Important thing to understand is what exactly gets offloaded from bridge to switch chip: it's passing frames between ports, attached to switch chip (typically they're either RJ45 or SFP ports, always consult block diagram of particular device), and which are members of same bridge. Additionally swi...

How I understood: If you want to benefit from HW offload where possible (for those devices where it is supported), using bridge for setting up VLANs is the default way already for quite some years. I'm specifically talking about the use-case where I have a Trunk Port on my MikroTik Router which goe...

Hello Given a Network setup with multiple LAN VLAN's. Is it the correct way to create VLAN Interfaces onto the main Bridge, or is it better to create VLAN interfaces onto the Ethernet Interface? I'm currently mostly doing VLAN interfaces onto the Ethernet Interface. This works fine, but it feels lik...

Disable neighbor discovery and SLAAC will stop working. Ok, I have now disabled ND with this: /ipv6 nd set [ find default=yes ] disabled=yes With this, IPv6 Router advertisement stops on the affected VLAN. But why do I need to disable ND? Without disabling ND the Router is doing the IPv6 Router adv...

Hello This is my IPv6 config: [admin@fw-xxx-0] > /ipv6 export # 2025-01-05 18:04:01 by RouterOS 7.16.2 # software id = JLI2-LN5C # # model = CCR1009-8G-1S-1S+ # serial number = 606E0469xxxx /ipv6 dhcp-client add add-default-route=yes interface=wan10 pool-name=fiber6 pool-prefix-length=48 request=add...

This is my IPv6 config: [admin@fw-xxx0-0] > /ipv6 export # 2024-12-27 22:08:31 by RouterOS 7.14.3 # software id = JLI2-LN5C # # model = CCR1009-8G-1S-1S+ # serial number = xxx /ipv6 address add address=::90 from-pool=fiber6 interface=vlan90 /ipv6 dhcp-client add add-default-route=yes interface=wan10...

My provider now gave me an IP within its network which I can use as up metric. Somehow, I'm unable to test recursive routing. Does it not work with different routing tables? This is my test setup: # mangle rule > /ip/firewall/mangle export where new-routing-mark=test /ip firewall mangle add action=m...

Hello I have a Provider, which has its first hop within the local POP. This means, if there is an issue outside the local POP, the gateway still can be pinged. But connection to the Internet is not available anymore. Due to this circumstance, the route, even with check-gateway enabled, still keeps b...

Nice, thank you!

Hello I'm trying to query the SFP Parameters which are available via CLI with a command like this: > /interface/ethernet monitor sfp-sfpplus1 name: sfp-sfpplus1 status: no-link auto-negotiation: disabled sfp-module-present: yes sfp-rx-loss: yes sfp-tx-fault: no sfp-type: SFP/SFP+/SFP28 sfp-connector...

In the end, I did the same. Configured the LAG and just put all ports of the LAG into the VLAN. Seems to work.

Still would be great to get this documented if this is the correct way of handling it.

Hello

I have a CSS610-8P-2S+IN. I'm confused about its LAG IEEE 802.3ad (LACP) feature.

In the Tab LAG, I have configured two ports to be in the same Group in the mode static.

I want this LAG to be Tagged with the VLAN. How is this reflected in the VLAN Tab? The VLAN Tab just supports the ports.

Ok, I have found the issue. The TCP SYN from the Server is being sent to the Router and the Router forwards it to the VPN-GW in the same Subnet, which then routes the Packet to the VPN Client. But as they are in the same Subnet, the TCP SYN/ACK is sent directly from the VPN-GW to the Server. Because...

Sure, the config is attached to the post. The VPN GW provides multiple purposes. The purpose which causes issues here is providing access to a remote Webserver. In the diagram, the green one shows the way which works without TCP retransmits, and the red one shows the way with the delay and TCP retra...

Hello I have a Mikrotik Router (CCR1009) with two VLAN/Subnet. One is 50 / 172.16.50.0/24 and the other is 90 / 172.16.90.0/24. The 50 is used for Servers and the 90 is used for Clients. I have a Server at 172.16.50.140 and a VPN GW (WireGuard) at 172.16.50.100. The VPN GW provides 192.168.99.0/24 t...

igmp-proxy interface status also looks good to me user@fw-xxx0-0] > /routing igmp-proxy interface print status Flags: X - disabled, I - inactive, D - dynamic; U - upstream 0 U interface=provider threshold=1 alternative-subnets=0.0.0.0/0 upstream=yes source-ip-address=77.109.xxx.xx rx-bytes=0 rx-pack...

Upgraded to v7.6 but still same issue

Hello I'm trying to use the IGMP Proxy to watch Multicast TV. My WAN interface is in a Bridge interface. I have declared the Bridge interface as upstream for the IGMP Proxy. Still I'm getting these Errors and also TV isn't working. Any ideas? Is this maybe a hairpin Firewall config issue? 01:06:36 i...