Nevermind, I've found what that was the other router, who was routing between VLANs. I've fixed its config and now everything works as intended, CRS125 doesn't forwards traffic with the above config.

Hello. I have CRS125 switch. Its configure with 2 VLANs created in switch ASIC, a trunk port (ether1+ether2) with both trunked VLANs. I've also created VLAN IP interfaces on CPU and attached them for the purpose of managing switch from both VLANs. Only 1 master port, no bridge. I know that this will...

A year has passed since this thread was opened, but Mikrotik didn't offered any products with more SFP+ ports so far. I'm bumping this thread to remind that this suggestion are really could be useful for many. With recent development of 10G networks even new mid-range servers has 10G ports. With onl...

I'm pretty disappointed what this forum doesn't helps much with CRS. I've got an advice on other forums. I'll just leave it here in case someone else will face same issue. The solution offered was pretty simple - use bridge filter to filter out unwanted VLANs and untagged egress traffic. I haven't t...

Anyone?

Hello. I have a few CRS226-24G-2S+ units. I want them to act as a basic L2 switches actually for now with VLANs, trunking and RSTP. I can do VLANs and trunking with the switch chip, but unfortunately swtich chip doesn't has the RSTP functions, so I have to add a software bridge to enable this functi...

For example I have this config and I doesn't works as intended. I would like to have ether1-2 as a switch trunk ports (bonded) and also trunk ports (passing tagged VLANs), with ether9-16 on VLAN 91 PVID and ether17-24 VLAN 92 PVID. While I have ether3-4 added as another port group with ether3 maste...

Ok, I've tried setting every port to a ether3 as a master, and temporary removing trunk from switch configuration. It doesn't works right for me, right now I can ping IP on VLAN91 interface from any port, cept for those I've specially allocated as vlan91 access ports ;P But I guess that is because I...

I think I have found the cause of this problem in "test1.rsc" configuration. You have set two "master-ports", but it restricts VLAN functionality on CRS. From wiki: Note: Multiple master-port configuration is designed as fast and simple port isolation solution, but it limits par...

As an alternative may I suggest you getting a Linux VPS box instead if you need only one location? That way you'll have your own dedicated IP and your own VPN server software config, you can adapt to use with Mikrotik. And it will be much cheaper. You can get a lowend VPS (more than enough for VPN) ...

No NAT is needed.

NAT is needed if devices behind LAN2, LAN3 doesn't know routes to LAN1 subnet. I.e. if the same Mikrotik device aren't default router for them.
Of course it is better to setup routes there, than to NAT it.

I don't think having these on the same subnet behind the same port really matters here. You just don't have to setup all the IPs for every subnet and even NAT. Most important part in ECMP routing is: / ip route add dst-address=0.0.0.0/0 gateway=10.111.0.1,10.112.0.1 check-gateway=ping I.e. it assign...

Hello. I've got a CRS125-24G-1S for SOHO needs. Basically it will operate as L2 access switch for 2 small separate networks (VLANS) which should be isolated from each other and a server with 2 different VMs as gateways. Those 2 VLANs should be completely separated and doesn't requires inter-communic...

Checkout http://wiki.mikrotik.com/wiki/Load_Balancing , especially http://wiki.mikrotik.com/wiki/ECMP_load_balancing_with_masquerade You'll never get a real load balancer as like with bonding though. It would be either srcip (i.e. all traffic from one client goes throught one router), or a session b...