Community discussions

MikroTik App
 
lblasc
just joined
Topic Author
Posts: 4
Joined: Thu Sep 09, 2010 1:32 am

RB hardware switch filtering using RouterOS

Thu Nov 08, 2012 10:34 am

Is there any way to filter some traffic from ports in RB hardware switch configuration using RouterOS ?

I'm building bridge firewall with RB450G on gigabit link using built in hardware switch, there are only 32 rules available which is not enough for this configuration.
So for this to work some traffic will need to go through RouterOS for additional filtering. Switch in configured on ether4 and ether5, uplink is on ether5.

For example, all traffic coming from 10.10.10.0/24 will need additional filtering:
/interface ethernet switch rule add copy-to-cpu=yes disabled=no mac-protocol=ip src-address=10.10.10.0/24 ports=ether4 vlan-header=not-present
Now RouterOS can work with this traffic but it cannot return it to ether5 port.

Any ideas ?
 
eosis
just joined
Posts: 4
Joined: Tue Nov 13, 2012 3:41 pm

Re: RB hardware switch filtering using RouterOS

Tue Nov 20, 2012 5:45 pm

I am also interested in this functionality. Is anyone able to help?
 
ditonet
Forum Veteran
Forum Veteran
Posts: 835
Joined: Mon Oct 19, 2009 12:52 am
Location: Europe/Poland/Konstancin-Jeziorna
Contact:

Re: RB hardware switch filtering using RouterOS

Tue Nov 20, 2012 7:48 pm

Now RouterOS can work with this traffic but it cannot return it to ether5 port.
If traffic flows through switch chip, only packet which meet your rule criteria is cloned and sent to CPU (router),
so don't expect that this packet will be returned in any way.
If you need more than 32 rules, add interfaces to bridge and use bridge filter.

HTH,