Community discussions

MikroTik App
 
User avatar
Techsystem
Member
Member
Topic Author
Posts: 338
Joined: Tue Dec 21, 2021 5:12 am
Location: UAE - Dubai

problem with multi bridge interface

Wed Sep 14, 2022 2:55 pm

Hello my friends ..!
so I create two bridge interface, but when i start adding ports to each bridge i get this -(see the picture below)-
so what does this IH-I-DIH-DH.
absolutely i know that IH mean inactive HW offload and DIH mean...etc
but why B-1 get this I and B-2 get DIH..?
side note: the internet only available on B-1 and no internet on B-2. yet i create a masqurade rule
for more info this is my configuration "see the attached file"
You do not have the required permissions to view the files attached to this post.
 
elbob2002
Member Candidate
Member Candidate
Posts: 254
Joined: Tue May 15, 2018 8:15 pm
Location: Ireland

Re: problem with multi bridge interface

Wed Sep 14, 2022 3:43 pm

Hardware offloading only works on a single bridge interface.
 
tangent
Forum Guru
Forum Guru
Posts: 1390
Joined: Thu Jul 01, 2021 3:15 pm
Contact:

Re: problem with multi bridge interface

Wed Sep 14, 2022 4:16 pm

Hardware offloading only works on a single bridge interface.

It's more nuanced than that. The CRS1xx/2xx series allow up to 7 hardware-accelerated bridges. Everything else allows one per switch chip. That qualifier is important, because several of the products in MikroTik's lineup have more than one switch chip inside. Perhaps the most notable current product is the RB4011, but there are others, both current and historical.

If you want some ideas for ways to use this extra freedom, see this article.
 
User avatar
Techsystem
Member
Member
Topic Author
Posts: 338
Joined: Tue Dec 21, 2021 5:12 am
Location: UAE - Dubai

Re: problem with multi bridge interface

Wed Sep 14, 2022 4:40 pm

Hardware offloading only works on a single bridge interface.

It's more nuanced than that. The CRS1xx/2xx series allow up to 7 hardware-accelerated bridges. Everything else allows one per switch chip. That qualifier is important, because several of the products in MikroTik's lineup have more than one switch chip inside. Perhaps the most notable current product is the RB4011, but there are others, both current and historical.

If you want some ideas for ways to use this extra freedom, see this article.
Hello Mr tangent ..! thanks for your replay..!
so how does this intercsect with my problem..? how can i solve my problem in current situation..?
 
tangent
Forum Guru
Forum Guru
Posts: 1390
Joined: Thu Jul 01, 2021 3:15 pm
Contact:

Re: problem with multi bridge interface

Wed Sep 14, 2022 4:59 pm

how does this intercsect with my problem..?

Your device — one of the CRS326 models based on the header of your RSC file — isn't a CRS1xx or 2xx, so you can't have multiple bridges per switch chip. I'm going to guess it's one of the 24G models based on details of your bridge setup. From that, we can then go to the product page and dig up the block diagram, which shows only one switch chip.

Therefore, your result is entirely expected. One switch chip = one hardware-accelerated bridge for this class of device. All I'm pointing out with my additional detail up-thread is that this isn't true of every device in MikroTik's lineup. Most, yes, but not all.

how can i solve my problem in current situation..?

The general pattern is to create a single hardware bridge for everything, then use other technologies to divide things up. VLANs are one popular method. Port isolation is another. You might even find use for certain VPN technologies.

What precisely are you trying to accomplish?
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19325
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: problem with multi bridge interface

Wed Sep 14, 2022 6:05 pm

Two bridges are for the birds............... Use one bridge and vlans............. AND for the love of god, dont use the bridge to hand out dhcp.
 
User avatar
Techsystem
Member
Member
Topic Author
Posts: 338
Joined: Tue Dec 21, 2021 5:12 am
Location: UAE - Dubai

Re: problem with multi bridge interface

Wed Sep 14, 2022 7:18 pm

how does this intercsect with my problem..?

Your device — one of the CRS326 models based on the header of your RSC file — isn't a CRS1xx or 2xx, so you can't have multiple bridges per switch chip. I'm going to guess it's one of the 24G models based on details of your bridge setup. From that, we can then go to the product page and dig up the block diagram, which shows only one switch chip.\
yes you are right..!

Therefore, your result is entirely expected. One switch chip = one hardware-accelerated bridge for this class of device. All I'm pointing out with my additional detail up-thread is that this isn't true of every device in MikroTik's lineup. Most, yes, but not all.

how can i solve my problem in current situation..?

The general pattern is to create a single hardware bridge for everything, then use other technologies to divide things up. VLANs are one popular method. Port isolation is another. You might even find use for certain VPN technologies.
really appreciate your suggestion ans i will apply that..
What precisely are you trying to accomplish?
actaully i want to separate two ether interface groub from each other -( separate eth1...to eth12 from eth13...to eth 24)- and both of this -(groub)-has to have internet access also if you notice in my file that the IP address is goes to bridge interface
so i have B-1 with IP= 192.168.40.1/24 also with DHCP
and B-2 with IP=192.168.99.1/24 also with DHCP..
Last edited by Techsystem on Wed Sep 14, 2022 7:23 pm, edited 1 time in total.
 
tangent
Forum Guru
Forum Guru
Posts: 1390
Joined: Thu Jul 01, 2021 3:15 pm
Contact:

Re: problem with multi bridge interface

Wed Sep 14, 2022 7:22 pm

Sounds like VLANs to me.
 
User avatar
Techsystem
Member
Member
Topic Author
Posts: 338
Joined: Tue Dec 21, 2021 5:12 am
Location: UAE - Dubai

Re: problem with multi bridge interface

Wed Sep 14, 2022 7:26 pm

Two bridges are for the birds............... Use one bridge and vlans............. AND for the love of god, dont use the bridge to hand out dhcp.
your always welcome Mr anav..:-)..!
will unfortunately i use it ..:-(
so i have two Bridge one is B-1 =192.168.40.1/24 with DHCP on it
and the other B-2 =192.168.99.1/24 also with DHCP on it
 
User avatar
Techsystem
Member
Member
Topic Author
Posts: 338
Joined: Tue Dec 21, 2021 5:12 am
Location: UAE - Dubai

Re: problem with multi bridge interface

Wed Sep 14, 2022 7:29 pm

i don't think that i can make VLAN in my current situation ..
so the CRS3xx connected with HUAWEI router in ether1 interface. so i setup the eth1 as out interface and the other ports as a bridge as i explain above
so is there is a way that i can separate the eth12..to eth24 ports from other ports without using Bridges..?
also the eth12..to eth24 ports have to have the same IP address.
 
tdw
Forum Guru
Forum Guru
Posts: 1847
Joined: Sat May 05, 2018 11:55 am

Re: problem with multi bridge interface

Wed Sep 14, 2022 8:01 pm

As others have said you can only have a single bridge with hardware offload on your device.

The D indicates the port is added dynamically, in this case from /interface bridge port add bridge=B-1 interface=static. This is generally not a good idea, add each port explicitly to the bridge.

The only mechanism to put multiple ethernet ports in the same layer 2 network is a bridge.

Use VLANs internally to segregate the two networks, all of the external ports can be configured as access ports providing untagged-only traffic to either one or the other of the networks.
 
User avatar
Techsystem
Member
Member
Topic Author
Posts: 338
Joined: Tue Dec 21, 2021 5:12 am
Location: UAE - Dubai

Re: problem with multi bridge interface

Wed Sep 14, 2022 8:30 pm

As others have said you can only have a single bridge with hardware offload on your device.

The D indicates the port is added dynamically, in this case from /interface bridge port add bridge=B-1 interface=static. This is generally not a good idea, add each port explicitly to the bridge.

The only mechanism to put multiple ethernet ports in the same layer 2 network is a bridge.

Use VLANs internally to segregate the two networks, all of the external ports can be configured as access ports providing untagged-only traffic to either one or the other of the networks.
Hello Mt tdw..! so that is the corner stone, is there is a way to setup internal VLAN in my situation..?
as i said a bove my CRS3xx connected to HUAWEI router via ether1 .

Who is online

Users browsing this forum: Bing [Bot], Maverick_CZ and 67 guests