V6.43rc45 Switch Port Isolation

warn1ng · Mon Jul 23, 2018 6:49 pm

Hi, i have a problem with this, as i read "Since RouterOS v6.43rc11 it is possible to create an uplink port and isolated ports. " i decide to make a lab test because this feature will be very usefull in our network, but is not working, Router behind port ether1-uplink as IP 192.168.20.1, and i am pinging from a netbook connected at port ether3 with IP 192.168.20.40, i made the test on a RB750r2

To configure switch port isolation, you need to switch all required ports:

/interface bridge
add name=bridge1 protocol-mode=none
/interface bridge port
add interface=sfp1 bridge=bridge1 hw=yes
add interface=ether1 bridge=bridge1 hw=yes
add interface=ether2 bridge=bridge1 hw=yes
add interface=ether3 bridge=bridge1 hw=yes

Override the egress port for each switch port that needs to be isolated (excluding the uplink port):
/interface ethernet switch port-isolation
set ether1 forwarding-override=sfp1
set ether2 forwarding-override=sfp1
set ether3 forwarding-override=sfp1

orangetek · Tue Jul 24, 2018 9:29 am

I had the same problem on a 960PGS. It seems that this must be a bug because you can still do it in hardware on some devices using Switch->Rule tab. On your device it is not supported at all so you are out of luck. Mikrotik needs to update which devices support these functions.

V6.43rc45 Switch Port Isolation

V6.43rc45 Switch Port Isolation

Re: V6.43rc45 Switch Port Isolation