CRS310-8G+2S+ VLAN configuration issues in SwOS
cross-posted from: https://lemmy.zip/post/61407838
> Made this post on forum.mikrotik.com and it's awaiting approval from moderation, figured I'd try here...
>
> Hey everyone!
>
> Been running into an issue the last few weeks with trying to setup a VLAN on my home network.
>
> Hardware/OS/IP:
>
> Router (R) = GL.iNet GL-MT6000 (Flint 2), OpenWrt 25.12.1, 10.1.10.1
> Office switch (O) = CRS310-8G+2S+, MikroTik SwOS 2.18, 10.1.10.2
> Living room switch (LR) = CSS610-8G-2S+, MikroTik SwOS Lite 2.21, 10.1.10.3
>
> Followed a few different guides on the OpenWrt side of the house, primarily this one
>
> During my multiple attempts I have wiped all devices and started fresh a few times and I always end up in the same situation…
>
> VLAN appears to be working on the LR switch (CSS610)
>
> 
>
> 
>
> 
>
> VLANs tab
> Port 1 is my trunk and a member of all 4 of my VLANs
> 10 = LAN (Used for network devices and maintenance)
> 20 = IoT
> 30 = Guest (not configured on the switch, only for WIFI)
> 40 = Main (Primary VLAN for my network)
> 50 = Servers
> Ports 2-5 are members of VLAN 40
> Port 6 is a member of VLAN 10
> VLAN tab
> Port 1 = Strict, Only tagged, Default ID 1
> Port 2 -5 = Strict, Only untagged, Default ID 40
> Port 6 = Strict, Only untagged, Default ID 10
>
> This seems to work great, devices will get 10.1.40.x IP addresses and I can connect to port 6 and get 10.1.10.x IP address. Confirmed that my firewall rules also seems to work (although I’ll probably want to run this past OpenWrt forum as well).
>
> But when I go to look at the O switch (CRS310), I’ll mirror this configuration, I’ll get DHCP and DNS, but I can’t reach the WAN or ping any other devices apart from the network equipment. Most recently I tried just VLAN 10 because I figured it would be using the LAN firewall rules and work correctly, but I get the same issue… correct IP address but no traffic.
>
> 
>
> 
>
> 
>
> Note: These screenshots are from last attempt to get something to work, when I mirror the CSS610 setup, I get the same results.
>
> I had to follow these steps to get the SwOS boot to work on the CRS310
>
> Curious if either…
>
> - Have I configured the CRS310 incorrectly and something needs to be different vs the CSS610 which seems to work?
> - Is there is a known VLAN related bug with the CRS310 & SwOS?
>
> Any advice and guidance would be appreciated, feel like I am going in circles at this point.
>
> Happy to share any outputs or screenshots from my OpenWrt router if it’ll help, but the issues do seem to be related directly to this CRS310 switch.
> Made this post on forum.mikrotik.com and it's awaiting approval from moderation, figured I'd try here...
>
> Hey everyone!
>
> Been running into an issue the last few weeks with trying to setup a VLAN on my home network.
>
> Hardware/OS/IP:
>
> Router (R) = GL.iNet GL-MT6000 (Flint 2), OpenWrt 25.12.1, 10.1.10.1
> Office switch (O) = CRS310-8G+2S+, MikroTik SwOS 2.18, 10.1.10.2
> Living room switch (LR) = CSS610-8G-2S+, MikroTik SwOS Lite 2.21, 10.1.10.3
>
> Followed a few different guides on the OpenWrt side of the house, primarily this one
>
> During my multiple attempts I have wiped all devices and started fresh a few times and I always end up in the same situation…
>
> VLAN appears to be working on the LR switch (CSS610)
>
> 
>
> 
>
> 
>
> VLANs tab
> Port 1 is my trunk and a member of all 4 of my VLANs
> 10 = LAN (Used for network devices and maintenance)
> 20 = IoT
> 30 = Guest (not configured on the switch, only for WIFI)
> 40 = Main (Primary VLAN for my network)
> 50 = Servers
> Ports 2-5 are members of VLAN 40
> Port 6 is a member of VLAN 10
> VLAN tab
> Port 1 = Strict, Only tagged, Default ID 1
> Port 2 -5 = Strict, Only untagged, Default ID 40
> Port 6 = Strict, Only untagged, Default ID 10
>
> This seems to work great, devices will get 10.1.40.x IP addresses and I can connect to port 6 and get 10.1.10.x IP address. Confirmed that my firewall rules also seems to work (although I’ll probably want to run this past OpenWrt forum as well).
>
> But when I go to look at the O switch (CRS310), I’ll mirror this configuration, I’ll get DHCP and DNS, but I can’t reach the WAN or ping any other devices apart from the network equipment. Most recently I tried just VLAN 10 because I figured it would be using the LAN firewall rules and work correctly, but I get the same issue… correct IP address but no traffic.
>
> 
>
> 
>
> 
>
> Note: These screenshots are from last attempt to get something to work, when I mirror the CSS610 setup, I get the same results.
>
> I had to follow these steps to get the SwOS boot to work on the CRS310
>
> Curious if either…
>
> - Have I configured the CRS310 incorrectly and something needs to be different vs the CSS610 which seems to work?
> - Is there is a known VLAN related bug with the CRS310 & SwOS?
>
> Any advice and guidance would be appreciated, feel like I am going in circles at this point.
>
> Happy to share any outputs or screenshots from my OpenWrt router if it’ll help, but the issues do seem to be related directly to this CRS310 switch.