM-2
/system package update
set channel=long-term
/system routerboard settings
set boot-os=router-os
/tool mac-server
set allowed-interface-list=none
/tool mac-server mac-winbox
set allowed-interface-list=none
/tool mac-server ping
set enabled=no