Made this post on forum.mikrotik.com and it's awaiting approval from moderation, figured I'd try here...
Hey everyone!
Been running into an issue the last few weeks with trying to setup a VLAN on my home network.
Hardware/OS/IP:
Router (R) = GL.iNet GL-MT6000 (Flint 2), OpenWrt 25.12.1, 10.1.10.1
Office switch (O) = CRS310-8G+2S+, MikroTik SwOS 2.18, 10.1.10.2
Living room switch (LR) = CSS610-8G-2S+, MikroTik SwOS Lite 2.21, 10.1.10.3
Followed a few different guides on the OpenWrt side of the house, primarily this one
During my multiple attempts I have wiped all devices and started fresh a few times and I always end up in the same situation…
VLAN appears to be working on the LR switch (CSS610)
VLANs tab
Port 1 is my trunk and a member of all 4 of my VLANs
10 = LAN (Used for network devices and maintenance)
20 = IoT
30 = Guest (not configured on the switch, only for WIFI)
40 = Main (Primary VLAN for my network)
50 = Servers
Ports 2-5 are members of VLAN 40
Port 6 is a member of VLAN 10
VLAN tab
Port 1 = Strict, Only tagged, Default ID 1
Port 2 -5 = Strict, Only untagged, Default ID 40
Port 6 = Strict, Only untagged, Default ID 10
This seems to work great, devices will get 10.1.40.x IP addresses and I can connect to port 6 and get 10.1.10.x IP address. Confirmed that my firewall rules also seems to work (although I’ll probably want to run this past OpenWrt forum as well).
But when I go to look at the O switch (CRS310), I’ll mirror this configuration, I’ll get DHCP and DNS, but I can’t reach the WAN or ping any other devices apart from the network equipment. Most recently I tried just VLAN 10 because I figured it would be using the LAN firewall rules and work correctly, but I get the same issue… correct IP address but no traffic.
Note: These screenshots are from last attempt to get something to work, when I mirror the CSS610 setup, I get the same results.
I had to follow these steps to get the SwOS boot to work on the CRS310
Curious if either…
- Have I configured the CRS310 incorrectly and something needs to be different vs the CSS610 which seems to work?
- Is there is a known VLAN related bug with the CRS310 & SwOS?
Any advice and guidance would be appreciated, feel like I am going in circles at this point.
Happy to share any outputs or screenshots from my OpenWrt router if it’ll help, but the issues do seem to be related directly to this CRS310 switch.
Thanks for this info. I was wrong, I have a CRS320, not CRS310. And, here’s an Imgur album of how things are laid out: https://imgur.com/a/DT3htLJ
Now that I understand the topology better, I have questions about how the VLANs are assigned. Are you using a RADIUS server?
Also, I’m a little confused about the VLAN participation in both switches. I would expect an end client device (like those in your diagram) to connect to an untagged VLAN ports. But, your VLAN assignment screenshots only show your client VLANs on the trunk port.
For example, here’s how I’m doing untagged VLANs on my CRS320:
So, the fact that you can only reach VLAN10 targets from the CSS610 clients makes me think it’s related to VLAN assignment. Yes, it’s different than what’s being observed on your CRS310 clients, but one step at a time.