HELP! vlan config help needed

[WirelessRudy]

Screenshot 2015-10-19 12.22.46.png (65.28 KiB) Viewed 21544 times

Screenshot 2015-10-19 12.22.35.png (144.14 KiB) Viewed 21544 times

Screenshot 2015-10-19 12.22.46.png (65.28 KiB) Viewed 21544 times

We have one WS-8-250-AC (that is going to be replaced by a WS-12-250-AC as soon as we can get it) that is merely función as a midspan PoE inserter;

Port 1+2 are coupled, 3+4, 5+6 and 7+8. It all works fine.

But, the MT router that connects to Port 7 has a vlan with ID 2000 and service tag enabled that should connect/pass to a transparant bridge working other MT router on Port 8 (That is PoE)

Now all the normal traffic flows fine, but the vlan's on both ends of the port 7+8 switch are not receiving any traffic. So it is not passing.
How to set the config to make it work?

To make things a bit more complicated;
Port combi 1+2 and 5+6 actually have to transport transparantly same vlan (ID2000) but for the moment we don't want to connect these in the switch.
All the port combi's (1+2, 3+4, 5+6 & 7+8) should stay separated as if just midspan PoE insert. They all are connected on the low port number (i.e. 1, 3, 5 & 7) to a MT router where routing or bridging is performed.


Now if I know how to make pure midspan port combi's that also transport tagged vlans (Tagged = "Service Tag" in Mikrotik?) transparantly over these combi's while not bridgin them to the other combi's I want to go one step further;

All normal ethernet traffic continious to use these port combi's for midspan poe insert. But since all vlan traffic over each of these combi's is of one ID anyway (ID=2000 and all service tag 'on') I might as well use this switch to interconnect these?
In the MT router I can then remove these vlans from a bridge so traffic withing this vlan is switched in the Switch and flows directly from one end to another.

[sirhc]

Upgrade to latest version v1.3.3

Make sure the MTU in the switch is set as large or larger than MT L2 MTU of 1586

Please make a simple network diagram.

[WirelessRudy]

Ok, done the upgrade.

Mikrotik (MT?) L2 MTU is 1590. So in the switch I have to set to 1590? Or higher?

Made a foto of a very simple diagram... but cannot upload: "Temporary folder could not be found. Please check your PHP installation."
[I don't know where this comes from, its an .jpg file... "PHP installation"???]

Anyway, I'll play with the MTU setting now first, set it to 1590, see what happens...

[WirelessRudy]

Switch MTU setting both the appropiate ports to 1600 is not changing any...

I have rerouted my main vlan bypassing the switch so made a work around for now (I have a 2nd link). But one of the port combi's (2 port mini switch) should still pass this vlan with ID 2000.
Since a drawing or a photo is not possible in short notice (I am really lousy at that, and no draw program is installed in my PC yet anyway...) I try to explain in simple wordings:

Port 5 & 6 of the switch are midspan PoE where port 5 connects to MT-CCR and port 6 with PoE connects to a NetMetal that creates a wireless link to another units etc.

Port 5&6 are part of a IP network and all ethernet traffic passes normally over this mini switch to and from destination. Just wat I'd expected.


On the ethernet interface of the MT-CCR that connects to port 5 of the switch resides a vlan interface with ID 2000 and service tag enabled.
I understand that the vlan puts a vlan header on top of the ethernet packet and imho these packages should just pass the switch, as they just pass transparently the Netmetal to the other end of the line where it gets stripped again to be separated from the rest of the traffic.

I need to know how to configure the switch so this is happening; vlan packages with service tag add that in a data stream should just pass from the CCR to the NetMetal. It should not even know there is the Switch as midspan poe in the line...

Obviously I make a too simple perception of how it really works. I 'played' with several settings but don't seem to find one that works...

[I don't seem to be able to even upload a screendump anymore, like before. Is something wrong your end? Your server has been down a couple of hours today...?)

[sirhc]

Yea we upgraded our Amazon host today to allow more storage and Amazon changed our IP address.

Can you upload now?

[WirelessRudy]

Ok, finally got some time...

Vlan passing Netonix.png (44.43 KiB) Viewed 21506 times

Screenshot 2015-10-20 21.26.33.png (81.67 KiB) Viewed 21506 times

Screenshot 2015-10-20 21.26.55.png (65.06 KiB) Viewed 21506 times

Screenshot 2015-10-20 21.32.31.png (111.83 KiB) Viewed 21506 times

[WirelessRudy]

Basically it should be simple:

A router has an interface passing ethernet/IP traffic to port 5 of the Switch. The Switch forwards this traffic to port 6 and puts PoE on the ethernet cable. This cable powers a radio (NetMetal) that makes a link to another radio that connects to end point.

Both the start router and end router have on their interface belonging to this link a vlan interface with ID=2000. (And MT service tag enabled).
The vlan ethernet packages get mixed in the main data stream and should run towards other end where the vlan package get stripped and routed (or bridged to other similar vlan interfaces).

If I put a dumm or Mikrotik Switch or router in switch mode at the place were the WS--250-AC now sits all the packages from the data stream (so normal and vlan packages) will just pass.
But the Notonix is not passing any of the vlan traffic?

We tried several options but since there is no manual and not too many examples in the forum around we are sort of stuck here.....
How to configure port 5 & 6 to have ALL packages passing without any process, stripping or whatsoever....

[sirhc]

If I put a dumm or Mikrotik Switch or router in switch mode at the place were the WS--250-AC now sits all the packages from the data stream (so normal and vlan packages) will just pass.

But the Notonix is not passing any of the vlan traffic?

We tried several options but since there is no manual and not too many examples in the forum around we are sort of stuck here.....
How to configure port 5 & 6 to have ALL packages passing without any process, stripping or whatsoever....

Of course a "Dumb" switch will pass any traffic regardless of VLAN Tags, since a Dumb Switch is VLAN un-aware the port filters are turned off.

We may change the way our VLAN config works in the future but for now it is explicit meaning it "only" allows the packets through that are specified.

In reality you can allow more granular configurations of VLANs such as allow untagged or tagged or both regardless.

I think this is what you want, see below?

CLICK IMAGE BELOW TO VIEW FULL SIZE

VLAN.jpg (172.76 KiB) Viewed 21502 times

[WirelessRudy]

Well sorry, that is exactly what we tried, we figured this is how it should be done. But vlan traffic with ID=2000 doesn't pass from port 5 to 6......??

It cannot be something is wrong in the vlan setup. We swapped the port 5&6 connected link to another lesser important one since we needed the original vlan2000 traffic to pass. This vlan-link inmediately worked when an ordinair midspan box is fit again.
The new link we checked worked, but after putting this in the port 5&6 setup it doesn't anymore..... All traffic pass exept the vlan....

Screenshot 2015-10-21 00.19.49.png (70.22 KiB) Viewed 21493 times

[sirhc]

If you look at the Port 5 & 6 "Port Details" do you see any "Rx Oversize" or is the value 0?