Community discussions

MikroTik App
 
theblop
just joined
Topic Author
Posts: 12
Joined: Thu Apr 23, 2009 12:45 am

management IP on bridge or vlan interface for CRS310 switch

Mon Dec 02, 2024 3:12 pm

Hi,

So on a recent switch such as the CRS310-8G+2S+IN, assuming I already have some vlans configured on the bridge interface (/interface/bridge/vlan) and that my management vlan is 1, where is it recommended to configure the switch own management IP ?

a) directly on the bridge interface with PVID=1 (/interface/bridge) ?
b) or on a new vlan 1 interface on the switch ? (/interface/vlan) ?

From what I read I think the good answer is b), but why? What kind of issues could arise in assigning an IP to the bridge directly?

Thanks!
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 13130
Joined: Thu Mar 03, 2016 10:23 pm

Re: management IP on bridge or vlan interface for CRS310 switch  [SOLVED]

Mon Dec 02, 2024 3:25 pm

If you insist that management VLAN resides on VID 1, then it's a). Reason: default config uses VID=1 for all sorts of configuration (e.g. PVID on all ports, including bridge CPU-facing port). It is possible to get it going as tagged (which is where VLAN interfaces come into play), but it's a tedious job because one has to look at all the places where VID=1 might be used in any possible way and do something about it.

Since also other vendors treat VID=1 in special way (and each has slightly different approach at it), I'd recommend to go for a different VID for management. And in that case, it would be option b).
 
theblop
just joined
Topic Author
Posts: 12
Joined: Thu Apr 23, 2009 12:45 am

Re: management IP on bridge or vlan interface for CRS310 switch

Mon Dec 02, 2024 3:54 pm

If you insist that management VLAN resides on VID 1, then it's a). Reason: default config uses VID=1 for all sorts of configuration (e.g. PVID on all ports, including bridge CPU-facing port). It is possible to get it going as tagged (which is where VLAN interfaces come into play), but it's a tedious job because one has to look at all the places where VID=1 might be used in any possible way and do something about it.

Since also other vendors treat VID=1 in special way (and each has slightly different approach at it), I'd recommend to go for a different VID for management. And in that case, it would be option b).
Thank you for this clear explanation!