hopefully I don't need to apologize for my spelling and you understand my question.
At this time I have a setup with an OPNSense as Router/Firewall and two Mikrotik Switches.
First Switch:
CRS326-24G-2S+
Second Switch:
CRS112-8G-4S
My problems:
- VLAN Configuration on CRS112 / network unreachable (see below)
- Does the CRS326/112 supports an 2,5Gbps SFP from FS.com?
I bought two SFP modules from fs.com (https://www.fs.com/de/products/139650.html) for the mikrotiks...my opnsense hardware gives me 4 x 2,5GBps copper.
Auto negotation failes and no connection is running between opnsense and mikrotik. if I set negotation to 1Gbps or 2,5GBps the connection is working but only with 1GBps...
Generally I would love it to use the 2,5GBps...any suggestions for me?
On my CRS326 the configuration works fine and im getting a connection / ip address from the dhcp on untagged interfaces.
At least on my CSR112 I got the configuration through this Tutorial: https://www.youtube.com/watch?v=swXS4sO8smE
But at this time im stucked on getting a ping/traceroute or working interfaces on my CRS112.
Is there such a difference in the configuration between the CRS112 and CRS326?
On interface SFP12 the switch is getting with VLAN 202 his management network with ip address 10.20.202.2/24.
My OPNSense is holding the gateway ip with 10.20.202.1/24
Traceroute is getting timeout and ping also....does anyone can me explain why and find a solution?
Configuration of my CRS112 below.
Code: Select all
[admin@MikroTik] > /export hide-sensitive
# mar/31/2023 21:41:20 by RouterOS 7.8
# software id = 6UBJ-P7S7
#
# model = CRS112-8G-4S
# serial number = HE208R3GR53
/interface bridge
add name=vlan-bridge
/interface ethernet
set [ find default-name=sfp12 ] auto-negotiation=no speed=2.5Gbps
/interface vlan
add interface=vlan-bridge name=Management-EG vlan-id=202
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/port
set 0 name=serial0
/interface bridge port
add bridge=vlan-bridge interface=ether1
add bridge=vlan-bridge interface=ether2 pvid=201
add bridge=vlan-bridge interface=ether3 pvid=201
add bridge=vlan-bridge interface=ether4 pvid=201
add bridge=vlan-bridge interface=ether5 pvid=201
add bridge=vlan-bridge interface=ether6 pvid=201
add bridge=vlan-bridge interface=ether7 pvid=201
add bridge=vlan-bridge interface=ether8 pvid=202
add bridge=vlan-bridge interface=sfp12 pvid=202
/ip neighbor discovery-settings
set discover-interface-list=!dynamic lldp-med-net-policy-vlan=1
/interface bridge vlan
add bridge=vlan-bridge tagged=sfp12 untagged=ether2,ether3,ether4,ether5,ether6,ether7 vlan-ids=201
add bridge=vlan-bridge tagged=vlan-bridge,sfp12 untagged=ether8 vlan-ids=202
/interface ethernet switch egress-vlan-tag
add tagged-ports=sfp12 vlan-id=201
add tagged-ports=switch1-cpu,sfp12 vlan-id=202
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=201 ports=ether2,ether3,ether4,ether5,ether6,ether7
add customer-vid=0 new-customer-vid=202 ports=ether8
/interface ethernet switch vlan
add ports=ether2,ether3,ether4,ether5,ether6,ether7,sfp12 vlan-id=201
add ports=switch1-cpu,ether8,sfp12 vlan-id=202
/ip address
add address=10.20.202.2/24 interface=Management-EG network=10.20.202.0
/ip route
add distance=1 gateway=10.20.202.1
/system clock
set time-zone-name=Europe/Berlin
Configuration of my CRS326 (working)
Code: Select all
[admin@MikroTik] > /export hide-sensitive
# mar/31/2023 18:54:38 by RouterOS 7.8
# software id = NZFL-JUSU
#
# model = CRS326-24G-2S+
# serial number = HDG08JEQ609
/interface bridge
add ingress-filtering=no name=vlan-bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=sfp-sfpplus2 ] auto-negotiation=no speed=2.5Gbps
/interface vlan
add interface=vlan-bridge name=Management-OG vlan-id=107
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/port
set 0 name=serial0
/interface bridge port
add bridge=vlan-bridge interface=ether1
add bridge=vlan-bridge interface=ether2 pvid=101
add bridge=vlan-bridge interface=ether3 pvid=101
add bridge=vlan-bridge interface=ether4 pvid=101
add bridge=vlan-bridge interface=ether5 pvid=101
add bridge=vlan-bridge interface=ether6 pvid=101
add bridge=vlan-bridge interface=ether7 pvid=101
add bridge=vlan-bridge interface=ether8 pvid=101
add bridge=vlan-bridge interface=ether9 pvid=101
add bridge=vlan-bridge interface=ether10 pvid=101
add bridge=vlan-bridge interface=ether11 pvid=101
add bridge=vlan-bridge interface=ether12 pvid=101
add bridge=vlan-bridge interface=ether13 pvid=101
add bridge=vlan-bridge interface=ether14 pvid=101
add bridge=vlan-bridge interface=ether15 pvid=102
add bridge=vlan-bridge interface=ether16 pvid=102
add bridge=vlan-bridge interface=ether17 pvid=102
add bridge=vlan-bridge interface=ether18 pvid=102
add bridge=vlan-bridge interface=ether19 pvid=102
add bridge=vlan-bridge interface=ether20 pvid=102
add bridge=vlan-bridge interface=ether21 pvid=103
add bridge=vlan-bridge interface=ether22 pvid=103
add bridge=vlan-bridge interface=ether23 pvid=107
add bridge=vlan-bridge interface=ether24 pvid=107
add bridge=vlan-bridge interface=sfp-sfpplus2
/interface bridge vlan
add bridge=vlan-bridge tagged=sfp-sfpplus2 untagged="ether2,ether3,ether4,ether5\
,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13,ether14" \
vlan-ids=101
add bridge=vlan-bridge tagged=sfp-sfpplus2 untagged=\
ether15,ether16,ether17,ether18,ether19,ether20 vlan-ids=102
add bridge=vlan-bridge tagged=sfp-sfpplus2 untagged=ether21,ether22 vlan-ids=\
103
add bridge=vlan-bridge tagged=sfp-sfpplus2,ether23 vlan-ids=104
add bridge=vlan-bridge tagged=sfp-sfpplus2,ether23 vlan-ids=105
add bridge=vlan-bridge tagged=sfp-sfpplus2,ether23 vlan-ids=106
add bridge=vlan-bridge tagged=sfp-sfpplus2,vlan-bridge untagged=ether23,ether24 \
vlan-ids=107
/ip address
add address=10.10.107.2/24 interface=Management-OG network=10.10.107.0
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=10.10.107.1 routing-table=main \
suppress-hw-offload=no
/system clock
set time-zone-name=Europe/Berlin
/system routerboard settings
set boot-os=router-os
Have a nice day,
sincerly