I recently updated my rb800/rb816 to run v6.0rc13. In the past I just put all the switch ports into a bridge and that's how they worked. Now that I have reloaded the firmware I'd like to correctly setup the 16 10/100 add-on ports using the switch chip(s). One thing that I don't see in the winbox but is in the specs say there are two switch chips, but in winbox it only shows one. Is this routerboard and daughterboard so old that the winbox no longer shows the correct hardware? Is there a way to use the switch chip without wasting 2 of the gigabit ports on the main board? It seems from research on line that one switch chip connects to ether2 and the other to ether3. Could that be changed to lets say connect them to bridge ports instead of ether2 and ether3? I have a bridge already from the ether1 and wlan1,2,3 ports. I currently only use the add-on ports for low bandwidth items. I have a 24 port gig switch uplinked on ether1 and Verizon Fios 50mbps on ether2. So I don't want to loose either ether2 or ether3 to use those 10/100 ports.

Thanks for your ideas.

This is Praetorian with additional info. For some reason my other account won't work now.

I tried using the master port but I still can't get the add on ports to pass traffic to the bridge.

[admin@MikroTik] > export compact
# jan/02/2002 01:18:28 by RouterOS 6.0rc13
# software id = XXXX-XXXX
#
/interface bridge
add l2mtu=1600 name="Wifi To Lan"
/interface ethernet
set 3 master-port=ether3
set 4 master-port=ether3
set 5 master-port=ether3
set 6 master-port=ether3
set 7 master-port=ether3
set 8 master-port=ether3
set 9 master-port=ether3
set 10 master-port=ether3
set 11 master-port=ether3
set 12 master-port=ether3
set 13 master-port=ether3
set 14 master-port=ether3
set 15 master-port=ether3
set 16 master-port=ether3
set 17 master-port=ether3
set 18 name=ether19
/interface wireless security-profiles
add authentication-types=wpa-psk,wpa2-psk eap-methods=passthrough \
management-protection=allowed mode=dynamic-keys name=MyDomain.net \
supplicant-identity="" wpa-pre-shared-key=mywifirocks \
wpa2-pre-shared-key=mywifipassword
/interface wireless
set 0 band=2ghz-b/g/n disabled=no frequency=2422 l2mtu=2290 mode=ap-bridge \
security-profile=MyDomain.net ssid=MyDomain.net
set 1 band=2ghz-b/g/n disabled=no frequency=2422 l2mtu=2290 mode=ap-bridge \
security-profile=MyDomain.net ssid=MyDomain.net
set 2 band=2ghz-b/g/n disabled=no frequency=2422 l2mtu=2290 mode=ap-bridge \
security-profile=MyDomain.net ssid=MyDomain.net
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
/ip pool
add name=MyDomain.net ranges=172.16.0.11-172.16.0.99
/ip dhcp-server
add address-pool=MyDomain.net disabled=no interface="Wifi To Lan" name=MyDomain.net
/port
set 0 name=serial0
set 1 name=serial1
/tool user-manager customer
add backup-allowed=yes disabled=no login=admin password="" \
paypal-accept-pending=no paypal-allowed=no paypal-secure-response=no \
permissions=owner signup-allowed=no time-zone=-00:00
/interface bridge port
add bridge="Wifi To Lan" interface=ether1
add bridge="Wifi To Lan" interface=wlan1
add bridge="Wifi To Lan" interface=wlan2
add bridge="Wifi To Lan" interface=wlan3
add bridge="Wifi To Lan" interface=ether3
/ip address
add address=172.16.0.254/24 interface=ether1 network=172.16.0.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether19 \
use-peer-dns=no use-peer-ntp=no
/ip dhcp-server lease
add address=172.16.0.1 client-id=1:f4:6d:4:c:5c:77 mac-address=\
F4:6D:04:0C:5C:77 server=MyDomain.net
/ip dhcp-server network
add address=172.16.0.0/24 dns-server=172.16.0.253,172.16.0.252,4.2.2.1 \
gateway=172.16.0.254
/ip firewall nat
add action=dst-nat chain=dstnat dst-port=3074 in-interface=ether19 protocol=\
tcp to-addresses=172.16.0.1 to-ports=3074
add action=dst-nat chain=dstnat dst-port=20714-27050 in-interface=ether19 \
protocol=tcp to-addresses=172.16.0.1 to-ports=20714-27050
add action=dst-nat chain=dstnat dst-port=3478 in-interface=ether19 protocol=\
udp to-addresses=172.16.0.1 to-ports=3478
add action=dst-nat chain=dstnat dst-port=3074 in-interface=ether19 protocol=\
udp to-addresses=172.16.0.1 to-ports=3074
add action=dst-nat chain=dstnat dst-port=4379-4380 in-interface=ether19 \
protocol=udp to-addresses=172.16.0.1 to-ports=4379-4380
add action=dst-nat chain=dstnat dst-port=27000-27030 in-interface=ether19 \
protocol=udp to-addresses=172.16.0.1 to-ports=27000-27030
add action=masquerade chain=srcnat out-interface=ether19
/ip route
add distance=1 dst-address=172.17.0.0/24 gateway=172.16.0.253
add distance=1 dst-address=172.17.254.0/24 gateway=172.16.0.253

Haven't played with the RB800/816 Combo so you might want to wait for someone more experienced to throw their hat into the ring if it's a critical service.

Assuming ether1-3 are the RB800 gigabit interfaces and ether4-19 are the RB816 interfaces, so if that's wrong, you'll have to adjust as required.

As far as I'm aware, the switch chips are both on the daughter board, and handle 8 ports each so if you set ether5-11 to have ether4 as the master port and ether13-19 to have ether12 as their master port, and add ether4 and ether12 to the bridge.

ether1-3 should still operate independently unless you also add them to the bridge.

Only other thing I noticed was

/ip address
add address=172.16.0.254/24 interface=ether1 network=172.16.0.0

Shouldn't that be on the bridge interface since ether1 is in the bridge??

Ether 1,2,19 are on the rb800 board. Ether 3-18 are on the daughter card.

For some reason ros is only seeing one switch chip and is putting all the ports on the daughter card on that chip. See attached picture. Also the output of the config file shows that ether 3 is set to have ether 3 as its master. But if you look at the picture from winbox it shows ether3 having no master port. From all the forums and posts I have found if I set all the other ports (4 -18 )to have ether3 as their master and put ether 3 into the bridge with the lan port and wan interfaces it should work. Something just does not look right and it looks more and more like a bug in winbox and/or ROS.