Hi folks,
I have some CRS112 switches for light VLAN switching without any L3 stuff. If you also need PoE, this switch is perfect for the job.
I noticed that it's necessary to configure the switch using switch chip configuration, as hardware offload is disabled when activating VLAN switching on the CRS112. Then, all packets are routed through the CPU, and the switch becomes saturated, unless the load is really light.
Below I present 2 configurations that should be equivalent. The 1st one is a classic bridge configuration, and the 2nd involves configuration over the switch chip. In practice both configurations do the same job, but the APs (Ubiquiti UniFi) connected to ports ether1 - ether8 display subtle differences in behavior depending on the configuration method chosen.
Everything is working, but I'm really curious what one configuration is missing compared to the other. I would be very grateful for clarification what the differences are, and if it's possible to completely mimic the bridge configuration method using switch chip configuration.
Best regards,
Peter
The setup is simple:
sfp12: Native LAN (VLAN 1) and VLANs 20, 40, 60 and 70 are fed as tagged traffic (trunk) from another switch
ether1-ether8: Native LAN (VLAN 1) as untagged, VLANs 20, 60 and 70 as tagged traffic to connected APs
bridge interface: VLAN 40 for management of the switch
Classic bridge configurationSwitch chip based configuration
I have some CRS112 switches for light VLAN switching without any L3 stuff. If you also need PoE, this switch is perfect for the job.
I noticed that it's necessary to configure the switch using switch chip configuration, as hardware offload is disabled when activating VLAN switching on the CRS112. Then, all packets are routed through the CPU, and the switch becomes saturated, unless the load is really light.
Below I present 2 configurations that should be equivalent. The 1st one is a classic bridge configuration, and the 2nd involves configuration over the switch chip. In practice both configurations do the same job, but the APs (Ubiquiti UniFi) connected to ports ether1 - ether8 display subtle differences in behavior depending on the configuration method chosen.
Everything is working, but I'm really curious what one configuration is missing compared to the other. I would be very grateful for clarification what the differences are, and if it's possible to completely mimic the bridge configuration method using switch chip configuration.
Best regards,
Peter
The setup is simple:
sfp12: Native LAN (VLAN 1) and VLANs 20, 40, 60 and 70 are fed as tagged traffic (trunk) from another switch
ether1-ether8: Native LAN (VLAN 1) as untagged, VLANs 20, 60 and 70 as tagged traffic to connected APs
bridge interface: VLAN 40 for management of the switch
Classic bridge configuration
Code:
/interface bridgeadd frame-types=admit-only-vlan-tagged name=main pvid=40 vlan-filtering=yes/interface vlanadd interface=main name=mgmtnet vlan-id=40/interface bridge portadd bridge=main interface=ether1add bridge=main interface=ether2add bridge=main interface=ether3add bridge=main interface=ether4add bridge=main interface=ether5add bridge=main interface=ether6add bridge=main interface=ether7add bridge=main interface=ether8add bridge=main frame-types=admit-only-vlan-tagged interface=sfp12 \ pvid=1111/interface bridge vlanadd bridge=main tagged=sfp12 untagged=\ ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8 vlan-ids=1add bridge=main tagged=ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp12 \ vlan-ids=20add bridge=main tagged=main,sfp12 vlan-ids=40add bridge=main tagged=ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp12 \ vlan-ids=60add bridge=main tagged=ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp12 \ vlan-ids=70/ip addressadd address=192.168.4.47/24 interface=mgmtnet network=192.168.4.0Code:
/interface bridgeadd name=main/interface vlanadd interface=main name=mgmtnet vlan-id=40/interface ethernet switchset forward-unknown-vlan=no/interface bridge portadd bridge=main interface=ether1add bridge=main interface=ether2add bridge=main interface=ether3add bridge=main interface=ether4add bridge=main interface=ether5add bridge=main interface=ether6add bridge=main interface=ether7add bridge=main interface=ether8add bridge=main interface=sfp12/interface ethernet switch egress-vlan-tagadd tagged-ports=sfp12 vlan-id=1add tagged-ports=ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp12 \ vlan-id=20add tagged-ports=switch1-cpu,sfp12 vlan-id=40add tagged-ports=ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp12 \ vlan-id=60add tagged-ports=ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp12 \ vlan-id=70/interface ethernet switch egress-vlan-translationadd customer-vid=0 customer-vlan-format=untagged-or-tagged new-customer-vid=1 \ ports=ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8/interface ethernet switch ingress-vlan-translationadd customer-vid=0 customer-vlan-format=untagged-or-tagged new-customer-vid=1 \ ports=ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8/interface ethernet switch vlanadd ports=ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp12 \ vlan-id=1add ports=ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp12 \ vlan-id=20add ports=switch1-cpu,sfp12 vlan-id=40add ports=ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp12 \ vlan-id=60add ports=ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,sfp12 \ vlan-id=70/ip addressadd address=192.168.4.47/24 interface=mgmtnet network=192.168.4.0Statistics: Posted by deadpete — Mon Jun 03, 2024 8:48 pm