Got it working nice and quick 840+Mbps, it's just that setting vlan-mode=secure on switch1-cpu causes it to hang.

Your setup is missing whole section /interface/ethernet/switch/vlan ... something like /interface ethernet switch vlan add independent-learning=yes ports=switch1-cpu,ether1,ether3 switch=switch1 vlan-id=20 add independent-learning=yes ports=switch1-cpu,ether1 switch=switch1 vlan-id=30 If you want e...

I am trying to setup a very basic switched VLAN configuration with a hapac (latest stable 7.x) with wireless disabled. 1 trunk port - ether1 1 local management port - ether2 1 access port (vlan 20) - ether3 When following the bridge VLAN example (1 trunk port, and access ports), the performance for ...

Had second to try on the hapac. I tried the config almost exactly from the Basic VLAN switching guide, and it locks me out as soon as this is set, and the hapac router does not serve up IPs to the CRS attached via trunk port (ether4 or ether5). locks out after this: /interface ethernet switch port s...

The config seems fine to me (but I don't have any CRS1xx to verify it exactly). How about posting complete CRS config (as printed by /export )? Could be some other setting which breaks things ... Just as I was doing the complete export I caught the culprit: /interface bridge vlan-filtering=yes Chan...

Both setups are flawed. CRS setup is using (slow) CPU bridge to deal with all packets and performance-wise VLANs should be configured in /interface ethernet switch configuration subtree. hAP ac setup is flawed in sense that some things are configured on CPU bridge and some are on switch chip. All o...

Per the message above, the CRS125 is working as the switch, and hapac working as the router. Except I can't quite figure out why the setup is working as it is so wildly different than the CRS125 examples at https://wiki.mikrotik.com/wiki/Manual:CRS1xx/2xx_series_switches_examples#Example_1_.28Trunk_...

I did some basic tests using pcunite's as a base and the comments above and it seems to be good.

In summary, splitting the CRS125 as router + switch into 2 devices results in:

Router:
DNS
DHCP
VLAN
Firewalling between VLANs

Switch:
Static ARP entries
VLAN

Thanks for the replies. Having it work so well with 100mbit and a bunch of fw rules did not make sense to see comments to not use CRS125 as the router.

I have a CRS125 and hapac and am having trouble wrapping my head around VLANing on the CRS125. Several years ago I was able to get a config working that had 10 VLANs and using the CRS125 as a router and a switch, with a hapac connected to a trunk port on the CRS125 with a separate wireless config fo...

Hello, I have a CRS-125 with RouterOS 6.41.4, with multiple VLANs configured, and 1 WAN connection. I would like all traffic from VLAN10 to route to a single host in VLAN20. The target host in VLAN20 has an outbound VPN connection which I'd like all of VLAN10 to use. Using /ip route or /ip firewall ...

Ok, I made the changes but have the same results. ether4-20 on vlan20 can still access the LAN, but no wifi (wlan2-20 on vlan20) Then noticed this: /interface ethernet switch vlan add independent-learning=yes ports=ether2-trunk,switch1-cpu switch=switch1 vlan-id=50 add independent-learning=yes ports...

Your VLAN setup is over-complicated. Which version of ROS and which device type? I found some missing configuration in your setup, but let's make the whole VLAN mess tidier. RouterOS 6.43.8 and RouterBOARD 962UiGS-5HacT2HnT The VLAN mess is worse, I took out several other VLANs in hopes to make it ...

Hello, When trying to connect to wifi configured with the same VLAN id that's configured on an ethernet port, the WiFi clients can't pull a DHCP IP. WiFi clients can connect and pull an IP on wifi networks that do not have the same VLAN ID as is configured on an ethernet port on the same hapac. How ...

Upgrading from 6.41.4 to 6.42 all the way through 6.43.2 results in an unusable LAN. It's possible to SSH to the CRS-125 with no issues in latency, but all other LAN connections are unusable. Intra LAN streaming video doesn't work, and while it is possible to SSH to another client on the network, it...

Internal devices on the 3 VLANs cannot reach the internet. I have 3 VLANs setup, and assigned to 3 bridges, with physical ports assigned to each of the 3 bridges. Segmentation works and dhcp works, however none of the devices can reach the internet via the WAN port. The WAN port is receiving an IP a...

Is a MAC based VLAN even possible? There are not many example configs and I followed the tutorial on the wiki exactly.

CRS-125 is an internet NAT gateway providing internet access to clients segmented via MAC based VLANs. Unfortunately, I can't figure out what's missing. I followed the tutorial in the wiki for MAC based VLANs. ether1-cfg = configuration port with static IP for setup ether2-wan = DHCP client for WAN ...

That was the complete export. I added what I *think* would be the correct additions, though it's still not giving out an IP. When assigning a static IP on the client, the client cannot ping the VLAN gateway. I can however now see the request and reply on the client interface, but the client never ac...

I have a CRS-125 on latest routersOS with several VLANs configured, one per physical port on a few of the ports. A DHCP server is configured per VLAN, however when plugging into any of the ports, no IP is given to the client. Nor is it possible to ping the VLAN gateway when statically assigning an I...