Community discussions

MikroTik App
  4. RouterOS
  5. Beginner Basics

How to enable IGMP on the CRS326

Post Reply
 
mcbrown90
just joined
Topic Author
Posts: 5
Joined: Fri May 07, 2021 12:34 pm

How to enable IGMP on the CRS326

Thu Jan 11, 2024 12:30 pm

Hi,

I'm not so experienced with mikrotik RouterOS and i'm having a problem with activating IGMP on my CRS326.
When I enable IGMP on the bridge(set bridge igmp-snooping=yes) the switch becomes unavailable(so I have to connect the serial cable and undo the setting(set bridge igmp-snooping=no)).

The goal is that on VLAN 1, 10 and 20 IGMP is enabled, but i'm not sure where to start.
my current config:
Code: Select all
# 2024-01-11 11:14:47 by RouterOS 7.13.1
# software id = N0KI-1M2L
#
# model = CRS326-24G-2S+
# serial number = MIKROTIK
/interface bridge
add admin-mac=48:8F:5A:B6:1B:D9 auto-mac=no comment=defconf name=bridge port-cost-mode=short vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] comment=Zolder1
set [ find default-name=ether2 ] comment=Zolder2
set [ find default-name=ether3 ] comment=RaspberryPi
set [ find default-name=ether4 ] comment=ZigStar
set [ find default-name=ether5 ] comment=DIRIGERA
set [ find default-name=ether12 ] comment=NAS-1
set [ find default-name=ether13 ] comment=NAS-2
set [ find default-name=sfp-sfpplus1 ] auto-negotiation=no comment=Router speed=2.5G-baseT
set [ find default-name=sfp-sfpplus2 ] comment=switch2
/interface bonding
add comment=Zolder mode=802.3ad name=bonding1 slaves=ether1,ether2
add comment=NAS mode=802.3ad name=bonding2 slaves=ether12,ether13
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/port
set 0 name=serial0
/snmp community
set [ find default=yes ] disabled=yes
add addresses=::/0 comment=checkmk name=checkmk security=authorized
/interface bridge port
add bridge=bridge comment=defconf interface=ether3 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether4 internal-path-cost=10 path-cost=10 pvid=20
add bridge=bridge comment=defconf interface=ether5 internal-path-cost=10 path-cost=10 pvid=20
add bridge=bridge comment=defconf interface=ether6 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether7 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether8 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether9 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether10 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether11 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether14 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether15 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether16 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether17 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether18 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether19 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether20 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether21 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether22 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether23 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether24 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=sfp-sfpplus1 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=sfp-sfpplus2 internal-path-cost=10 path-cost=10
add bridge=bridge comment=Zolder interface=bonding1
add bridge=bridge comment=NAS interface=bonding2
/interface bridge vlan
add bridge=bridge comment=LAN tagged=sfp-sfpplus1,bonding1,sfp-sfpplus2 vlan-ids=10
add bridge=bridge comment=IOT tagged=bonding1,sfp-sfpplus1,sfp-sfpplus2 untagged=ether4,ether5 vlan-ids=20
add bridge=bridge comment=DMZ tagged=sfp-sfpplus1,bonding1 vlan-ids=200
/interface detect-internet
set detect-interface-list=all
/interface list member
add interface=ether1 list=WAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=ether9 list=LAN
add interface=ether10 list=LAN
add interface=ether11 list=LAN
add interface=ether12 list=LAN
add interface=ether13 list=LAN
add interface=ether14 list=LAN
add interface=ether15 list=LAN
add interface=ether16 list=LAN
add interface=ether17 list=LAN
add interface=ether18 list=LAN
add interface=ether19 list=LAN
add interface=ether20 list=LAN
add interface=ether21 list=LAN
add interface=ether22 list=LAN
add interface=ether23 list=LAN
add interface=ether24 list=LAN
add interface=sfp-sfpplus1 list=LAN
add interface=sfp-sfpplus2 list=LAN
/interface ovpn-server server
set auth=sha1,md5
/ip dhcp-client
add interface=bridge
/ip dns
set servers=1.1.1.1
/snmp
set contact="me" enabled=yes location=Meterkast
/system clock
set time-zone-name=Europe/Amsterdam
/system identity
set name=switch1
/system note
set show-at-login=no
/system routerboard settings
set boot-os=router-os
What am I doing wrong?

Thank you in advance!
Top
 
un9edsda
Frequent Visitor
Frequent Visitor
Posts: 83
Joined: Sun Mar 15, 2020 11:11 pm

Re: How to enable IGMP on the CRS326

Fri Jan 12, 2024 1:41 am

Hi,

I'm not so experienced with mikrotik RouterOS and i'm having a problem with activating IGMP on my CRS326.
When I enable IGMP on the bridge(set bridge igmp-snooping=yes) the switch becomes unavailable(so I have to connect the serial cable and undo the setting(set bridge igmp-snooping=no)).

The goal is that on VLAN 1, 10 and 20 IGMP is enabled, but i'm not sure where to start.
my current config:
Code: Select all
/interface bridge
add admin-mac=48:8F:5A:B6:1B:D9 auto-mac=no comment=defconf name=bridge port-cost-mode=short vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] comment=Zolder1
set [ find default-name=ether2 ] comment=Zolder2
set [ find default-name=ether3 ] comment=RaspberryPi
set [ find default-name=ether4 ] comment=ZigStar
set [ find default-name=ether5 ] comment=DIRIGERA
set [ find default-name=ether12 ] comment=NAS-1
set [ find default-name=ether13 ] comment=NAS-2
set [ find default-name=sfp-sfpplus1 ] auto-negotiation=no comment=Router speed=2.5G-baseT
set [ find default-name=sfp-sfpplus2 ] comment=switch2
/interface bonding
add comment=Zolder mode=802.3ad name=bonding1 slaves=ether1,ether2
add comment=NAS mode=802.3ad name=bonding2 slaves=ether12,ether13
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/port
set 0 name=serial0
/snmp community
set [ find default=yes ] disabled=yes
add addresses=::/0 comment=checkmk name=checkmk security=authorized
/interface bridge port
add bridge=bridge comment=defconf interface=ether3 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether4 internal-path-cost=10 path-cost=10 pvid=20
add bridge=bridge comment=defconf interface=ether5 internal-path-cost=10 path-cost=10 pvid=20
add bridge=bridge comment=defconf interface=ether6 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether7 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether8 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether9 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether10 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether11 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether14 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether15 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether16 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether17 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether18 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether19 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether20 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether21 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether22 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether23 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether24 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=sfp-sfpplus1 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=sfp-sfpplus2 internal-path-cost=10 path-cost=10
add bridge=bridge comment=Zolder interface=bonding1
add bridge=bridge comment=NAS interface=bonding2
/interface bridge vlan
add bridge=bridge comment=LAN tagged=sfp-sfpplus1,bonding1,sfp-sfpplus2 vlan-ids=10
add bridge=bridge comment=IOT tagged=bonding1,sfp-sfpplus1,sfp-sfpplus2 untagged=ether4,ether5 vlan-ids=20
add bridge=bridge comment=DMZ tagged=sfp-sfpplus1,bonding1 vlan-ids=200
/interface detect-internet
set detect-interface-list=all
/interface list member
add interface=ether1 list=WAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=ether9 list=LAN
add interface=ether10 list=LAN
add interface=ether11 list=LAN
add interface=ether12 list=LAN
add interface=ether13 list=LAN
add interface=ether14 list=LAN
add interface=ether15 list=LAN
add interface=ether16 list=LAN
add interface=ether17 list=LAN
add interface=ether18 list=LAN
add interface=ether19 list=LAN
add interface=ether20 list=LAN
add interface=ether21 list=LAN
add interface=ether22 list=LAN
add interface=ether23 list=LAN
add interface=ether24 list=LAN
add interface=sfp-sfpplus1 list=LAN
add interface=sfp-sfpplus2 list=LAN
/interface ovpn-server server
set auth=sha1,md5
/ip dhcp-client
add interface=bridge...
What am I doing wrong?

From your exported configuration it seems that you have missed the relevant parts of the documentation, namely: CRS3xx, CRS5xx, CCR2116, CCR2216 switch chip features and L3 Hardware Offloading and L3HW Device Support CRS3xx: Switch DX3000 and DX2000 Series and Spanning Tree Protocol and Layer2 misconfiguration LAG interfaces and load balancing and Bridge IGMP/MLD snooping.

When modifying your configuration I made the following assumptions as you have not included a network lay out nor a full configuration:
  • you have four DHCP servers for your four VLANs:
    • 1, network: 192.168.1.0
    • 10, network: 192.168.10.0
    • 20, network: 192.168.20.0
    • 200, network: 192.168.200.0
  • your RaspberryPi connected to Eth3 provides the DHCP servers and has the 192.168.1.2 IPv4 address
  • you would like to use the L3HW featured just haven't configured yet
  • your RaspberryPi is your PIM-SM multicast router with
    • region name mymulticastregion-01 (also on all of your switches)
    • region version is 0
    • you have set up your other switches with MSTP, IGMPv3 and MLDv2
  • and you have set on your other switches' bridges priority to a higher value than 8000 HEX, so this is your root bridge
  • you set the port as trusted on your other switch which is connected to SFP2 on this
  • you don't want to be locked out from the management of your device, therefore I've created a management VLAN
    • named MGMT
    • with VLAN id 99
    • with network 192.168.99.0
    • added Eth23 and Eth24 as untagged access ports to the management network just in case.

Code: Select all
/interface bridge
set 0 add-dhcp-option82=yes admin-mac=48:8F:5A:B6:1B:D9 ageing-time=5m arp=\
    enabled arp-timeout=auto auto-mac=no comment=defconf \
    dhcp-snooping=yes disabled=no ether-type=0x8100 fast-forward=yes \
    forward-delay=15s frame-types=admit-all igmp-snooping=yes igmp-version=3 \
    ingress-filtering=yes last-member-interval=1s last-member-query-count=2 \
    max-hops=20 max-message-age=20s membership-interval=4m20s mld-version=2 \
    mtu=auto multicast-querier=no multicast-router=temporary-query name=\
    bridge port-cost-mode=long priority=0x8000 \
    protocol-mode=mstp pvid=1 querier-interval=4m15s query-interval=2m5s \
    query-response-interval=10s region-name=mymulticastregion-01 region-revision=0 \
    startup-query-count=2 startup-query-interval=31s250ms \
    transmit-hold-count=6 vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] l2mtu=10218 mtu=9000 comment=Zolder1
set [ find default-name=ether2 ] l2mtu=10218 mtu=9000 comment=Zolder2
set [ find default-name=ether3 ] l2mtu=10218 mtu=9000 comment=RaspberryPi
set [ find default-name=ether4 ] l2mtu=10218 mtu=9000 comment=ZigStar
set [ find default-name=ether5 ] l2mtu=10218 mtu=9000 comment=DIRIGERA
set [ find default-name=ether6 ] l2mtu=10218 mtu=9000
set [ find default-name=ether7 ] l2mtu=10218 mtu=9000
set [ find default-name=ether8 ] l2mtu=10218 mtu=9000
set [ find default-name=ether9 ] l2mtu=10218 mtu=9000
set [ find default-name=ether10 ] l2mtu=10218 mtu=9000
set [ find default-name=ether11 ] l2mtu=10218 mtu=9000
set [ find default-name=ether12 ] l2mtu=10218 mtu=9000 comment=NAS-1
set [ find default-name=ether13 ] l2mtu=10218 mtu=9000 comment=NAS-2
set [ find default-name=ether14 ] l2mtu=10218 mtu=9000
set [ find default-name=ether15 ] l2mtu=10218 mtu=9000
set [ find default-name=ether16 ] l2mtu=10218 mtu=9000
set [ find default-name=ether17 ] l2mtu=10218 mtu=9000
set [ find default-name=ether18 ] l2mtu=10218 mtu=9000
set [ find default-name=ether19 ] l2mtu=10218 mtu=9000
set [ find default-name=ether20 ] l2mtu=10218 mtu=9000
set [ find default-name=ether21 ] l2mtu=10218 mtu=9000
set [ find default-name=ether22 ] l2mtu=10218 mtu=9000
set [ find default-name=ether23 ] l2mtu=10218 mtu=9000
set [ find default-name=ether24 ] l2mtu=10218 mtu=9000
set [ find default-name=sfp-sfpplus1 ] l2mtu=10218 mtu=9000 auto-negotiation=no comment=Router speed=2.5G-baseT
set [ find default-name=sfp-sfpplus2 ] l2mtu=10218 mtu=9000 comment=switch2
/interface ethernet switch
set 0 !cpu-flow-control l3-hw-offloading=yes mirror-source=none \
    mirror-target=none name=switch1 qos-hw-offloading=yes
/interface ethernet switch port
set 0 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 1 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 2 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 3 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 4 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 5 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 6 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 7 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 8 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 9 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 10 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 11 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 12 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 13 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 14 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 15 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 16 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 17 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 18 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 19 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 20 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 21 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 22 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 23 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 24 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 25 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 26 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
/interface ethernet switch qos profile
add color=green comment="Lower-Effort RFC8622" dscp=8 name=Lower-Effort pcp=1 \
    traffic-class=1
add color=green comment=\
    "Network operations, administration and management (OAM)" dscp=16 name=\
    OAM pcp=2 traffic-class=1
add color=green comment=\
    "RTSP broadcast TV streaming of live audio and video events, VS, VoD" \
    dscp=24 name=Broadcast-Video pcp=3 traffic-class=1
add color=green comment="Real-Time Interactive, gaming, low priority video con\
    ferencing, Flash Override" dscp=32 name=Real-Time pcp=4 traffic-class=1
add color=green comment="Signaling, Critical, voice RTP - SIP " dscp=46 name=\
    VoIP pcp=5 traffic-class=1
add color=green comment="IC, routing protocols (OSPF, BGP, ISIS, RIP)" dscp=\
    48 name=Internetwork-Control pcp=6 traffic-class=1
/interface ethernet switch qos port
set ether1 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether2 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether3 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether4 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether5 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether6 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether7 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether8 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether9 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether10 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether11 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether12 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether13 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether14 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether15 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether16 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether17 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether18 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether19 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether20 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether21 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether22 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether23 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether24 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set sfp-sfpplus1 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set sfp-sfpplus2 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set switch1-cpu map=default profile=default trust-l2=keep trust-l3=ignore \
    tx-manager=default
/interface bonding
set 0 comment=Zolder mode=802.3ad name=bonding1 slaves=ether1,ether2
set 1 comment=NAS mode=802.3ad name=bonding2 slaves=ether12,ether13
/snmp community
set [ find default=yes ] disabled=yes
add addresses=::/0 comment=checkmk name=checkmk security=authorized
/interface bridge port
set 0 bridge=bridge comment=defconf interface=ether3 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes trusted=yes
set 1 bridge=bridge comment=defconf interface=ether4 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes pvid=20 frame-types=admit-only-untagged-and-priority-tagged
set 2 bridge=bridge comment=defconf interface=ether5 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes pvid=20 frame-types=admit-only-untagged-and-priority-tagged
set 3 bridge=bridge comment=defconf interface=ether6 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 4 bridge=bridge comment=defconf interface=ether7 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 5 bridge=bridge comment=defconf interface=ether8 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 6 bridge=bridge comment=defconf interface=ether9 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 7 bridge=bridge comment=defconf interface=ether10 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 8 bridge=bridge comment=defconf interface=ether11 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 9 bridge=bridge comment=defconf interface=ether14 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 10 bridge=bridge comment=defconf interface=ether15 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 11 bridge=bridge comment=defconf interface=ether16 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 12 bridge=bridge comment=defconf interface=ether17 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 13 bridge=bridge comment=defconf interface=ether18 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 14 bridge=bridge comment=defconf interface=ether19 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 15 bridge=bridge comment=defconf interface=ether20 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 16 bridge=bridge comment=defconf interface=ether21 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 17 bridge=bridge comment=defconf interface=ether22 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 18 bridge=bridge comment=defconf interface=ether23 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes pvid=99 frame-types=admit-only-untagged-and-priority-tagged
set 19 bridge=bridge comment=defconf interface=ether24 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes pvid=99 frame-types=admit-only-untagged-and-priority-tagged
set 20 bridge=bridge comment=defconf interface=sfp-sfpplus1 internal-path-cost=7500 path-cost=7500 hw=yes
set 21 bridge=bridge comment=defconf interface=sfp-sfpplus2 internal-path-cost=1000 path-cost=1000 hw=yes trusted=yes frame-types=admit-only-vlan-tagged
set 22 bridge=bridge comment=Zolder interface=bonding1 hw=yes
set 23 bridge=bridge comment=NAS interface=bonding2 hw=yes
/interface bridge settings
set allow-fast-path=yes use-ip-firewall=no use-ip-firewall-for-pppoe=no \
    use-ip-firewall-for-vlan=no
/interface ethernet switch l3hw-settings
set autorestart=yes icmp-reply-on-error=no ipv6-hw=yes
/interface bridge vlan
set 0 bridge=bridge comment=LAN tagged=bridge,sfp-sfpplus1,bonding1,sfp-sfpplus2 vlan-ids=10
set 1 add bridge=bridge comment=IOT tagged=bridge,bonding1,sfp-sfpplus1,sfp-sfpplus2 untagged=ether4,ether5 vlan-ids=20
set 2 add bridge=bridge comment=DMZ tagged=bridge,sfp-sfpplus1,bonding1 vlan-ids=200
add bridge=bridge comment=MGMT tagged=bridge,bonding1,bonding2,sfp-sfpplus2 untagged=ether23,ether24 vlan-ids=99
/interface vlan
add interface=bridge name=LAN vlan-id=10
add interface=bridge name=IOT vlan-id=20
add interface=bridge name=DMZ vlan-id=200
add interface=bridge name=MGMT vlan-id=99
/ip address
add address=192.168.10.1/24 interface=LAN network=192.168.10.0
add address=192.168.20.1/24 interface=IOT network=192.168.20.0
add address=192.168.200.1/24 interface=DMZ network=192.168.200.0
add address=192.168.99.1/24 interface=MGMT network=192.168.99.0
/interface detect-internet
set detect-interface-list=none
/interface list member
remove numbers=26
remove numbers=25
remove numbers=24
remove numbers=23
remove numbers=22
remove numbers=21
remove numbers=20
remove numbers=19
remove numbers=18
remove numbers=17
remove numbers=16
remove numbers=15
remove numbers=14
remove numbers=13
remove numbers=12
remove numbers=11
remove numbers=10
remove numbers=9
remove numbers=8
remove numbers=7
remove numbers=6
remove numbers=5
remove numbers=4
remove numbers=3
remove numbers=2
remove numbers=1
/ip dhcp-client
add add-default-route=yes default-route-distance=1 dhcp-options=\
    hostname,clientid disabled=no interface=bridge \
    use-peer-dns=yes use-peer-ntp=yes
/ip dhcp-relay
add name=LAN-relay interface=LAN add-relay-info=yes \
   dhcp-server=192.168.1.2 local-address=192.168.10.1 disabled=no
add name=IOT-relay interface=IOT add-relay-info=yes \
   dhcp-server=192.168.1.2 local-address=192.168.20.1 disabled=no
add name=DMZ-relay interface=DMZ add-relay-info=yes \
   dhcp-server=192.168.1.2 local-address=192.168.200.1 disabled=no
add name=MGMT-relay interface=MGMT add-relay-info=yes \
   dhcp-server=192.168.1.2 local-address=192.168.99.1 disabled=no
/ip dhcp-client option
set clientid_duid code=61 name=clientid_duid value="0xff\$(CLIENT_DUID)"
set clientid code=61 name=clientid value="0x01\$(CLIENT_MAC)"
set hostname code=12 name=hostname value="\$(HOSTNAME)"
/ip dns
set servers=1.1.1.1
/snmp
set contact="me" enabled=yes location=Meterkast
/system clock
set time-zone-name=Europe/Amsterdam
/system identity
set name=switch1
/system note
set show-at-login=no
/system routerboard settings
set boot-os=router-os

In case you don't have a multicast router already on your network than you may want to check the PIM-SM part of the documentation to set up one.
Top
 
mcbrown90
just joined
Topic Author
Posts: 5
Joined: Fri May 07, 2021 12:34 pm

Re: How to enable IGMP on the CRS326

Sat Jan 13, 2024 1:00 am

Thank you so much for your reply!
Hi,

I'm not so experienced with mikrotik RouterOS and i'm having a problem with activating IGMP on my CRS326.
When I enable IGMP on the bridge(set bridge igmp-snooping=yes) the switch becomes unavailable(so I have to connect the serial cable and undo the setting(set bridge igmp-snooping=no)).

The goal is that on VLAN 1, 10 and 20 IGMP is enabled, but i'm not sure where to start.
my current config:
Code: Select all
/interface bridge
add admin-mac=48:8F:5A:B6:1B:D9 auto-mac=no comment=defconf name=bridge port-cost-mode=short vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] comment=Zolder1
set [ find default-name=ether2 ] comment=Zolder2
set [ find default-name=ether3 ] comment=RaspberryPi
set [ find default-name=ether4 ] comment=ZigStar
set [ find default-name=ether5 ] comment=DIRIGERA
set [ find default-name=ether12 ] comment=NAS-1
set [ find default-name=ether13 ] comment=NAS-2
set [ find default-name=sfp-sfpplus1 ] auto-negotiation=no comment=Router speed=2.5G-baseT
set [ find default-name=sfp-sfpplus2 ] comment=switch2
/interface bonding
add comment=Zolder mode=802.3ad name=bonding1 slaves=ether1,ether2
add comment=NAS mode=802.3ad name=bonding2 slaves=ether12,ether13
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/port
set 0 name=serial0
/snmp community
set [ find default=yes ] disabled=yes
add addresses=::/0 comment=checkmk name=checkmk security=authorized
/interface bridge port
add bridge=bridge comment=defconf interface=ether3 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether4 internal-path-cost=10 path-cost=10 pvid=20
add bridge=bridge comment=defconf interface=ether5 internal-path-cost=10 path-cost=10 pvid=20
add bridge=bridge comment=defconf interface=ether6 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether7 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether8 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether9 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether10 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether11 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether14 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether15 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether16 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether17 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether18 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether19 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether20 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether21 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether22 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether23 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=ether24 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=sfp-sfpplus1 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf interface=sfp-sfpplus2 internal-path-cost=10 path-cost=10
add bridge=bridge comment=Zolder interface=bonding1
add bridge=bridge comment=NAS interface=bonding2
/interface bridge vlan
add bridge=bridge comment=LAN tagged=sfp-sfpplus1,bonding1,sfp-sfpplus2 vlan-ids=10
add bridge=bridge comment=IOT tagged=bonding1,sfp-sfpplus1,sfp-sfpplus2 untagged=ether4,ether5 vlan-ids=20
add bridge=bridge comment=DMZ tagged=sfp-sfpplus1,bonding1 vlan-ids=200
/interface detect-internet
set detect-interface-list=all
/interface list member
add interface=ether1 list=WAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=ether9 list=LAN
add interface=ether10 list=LAN
add interface=ether11 list=LAN
add interface=ether12 list=LAN
add interface=ether13 list=LAN
add interface=ether14 list=LAN
add interface=ether15 list=LAN
add interface=ether16 list=LAN
add interface=ether17 list=LAN
add interface=ether18 list=LAN
add interface=ether19 list=LAN
add interface=ether20 list=LAN
add interface=ether21 list=LAN
add interface=ether22 list=LAN
add interface=ether23 list=LAN
add interface=ether24 list=LAN
add interface=sfp-sfpplus1 list=LAN
add interface=sfp-sfpplus2 list=LAN
/interface ovpn-server server
set auth=sha1,md5
/ip dhcp-client
add interface=bridge...
What am I doing wrong?

From your exported configuration it seems that you have missed the relevant parts of the documentation, namely: CRS3xx, CRS5xx, CCR2116, CCR2216 switch chip features and L3 Hardware Offloading and L3HW Device Support CRS3xx: Switch DX3000 and DX2000 Series and Spanning Tree Protocol and Layer2 misconfiguration LAG interfaces and load balancing and Bridge IGMP/MLD snooping.

When modifying your configuration I made the following assumptions as you have not included a network lay out nor a full configuration:
  • you have four DHCP servers for your four VLANs:
    • 1, network: 192.168.1.0
    • 10, network: 192.168.10.0
    • 20, network: 192.168.20.0
    • 200, network: 192.168.200.0
  • your RaspberryPi connected to Eth3 provides the DHCP servers and has the 192.168.1.2 IPv4 address
No, the raspberry pi will be added later for some home automation. Currently I have an opnsense router acting as a DHCP server(on SFP1).
[*]you would like to use the L3HW featured just haven't configured yet
In the mikrotik interface it says that hardware offloading is enabled, not sure if it's L3..
[*]your RaspberryPi is your PIM-SM multicast router with
  • region name mymulticastregion-01 (also on all of your switches)
  • region version is 0
  • you have set up your other switches with MSTP, IGMPv3 and MLDv2
I'm not able to change these settings on the other switches(they are with SwOS and cant find these settings except for IGMP can be turned on).
[*]and you have set on your other switches' bridges priority to a higher value than 8000 HEX, so this is your root bridge
SwOS does not support this setting
[*]you set the port as trusted on your other switch which is connected to SFP2 on this
[*]you don't want to be locked out from the management of your device, therefore I've created a management VLAN
  • named MGMT
  • with VLAN id 99
  • with network 192.168.99.0
  • added Eth23 and Eth24 as untagged access ports to the management network just in case.
[/list]


Code: Select all
/interface bridge
set 0 add-dhcp-option82=yes admin-mac=48:8F:5A:B6:1B:D9 ageing-time=5m arp=\
    enabled arp-timeout=auto auto-mac=no comment=defconf \
    dhcp-snooping=yes disabled=no ether-type=0x8100 fast-forward=yes \
    forward-delay=15s frame-types=admit-all igmp-snooping=yes igmp-version=3 \
    ingress-filtering=yes last-member-interval=1s last-member-query-count=2 \
    max-hops=20 max-message-age=20s membership-interval=4m20s mld-version=2 \
    mtu=auto multicast-querier=no multicast-router=temporary-query name=\
    bridge port-cost-mode=long priority=0x8000 \
    protocol-mode=mstp pvid=1 querier-interval=4m15s query-interval=2m5s \
    query-response-interval=10s region-name=mymulticastregion-01 region-revision=0 \
    startup-query-count=2 startup-query-interval=31s250ms \
    transmit-hold-count=6 vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] l2mtu=10218 mtu=9000 comment=Zolder1
set [ find default-name=ether2 ] l2mtu=10218 mtu=9000 comment=Zolder2
set [ find default-name=ether3 ] l2mtu=10218 mtu=9000 comment=RaspberryPi
set [ find default-name=ether4 ] l2mtu=10218 mtu=9000 comment=ZigStar
set [ find default-name=ether5 ] l2mtu=10218 mtu=9000 comment=DIRIGERA
set [ find default-name=ether6 ] l2mtu=10218 mtu=9000
set [ find default-name=ether7 ] l2mtu=10218 mtu=9000
set [ find default-name=ether8 ] l2mtu=10218 mtu=9000
set [ find default-name=ether9 ] l2mtu=10218 mtu=9000
set [ find default-name=ether10 ] l2mtu=10218 mtu=9000
set [ find default-name=ether11 ] l2mtu=10218 mtu=9000
set [ find default-name=ether12 ] l2mtu=10218 mtu=9000 comment=NAS-1
set [ find default-name=ether13 ] l2mtu=10218 mtu=9000 comment=NAS-2
set [ find default-name=ether14 ] l2mtu=10218 mtu=9000
set [ find default-name=ether15 ] l2mtu=10218 mtu=9000
set [ find default-name=ether16 ] l2mtu=10218 mtu=9000
set [ find default-name=ether17 ] l2mtu=10218 mtu=9000
set [ find default-name=ether18 ] l2mtu=10218 mtu=9000
set [ find default-name=ether19 ] l2mtu=10218 mtu=9000
set [ find default-name=ether20 ] l2mtu=10218 mtu=9000
set [ find default-name=ether21 ] l2mtu=10218 mtu=9000
set [ find default-name=ether22 ] l2mtu=10218 mtu=9000
set [ find default-name=ether23 ] l2mtu=10218 mtu=9000
set [ find default-name=ether24 ] l2mtu=10218 mtu=9000
set [ find default-name=sfp-sfpplus1 ] l2mtu=10218 mtu=9000 auto-negotiation=no comment=Router speed=2.5G-baseT
set [ find default-name=sfp-sfpplus2 ] l2mtu=10218 mtu=9000 comment=switch2
/interface ethernet switch
set 0 !cpu-flow-control l3-hw-offloading=yes mirror-source=none \
    mirror-target=none name=switch1 qos-hw-offloading=yes
/interface ethernet switch port
set 0 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 1 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 2 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 3 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 4 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 5 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 6 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 7 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 8 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 9 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 10 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 11 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 12 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 13 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 14 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 15 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 16 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 17 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 18 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 19 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 20 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 21 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 22 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 23 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 24 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 25 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
set 26 !egress-rate !ingress-rate l3-hw-offloading=yes limit-broadcasts=yes \
    limit-unknown-multicasts=no limit-unknown-unicasts=no storm-rate=100
/interface ethernet switch qos profile
add color=green comment="Lower-Effort RFC8622" dscp=8 name=Lower-Effort pcp=1 \
    traffic-class=1
add color=green comment=\
    "Network operations, administration and management (OAM)" dscp=16 name=\
    OAM pcp=2 traffic-class=1
add color=green comment=\
    "RTSP broadcast TV streaming of live audio and video events, VS, VoD" \
    dscp=24 name=Broadcast-Video pcp=3 traffic-class=1
add color=green comment="Real-Time Interactive, gaming, low priority video con\
    ferencing, Flash Override" dscp=32 name=Real-Time pcp=4 traffic-class=1
add color=green comment="Signaling, Critical, voice RTP - SIP " dscp=46 name=\
    VoIP pcp=5 traffic-class=1
add color=green comment="IC, routing protocols (OSPF, BGP, ISIS, RIP)" dscp=\
    48 name=Internetwork-Control pcp=6 traffic-class=1
/interface ethernet switch qos port
set ether1 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether2 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether3 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether4 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether5 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether6 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether7 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether8 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether9 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether10 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether11 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether12 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether13 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether14 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether15 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether16 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether17 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether18 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether19 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether20 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether21 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether22 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether23 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set ether24 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set sfp-sfpplus1 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set sfp-sfpplus2 map=default profile=default trust-l2=keep trust-l3=keep \
    tx-manager=default
set switch1-cpu map=default profile=default trust-l2=keep trust-l3=ignore \
    tx-manager=default
/interface bonding
set 0 comment=Zolder mode=802.3ad name=bonding1 slaves=ether1,ether2
set 1 comment=NAS mode=802.3ad name=bonding2 slaves=ether12,ether13
/snmp community
set [ find default=yes ] disabled=yes
add addresses=::/0 comment=checkmk name=checkmk security=authorized
/interface bridge port
set 0 bridge=bridge comment=defconf interface=ether3 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes trusted=yes
set 1 bridge=bridge comment=defconf interface=ether4 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes pvid=20 frame-types=admit-only-untagged-and-priority-tagged
set 2 bridge=bridge comment=defconf interface=ether5 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes pvid=20 frame-types=admit-only-untagged-and-priority-tagged
set 3 bridge=bridge comment=defconf interface=ether6 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 4 bridge=bridge comment=defconf interface=ether7 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 5 bridge=bridge comment=defconf interface=ether8 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 6 bridge=bridge comment=defconf interface=ether9 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 7 bridge=bridge comment=defconf interface=ether10 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 8 bridge=bridge comment=defconf interface=ether11 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 9 bridge=bridge comment=defconf interface=ether14 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 10 bridge=bridge comment=defconf interface=ether15 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 11 bridge=bridge comment=defconf interface=ether16 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 12 bridge=bridge comment=defconf interface=ether17 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 13 bridge=bridge comment=defconf interface=ether18 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 14 bridge=bridge comment=defconf interface=ether19 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 15 bridge=bridge comment=defconf interface=ether20 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 16 bridge=bridge comment=defconf interface=ether21 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 17 bridge=bridge comment=defconf interface=ether22 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes
set 18 bridge=bridge comment=defconf interface=ether23 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes pvid=99 frame-types=admit-only-untagged-and-priority-tagged
set 19 bridge=bridge comment=defconf interface=ether24 internal-path-cost=10000 hw=yes path-cost=10000 hw=yes pvid=99 frame-types=admit-only-untagged-and-priority-tagged
set 20 bridge=bridge comment=defconf interface=sfp-sfpplus1 internal-path-cost=7500 path-cost=7500 hw=yes
set 21 bridge=bridge comment=defconf interface=sfp-sfpplus2 internal-path-cost=1000 path-cost=1000 hw=yes trusted=yes frame-types=admit-only-vlan-tagged
set 22 bridge=bridge comment=Zolder interface=bonding1 hw=yes
set 23 bridge=bridge comment=NAS interface=bonding2 hw=yes
/interface bridge settings
set allow-fast-path=yes use-ip-firewall=no use-ip-firewall-for-pppoe=no \
    use-ip-firewall-for-vlan=no
/interface ethernet switch l3hw-settings
set autorestart=yes icmp-reply-on-error=no ipv6-hw=yes
/interface bridge vlan
set 0 bridge=bridge comment=LAN tagged=bridge,sfp-sfpplus1,bonding1,sfp-sfpplus2 vlan-ids=10
set 1 add bridge=bridge comment=IOT tagged=bridge,bonding1,sfp-sfpplus1,sfp-sfpplus2 untagged=ether4,ether5 vlan-ids=20
set 2 add bridge=bridge comment=DMZ tagged=bridge,sfp-sfpplus1,bonding1 vlan-ids=200
add bridge=bridge comment=MGMT tagged=bridge,bonding1,bonding2,sfp-sfpplus2 untagged=ether23,ether24 vlan-ids=99
/interface vlan
add interface=bridge name=LAN vlan-id=10
add interface=bridge name=IOT vlan-id=20
add interface=bridge name=DMZ vlan-id=200
add interface=bridge name=MGMT vlan-id=99
/ip address
add address=192.168.10.1/24 interface=LAN network=192.168.10.0
add address=192.168.20.1/24 interface=IOT network=192.168.20.0
add address=192.168.200.1/24 interface=DMZ network=192.168.200.0
add address=192.168.99.1/24 interface=MGMT network=192.168.99.0
/interface detect-internet
set detect-interface-list=none
/interface list member
remove numbers=26
remove numbers=25
remove numbers=24
remove numbers=23
remove numbers=22
remove numbers=21
remove numbers=20
remove numbers=19
remove numbers=18
remove numbers=17
remove numbers=16
remove numbers=15
remove numbers=14
remove numbers=13
remove numbers=12
remove numbers=11
remove numbers=10
remove numbers=9
remove numbers=8
remove numbers=7
remove numbers=6
remove numbers=5
remove numbers=4
remove numbers=3
remove numbers=2
remove numbers=1
/ip dhcp-client
add add-default-route=yes default-route-distance=1 dhcp-options=\
    hostname,clientid disabled=no interface=bridge \
    use-peer-dns=yes use-peer-ntp=yes
/ip dhcp-relay
add name=LAN-relay interface=LAN add-relay-info=yes \
   dhcp-server=192.168.1.2 local-address=192.168.10.1 disabled=no
add name=IOT-relay interface=IOT add-relay-info=yes \
   dhcp-server=192.168.1.2 local-address=192.168.20.1 disabled=no
add name=DMZ-relay interface=DMZ add-relay-info=yes \
   dhcp-server=192.168.1.2 local-address=192.168.200.1 disabled=no
add name=MGMT-relay interface=MGMT add-relay-info=yes \
   dhcp-server=192.168.1.2 local-address=192.168.99.1 disabled=no
/ip dhcp-client option
set clientid_duid code=61 name=clientid_duid value="0xff\$(CLIENT_DUID)"
set clientid code=61 name=clientid value="0x01\$(CLIENT_MAC)"
set hostname code=12 name=hostname value="\$(HOSTNAME)"
/ip dns
set servers=1.1.1.1
/snmp
set contact="me" enabled=yes location=Meterkast
/system clock
set time-zone-name=Europe/Amsterdam
/system identity
set name=switch1
/system note
set show-at-login=no
/system routerboard settings
set boot-os=router-os

In case you don't have a multicast router already on your network than you may want to check the PIM-SM part of the documentation to set up one.
Thank you, I will try to read and understand your config.
Top
 
un9edsda
Frequent Visitor
Frequent Visitor
Posts: 83
Joined: Sun Mar 15, 2020 11:11 pm

Re: How to enable IGMP on the CRS326

Sat Jan 13, 2024 6:36 am

When modifying your configuration I made the following assumptions as you have not included a network lay out nor a full configuration:
  • you have four DHCP servers for your four VLANs:
    • 1, network: 192.168.1.0
    • 10, network: 192.168.10.0
    • 20, network: 192.168.20.0
    • 200, network: 192.168.200.0
  • your RaspberryPi connected to Eth3 provides the DHCP servers and has the 192.168.1.2 IPv4 address
[/list]
No, the raspberry pi will be added later for some home automation. Currently I have an opnsense router acting as a DHCP server(on SFP1).

Than at least the configuration's DHCP relay part has to be modified accordingly.


  • you would like to use the L3HW featured just haven't configured yet
In the mikrotik interface it says that hardware offloading is enabled, not sure if it's L3..

The port HW flag is different than whether the L3HW function is enabled on the switch (the former is required for the later).


  • your RaspberryPi is your PIM-SM multicast router with
    • region name mymulticastregion-01 (also on all of your switches)
    • region version is 0
    • you have set up your other switches with MSTP, IGMPv3 and MLDv2
I'm not able to change these settings on the other switches(they are with SwOS and cant find these settings except for IGMP can be turned on).
  • and you have set on your other switches' bridges priority to a higher value than 8000 HEX, so this is your root bridge
SwOS does not support this setting

From the very last line of your exported configuration I have assumed that you are using RouterOS and managing it with WinBox. SwOS is way more limited indeed (and unfortunately neglected: SwOS was released at 2021-04-29 and on 2022-08-23 @becs announced that "new SwOS version with bugfixes and new features [is planned to be released soon]".


Thank you, I will try to read and understand your config.
You are very welcome.

You may want to have a look at New User Pathway To Config Success article by @anav .
Top
Post Reply
  4. RouterOS
  5. Beginner Basics