So this is very strange and driving me mental
All I want to achieve is to have port 24 trunk (tag multiple vlans) and then have port 22 and later other ports untagged on selected vlans.

I setup a trunk vlan and untagged vlan setup to suit my environment following the Example 1 (Trunk and Access ports) from wiki here: http://wiki.mikrotik.com/wiki/Manual:CRS_examples


I have port 24 on the CRS connected to a CCR1009 router with a tagged vlan 1110 with an IP on it of 1.1.1.1/30
I have port 22 connected to another CCR1009 with no vlan but ip 1.1.1.2/30 on the connected port.
I cannot ping between the routers either way, but yet they can see each other in neighbour discover just does not show an IP address.
If I plug a laptop into port 22 and put 1.1.1.2 on it I can ping 1.1.1.1
Seems like for some reason the CCR1009 router isn't acting in a normal way when connecting to the CRS switch.


Here is my config:

# jan/12/1970 19:15:23 by RouterOS 6.37.1
# software id = F458-I809
#
/interface etheX
set [ find default-name=ether9 ] comment="Connected to X-PPPoE01 port 8" \
name=ether9-TO-X-PPPoE01
set [ find default-name=ether10 ] comment="Connected to X-PPPoE02 port 8" \
master-port=ether9-TO-X-PPPoE01 name=ether10-TO-X-PPPoE02
set [ find default-name=ether11 ] master-port=ether9-TO-X-PPPoE01
set [ find default-name=ether12 ] master-port=ether9-TO-X-PPPoE01
set [ find default-name=ether13 ] master-port=ether9-TO-X-PPPoE01
set [ find default-name=ether14 ] master-port=ether9-TO-X-PPPoE01
set [ find default-name=ether15 ] master-port=ether9-TO-X-PPPoE01
set [ find default-name=ether16 ] comment=\
"Connected to port 8 UBNT edgeswitch" master-port=ether9-TO-X-PPPoE01 \
name=ether16-TO-UBNTSWITCH
set [ find default-name=ether18 ] master-port=ether17
set [ find default-name=ether19 ] master-port=ether17
set [ find default-name=ether20 ] master-port=ether17
set [ find default-name=ether21 ] master-port=ether17
set [ find default-name=ether23 ] comment=\
"Connects to Port 7 on X-PPPoE01" disabled=yes master-port=ether17 \
name=ether23-TO-X-PPPoE01
set [ find default-name=ether24 ] comment=\
"Connects to AF24 link to Bside" name=ether24-TO-AFLINK
set [ find default-name=sfp-sfpplus1 ] master-port=ether1-master speed=1Gbps
set [ find default-name=sfpplus2 ] master-port=ether1-master speed=1Gbps
/ip neighbor discovery
set ether9-TO-X-PPPoE01 comment="Connected to X-PPPoE01 port 8"
set ether10-TO-X-PPPoE02 comment="Connected to X-PPPoE02 port 8"
set ether16-TO-UBNTSWITCH comment="Connected to port 8 UBNT edgeswitch"
set ether23-TO-X-PPPoE01 comment="Connects to Port 7 on X-PPPoE01"
set ether24-TO-AFLINK-Bside comment="Connects to AF24 link to Bside"
/interface etheX
set [ find default-name=ether22 ] comment=\
"Connects to port 7 on X-PPPoE02" master-port=\
ether24-TO-AFLINK-Bside name=ether22-TO-X-PPPoE02
/ip neighbor discovery
set ether22-TO-X-PPPoE02 comment="Connects to port 7 on X-PPPoE02"
/interface etheX switch
set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports=\
ether24-TO-AFLINK-Bside,ether22-TO-X-PPPoE02
/interface etheX switch egress-vlan-tag
add tagged-ports=ether24-TO-AFLINK-Bside vlan-id=1110
/interface etheX switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=1110 ports=ether22-TO-X-PPPoE02
/interface etheX switch vlan
add ports=ether22-TO-X-PPPoE02,ether24-TO-AFLINK-Bside vlan-id=1110

FYI in case anyone strikes this problem


Hello,

Your configuration has multiple master-ports, they create a simple port isolation solution but CRS switch-chip VLANs can work only on the first port group with a master-port. You should reconfigure CRS to use one master-port for all ports if you want to use VLAN configuration on all ports. Additionally, there is another method for port isolation:
http://wiki.mikrotik.com/wiki/Manual:CR ... _Isolation

Best regards,
Janis B.