When creating a MLAG on CRS3xx/CRS5xx (using RouterOS v7.15.x or later) series you normally:
- Create a bond for the MLAG-PEER.
- Configure "bridge mlag" to use the above as peer-port.
- Define a pvid (for example 4094) on the MLAG-PEER interface to be used for ICCP traffic.
- Define "mlag-id" for the LAGs to be the same on both devices (like when creating a LAG-UPLINK the LAG-UPLINK on both devices should be the same mlag-id).
I assume the above gives that the "interface bridge add" should then have "frame-types=admit-all" rather than "frame-types=admit-only-vlan" if vlan-filtering is enabled?
Or does that depend on how you choose to define the vlans?
For example if this is being used:
That is can you use "frame-types=admit-only-vlan-tagged" for the bridge interface as long as you also define the ICCP pvid as being tagged such as this?
Or should the ICCP always be untagged which gives if you use MLAG then the "interface bridge" shall always be "frame-types=admit-all"?
- Create a bond for the MLAG-PEER.
- Configure "bridge mlag" to use the above as peer-port.
- Define a pvid (for example 4094) on the MLAG-PEER interface to be used for ICCP traffic.
- Define "mlag-id" for the LAGs to be the same on both devices (like when creating a LAG-UPLINK the LAG-UPLINK on both devices should be the same mlag-id).
I assume the above gives that the "interface bridge add" should then have "frame-types=admit-all" rather than "frame-types=admit-only-vlan" if vlan-filtering is enabled?
Or does that depend on how you choose to define the vlans?
For example if this is being used:
Code:
/interface bridge vlan add bridge=bridge1 tagged=bridge1,MLAG-PEER,LAG-UPLINK,LAG-DOWNLINK vlan-ids=123
That is can you use "frame-types=admit-only-vlan-tagged" for the bridge interface as long as you also define the ICCP pvid as being tagged such as this?
Code:
/interface bridge vlan add bridge=bridge1 tagged=bridge1,MLAG-PEER,LAG-UPLINK,LAG-DOWNLINK vlan-ids=4094
Or should the ICCP always be untagged which gives if you use MLAG then the "interface bridge" shall always be "frame-types=admit-all"?
Statistics: Posted by Apachez — Wed Jan 29, 2025 9:49 am