Ok so I've found the problem. When I unplug ether1 everything else seems to work, however when I plug it in again nothing works (can't even access the Mikrotik via Winbox)

Perhaps thats a problem with the switch "on the other end" of ether1?

I'm running the CRS125 with 6.42.6. I mean to use HW offload as much as possible and I'm really only looking use the CRS125 as a switch for now. Also a priority for me is that there is no leakage between any of the VLAN's. I got the following VLAN's 10 - WAN link net 20 - LAN net 30 - VPN net 40 - I...

I'd also like to see this, would make it a lot easier to remember things you've set/done.

This issue got resolved in another thread: http://forum.mikrotik.com/viewtopic.php ... 87#p549269

I'd suggest dropping the /interface vlan and other CPU stuff, and doing this via the switch chip: http://forum.mikrotik.com/viewtopic.php ... 87#p549269

I fixed my issues by using only the switch chip (and thus not routing traffic via the weak CPU), more info here http://forum.mikrotik.com/viewtopic.php ... 87#p549269

So after a few more hours tinkering and thinking I finally understand how this works, and here is my working config/solution with only VLAN's (no bridges or "vlan interfaces" aka. no CPU/software mode) /interface ethernet set [ find default-name=ether1 ] master-port=sfp1 set [ find default...

So I gave it a shoot with this config, /interface ethernet set numbers=1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24 master-port=sfp1 /interface ethernet switch vlan add ports=sfp1,ether24 vlan-id=10 add ports=sfp1,ether23 vlan-id=303 add ports=ether01,ether02,ether03,ether04,ether0...

After reading up on the terminology I now know that I need to: Send untagged traffic from sfp1 to tagged vlan 10 on ether24 Send Tagged vlan 20 from ether24 to ether22 untagged Send tagged (vlan 303) traffic from sfp1 to untagged ether23 An illustrative network diagram (notice that VLAN 20 actully g...

I'm trying to figure out how I can utilize the switch chip to handle VLAN's, I got two scenarios where I'd like to make use of it Case 1) On my incoming port (sfp1) I'm reciving usual traffic, and IP from ISP's DHCP.. I'm also reciving VLAN 303 which is used for IPTV where on this VLAN it also resid...

I'd like to bump this one. Has anybody ever solved this? Looking over the forums this seems to be one thing nobody has an good answer too.

(I'm also seeing lot's of artifacts with UDP/IPTV)

Hi,

did you ever solve this? I'm also seeing artifacts on my STB, and our config's are very much alike

Honestly, I'm not sure - the mac-based vlan topology is akin to having a bunch of drinking straws all going into one big tank. In the tank is every beverage you may want - soda, water, orange juice, beer, coffee, tea, milk, fruit punch, etc. In the tank, they're all mixed together. In the case of m...

Honestly, I'm not sure - the mac-based vlan topology is akin to having a bunch of drinking straws all going into one big tank. In the tank is every beverage you may want - soda, water, orange juice, beer, coffee, tea, milk, fruit punch, etc. In the tank, they're all mixed together. In the case of m...

A managed, vlan-capable switch would be much better. The unmanaged switch causes some strangeness in that the hosts attached to it are actually in the same broadcast domain - and multicast domain for that matter. You can get a vlan-capable switch for less than $100, or even get an older model Cisco...

I think mac-based-vlan is part of the issue. Multicast streams send traffic to a destination MAC address that is different than the MAC of any host receiving the traffic. The dst MAC address is a mapping based on the target group IP address of the stream. Is this for a home network? MAC based vlan ...

So in an attempt to see if my IPTV dekoder actully is getting any traffic I did this /interface bridge add name=bridge-iptv /interface vlan add interface=sfp1 name=sfp1-vlan303 vlan-id=303 /interface bridge port add bridge=bridge-iptv interface=ether24 add bridge=bridge-iptv interface=sfp1-vlan303 /...

Basically what I want to do is this http://wiki.mikrotik.com/wiki/Manual:CRS_examples#MAC_Based VLAN But in addition I want devices (which MAC is not "tagged"/listed) on ether6 to receive IP from local DHCP "Tagged" MAC: Receives IP via VLAN 303 from ISP DHCP None tagged MAC: Rec...

Thank you for replying ZeroByte, My current config is as follow (the bits needed for IGMP and VLAN?... not complete, its not working!) /interface vlan add interface=sfp1 mtu=1584 name=sfp1.4 vlan-id=303 /interface ethernet switch mac-based-vlan add new-customer-vid=303 new-service-vid=303 src-mac-ad...

Hi all, My network is as follow: CRS 125-24G-1S-IN ----> ether6 ----> dumb switch (no VLAN  capabilities)  ----> IPTV decoder (and many other devices on the switch) The dumb switch has 8xGbit ports and 6 of them in use. Now I know my ISP sends IPTV over VLAN 303 (DHCP), and it seem's my router shoul...

Alright so I was missing these two /ip firewall nat add action=masquerade chain=srcnat dst-port=22,80,443,32400 protocol=tcp src-address=192.168.1.0/24 add action=dst-nat chain=dstnat dst-address=!192.168.1.0/24 dst-address-type=local dst-port=22,80,443,32400 protocol=tcp to-addresses=192.168.1.10 S...

Thanks for the reply's. Here's my current config, as of now firewall blocks all connections (removing the drop rule in forward chain fixes that). Any ideas? (with drop rule removed in forward chain the exposed ports in forward/nat chains still doesnt work, I can't access these ports on the wan inter...

So I figured out why this is happening (all ports are bridged so that wan and lan traffic resides on the same network). 

Now how do I solve this? I haven't done anything close to this before so I'm out on a limb. WAN traffic comes in on SFP1.

Will need to do more reading I guess..

Hey everyone, I've just recently bought and configured my CRS 125-24G-1S-IN (firmware 6.35.4), but I'm struggeling with a few things (I'm very new to the RouterOS scene); Whenever I configure it to hand out IP adresses over DHCP I get no internet access on neither static or dynamic IP ranges. (pre D...