I was looking at this RB5009 as an upgrade of my EdgerRouter-X because my ISP is likely to bring out > 1Gb/s symmetrical plans soon. I already have a CRS328 as my main 10Gb/s switch. However, the only way to take advantage of that is to have a router with 2+ ports capable of >1Gb/s speeds. Given the...

mikrotik have /tool wol on help page. so maybe you can check it out for your requirement

If this can be initiated via an ssh command to the Mikrotik router, and the router can send WoL packets to any VLAN/subnet then I think that might work, thanks.

But if you relaying broadcasts, it may time to ask if the things that need this really need to be in a separate VLAN... and if bridge filtering accomplish the purpose as a VLAN so you can have common subnet for your VLAN 100 and 300 and thus avoid "bcast-relay" need. Never heard of having...

I have an EdgeRouter-X and a Mikrotik CRS328 switch. I am thinking about replacing the EdgeRouter-X with a Mikrotik RB5009UG+S+IN to take advantage of my symmetric gigabit internet connection. I assume all of the basic stuff can be replicated on this device (e.g. VLANs, firewall rules, etc.) but the...

Any benefit to this version over 6.47.10 LTS for a CRS328? I have no issues but would like some control over the fans, which I think has still not been added in 6.48?

So lets see how the actual release notes for long-term v6.48.5 upgrade from v6.47.10 looks like: Nice post. What MT should do is to make a web page where you select two different release and it will then show all changes between those two releases. Some like to see difference between 6.48.4 to 6.48...

If you want to keep SFP temperature down and use 10Gbps links, then go with normal fibre SFPs and fibre patch cords. Fibre SFPs consume much less power and consequentially produce much less heat. Fibre patch cords tend to be less bulky than CAT7 cables or DAC cables which is good as it's easier to ...

Great thread, there's some interesting information here. I'm considering doing things like fan mods but am trying some less invasive solutions first. I currently only have 1 of the SFP+ ports in my CRS328 populated, with an S+RJ10, and the fans ramp up from their idle ~1.5k to ~7.5k RPM as soon as m...

If I move device B to the same VLAN & subnet as the switch itself (399, 192.168.3.2/28), the switch can ping the device but still nothing else can. Every other device can ping the switch though, so the routing tables must be correct. If I move device B to the LAN network (VID 100, 192.168.1.10/2...

To use packet sniffer on CRS you need to disable HW offload for the port of interest. Thanks for the tip. I can now see the difference between Device A (top) and B (bottom, note I'm using ether6 now just for testing stuff): Ping sniffer.png It looks like the ping packet is being sent to the device ...

I have my CRS328 configured with most ports on a bridge, including a trunk port (ether4) for a bunch of VLANs that connects to my EdgeRouter-X (including VIDs 311 and 312). Overview: Device A = ether21 access port with VID=311, 192.168.3.17/29, works fine, can ping and see web interface from laptop ...

Hello, I've tried to replicate switch.rsc and router.rsc in GNS3 2.2.21 but it didn't work. I am using MikroTik firmware version v6.48.2. I had to modify this section: # Purple Trunk. L2 switching only, Bridge not needed as tagged member (except BASE_VLAN) set bridge=BR1 tagged=sfp1,sfp2 [find vlan...

Hi, I'm trying to use the RoaS approach and I've got most of it behaving as I want (I think). However, I can't seem to be able to ping the switch's IP address after assigning a management VLAN to the switch itself. Here's my config: /interface bridge add name=bridge1 protocol-mode=none vlan-filterin...

Up to you. I know what I do works. If you can get it to work the way you think it should be done fantastic, dont let me stop you LOL!! I've had a look at the relevant parts of the EdgeRouter-X GUI for setting up additional VLANs to see how much work it'd be both to set up and to maintain in the fut...

Yes that would work, I mentioned it in a post before. But to me that sounds more complicated than setting up a private VLAN. Having to set up and maintain subnets, DHCP, DNS, firewall rules, etc. for a dozen VLANs sounds much more annoying.

I suppose I chose the wrong example there. I don't care much about guest devices talking to each other, I care more about untrusted IoT devices talking to each other.

I do care about untrusted devices talking to other. I use as many vlans as I need to separate out some devices or users from others. Ah OK. That does make sense. I assume the easiest way to do this is to have the AP use a single SSID + VLAN for untrusted devices, then wired devices use a different ...

(1) Missing tagging the bridge!!!! interface bridge vlan add bridge=bridge1 tagged=ether3 untagged=sfp1,sfp2,sfp3,sfp4,ether2,ether4,ether6,ether8,ether21,ether23 vlan-ids=10 add bridge=bridge1 tagged=ether3,ether21,ether23 untagged=ether15,ether16 vlan-ids=20 add bridge=bridge1 tagged=ether3,ether...

Nope, way to confusing and complex for me and with use of vlan1, Hopefully someone else will assist. I don't see how the concept of a private VLAN i.e. isolated clients is too complex, maybe it just is for a Mikrotik switch? I've added a 0 to the end of the VLAN numbers to hopefully make you happy.

Okay I get it now. The router in the picture is a Unifi or edge but not MT. The switch you want to use for switching not routing and the two options you have are separate ports on router to separate ports on switch OR one port on router to one port on switch. Yes I was configuring the router. I can...

Is the CR328 switch going to also be a router, or is there an MT router between the switch and the internet?? First mistake is thinking you should use vlan1. Do not! IT is the default pvid vlan on bridges and should not be used to carry data etc...... Use vlan 99 or something else for manangment vl...

Hi, I'm considering buying a CRS328 switch and having looked through the really useful documentation I think I understand how to configure it for multiple VLANs. I can also see that it's possible to isolate certain ports to create "private VLANs" (i.e. all traffic from a certain port gets ...