I have a single bridge on all ports, including WAN (two provided by my data center for redundency, eth0/1, only one active at a time, they monitor it) and all the LAN-ports in Bridge1. This has worked, as I have public static IPs assigned for all stuff and all public servers. I now have two ports I ...

CRS354-48G-4S+2Q+RM I have mostly static public IPs and have all ports in a bridge for simplicity since I have same network on both WAN/LAN-side. Is there any way to isolate a few physical ports (call them "guest-ports/machines") from connecting/listening to any other port than the WAN-por...

No, untagged=ether1,ether2,ether3,ether4 means that those ports will be access ports (no vlan tags) that will work with regular servers and clients. Then pvid=20 will instruct the switch that this ports are member for VLAN20 (as in should be tagged with 20). Also, you should enable VLAN-filtering o...

It is not advisable to make the switch accessible (managable) from the internet! When you really need that, setup a VPN with proper authentication (e.g. L2TP/IPsec) and allow management only from that VPN. Yeah, I know. It was only added during debug, so I could mange it somehow. But never mind, th...

/ip address add address=XX/26 comment=defconf interface=bridge network=\ XX add address=XX/26 interface=bridge network=XX add address=XX/24 comment=LocalAdmin interface=bridge network=\ XX -> 3 different addresses on the same interface? Two of them with different masks? Why? What was the idea behin...

No, untagged=ether1,ether2,ether3,ether4 means that those ports will be access ports (no vlan tags) that will work with regular servers and clients. Then pvid=20 will instruct the switch that this ports are member for VLAN20 (as in should be tagged with 20). Also, you should enable VLAN-filtering o...

For you case, I would simply use a bridge with two VLANs: 10 - Management 20 - Servers1 Since the CRS354 has a very fancy switch chip, you can use the regular bridge fashion. (others need to use the /interface ethernet switch section) For example: /interface bridge vlan add bridge=bridge untagged=e...

/interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik Wireless ???? No need for wireless. You need to tell that to Mikrotik. It is automatically added. I have not use for wireless and have not configured it. The same for the bridge-layout and the other stuff yo...

Does this mean anything? I have tried to click Switch all ports, but after a while, the checkmark disappears (maybe because it is redundant since all ports are in bridge)?

I uploaded the config file in previous post. Copy the contents of the file and post here as code. Doing this, we can see where Your config stands and stop the guessing game. I'll add it here for ease. Note #1: Since I'm operating with fixed public IPs and not local private ips, there is a bit work i...

I prefer to avoid that "internet detect". It changes your configuration. There is absolutely no need for "internet detect". If the connected ether ports remain disabled with the cable in, something is wrong with the cable or connector. (Did it snap in?). I was desperate, so I ju...

Do this make things more clear? My needs are simply layer 2 on same network and not a single VLAN needed. Just pure switch. At any time, if I just remove the Mikrotik-switch from this flow and replace it with a gigabit switch I had (I have reset it to default), all works with not a single config. I ...

Basically every post on that page shows far more complicated setup than I need. I don't have any vlans and I want to group WAN and LAN on the bridge somehow, so that it behaves like a normal switch basically.

1. Yeah, I was thinking that also. Direct replacement with "dumb" D-link switch (non-configured) works, but as soon as I put the two cables to Mikrotik, it just doesn't work. It seems like default config is some kind of bridge and somehow, it doesn't want to bridge WAN and LAN. The bridge ...

I just purchased CRS354-48G-4S+2Q+RM, to use it as a switch. First problem: SwitchOS that I planned to use, I found out after 6-7 hours of reboots/reset (no errors, just no port activity) is actually not supported on this switch... Found on on this forum that they said one year ago they might add it...

And I also was tricked by Mikrotik - no SwOS - that was my hole plan for this switch :( Used hours trying to boot it from SwOS and couldn't understand why it didn't work after boot. Found this forum thread and now i know...

I have just gotten a new switch CRS354 and could connect to it as router. I went it an changed to Switch-mode under Switchboard and clicked apply/OK. Then I rebooted and no ports are active. When I plug in device into any port, no port light shows up. I do get some kind of traffic (detected on compu...

Thank you so much :) Port isolation will do the job perfectly fine yes :) I was thinking port isolation was only some fancy stuff used only for vlan or something and didn't realize it does what it is named.

"you can't have the same IP network on both sides of a router" - isn't this exactly what a bridge makes work? So I can have same IP-network on both sides. No. Bridges handle layer2, routers handle layer3. Transparent IP filtering is possible, but rather a niche use case, and not possible ...

Like below. I will have max 3 servers, customer will have 5. "you can't have the same IP network on both sides of a router" - isn't this exactly what a bridge makes work? So I can have same IP-network on both sides. I'm pretty sure I can use a bridge WAN-LAN if I had one Internet-connectio...

I have redundant Internet from my data center, they provide two links (ports) in HA-mode on their side (HSRP/VRRP). I can use their virtual IP (they failover for me) as GW all the time and I will have a static IP range assigned directly on the two ports on my switch. They require the two ports on my...