RouterOS manual

Switch



interface/ethernet/switch

Conditions: !smips Syscap: musicswitch Type: Settings Directory

Global parameters for CRS1xx and 2xx series switches.

ParameterTypeDescription
namestringName of the switch.
bridge-typeenum (customer-vid-used-as-lookup-vid | service-vid-used-as-lookup-vid) { customer-vid-used-as-lookup-vid:0, service-vid-used-as-lookup-vid:1 }Defines which VLAN tag is used as Lookup-VID. Lookup-VID serves as the VLAN key for all VLAN-based lookups.
drop-if-no-vlan-assignment-on-portsmulti { array-id }Ports which drop frames if no MAC-based, Protocol-based VLAN assignment or Ingress VLAN Translation is applied.
drop-if-invalid-or-src-port-not-member-of-vlan-on-portsPorts that drop invalid and other port VLAN ID frames.

Lookup and learning mode for packets with an invalid VLAN.

  • ivl - use Independent VLAN Learning,
  • svl - use Shared VLAN Learning.
ParameterTypeDescription
forward-unknown-vlanboolWhether to allow forwarding VLANs that are not members of the VLAN table.
use-svid-in-one2one-vlan-lookupboolWhether to use service VLAN ID for 1:1 VLAN switching lookup.
use-cvid-in-one2one-vlan-lookupboolWhether to use customer VLAN ID for 1:1 VLAN switching lookup.
mac-level-isolationboolGlobally enables or disables MAC level isolation. Once enabled, the switch will check the source and destination MAC address entries and their isolation-profile from the unicast forwarding table. By default, the switch will learn MAC addresses and place them into a promiscuous isolation profile. Other isolation profiles can be used when creating static unicast entries. If the source or destination MAC address is located on a promiscuous isolation profile, the packet is forwarded. If both source and destination MAC addresses are located on the same community1 or community2 isolation profile, the packet is forwarded. The packet is dropped when the source and destination MAC address isolation profile is isolated, or when the source and destination MAC address isolation profiles are from different communities (e.g. source MAC address is community1 and destination MAC address is community2). When MAC level isolation is globally disabled, the isolation is bypassed.

Lookup mode for IPv4 multicast bridging.

  • dst-mac-and-vid-always - for all packet types the lookup key is the destination MAC and VLAN ID.
  • dst-ip-and-vid-for-ipv4 - for IPv4 packets the lookup key is the destination IP and VLAN ID.
ParameterTypeDescription
override-existing-when-ufdb-fullboolEnable or disable overriding an existing entry which has the lowest aging value when UFDB is full.
unicast-fdb-timeouttimeTimeout for Unicast FDB entries.

The first ingress mirroring analyzer port or trunk and mirroring format.

  • analyzer-configured - packet is the same as the packet to the destination, VLAN format is modified based on the VLAN configurations of the analyzer port.
  • unmodified - traffic is mirrored without any change to the original incoming packet format, but the service VLAN tag is stripped in the edge port.

The second ingress mirroring analyzer port or trunk and mirroring format.

  • analyzer-configured - packet is the same as the packet to the destination, VLAN format is modified based on the VLAN configurations of the analyzer port.
  • unmodified - traffic is mirrored without any change to the original incoming packet format, but the service VLAN tag is stripped in the edge port.
ParameterTypeDescription
ingress-mirror-ratioenum (1/1 | 1/2 | 1/4 | 1/8 | 1/16 | 1/32 | 1/64 | 1/128 | 1/256 | 1/512 | 1/1024 | 1/2048 | 1/4096 | 1/8192 | 1/16384 | 1/32768)The proportion of ingress mirrored packets compared to all packets.

The first egress mirroring analyzer port or trunk and mirroring format.

  • analyzer-configured - packet is the same as the packet to the destination, VLAN format is modified based on the VLAN configurations of the analyzer port.
  • modified - packet is the same as the packet to the destination, VLAN format is modified based on the VLAN configurations of the egress port.
  • original - traffic is mirrored without any change to the original incoming packet format, but the service VLAN tag is stripped in the edge port.

The second egress mirroring analyzer port or trunk and mirroring format.

  • analyzer-configured - packet is the same as the packet to the destination, VLAN format is modified based on the VLAN configurations of the analyzer port.
  • modified - packet is the same as the packet to the destination, VLAN format is modified based on the VLAN configurations of the egress port.
  • original - traffic is mirrored without any change to the original incoming packet format, but the service VLAN tag is stripped in the edge port.
ParameterTypeDescription
egress-mirror-ratioenum (1/1 | 1/2 | 1/4 | 1/8 | 1/16 | 1/32 | 1/64 | 1/128 | 1/256 | 1/512 | 1/1024 | 1/2048 | 1/4096 | 1/8192 | 1/16384 | 1/32768)The proportion of egress mirrored packets compared to all packets.
fdb-usesenum (mirror0 | mirror1) { mirror0:0, mirror1:1 }Analyzer port used for FDB-based mirroring.
vlan-usesenum (mirror0 | mirror1) { mirror0:0, mirror1:1 }Analyzer port used for VLAN-based mirroring.
mirror-egress-if-ingress-mirroredboolWhen a packet is applied to both ingress and egress mirroring, only ingress mirroring is performed on the packet, if this setting is disabled. If enabled, both mirroring types are applied.
mirror-tx-on-mirror-portbool
mirrored-packet-qos-prioritynumRemarked priority in mirrored packets.
mirrored-packet-drop-precedenceenum (green | yellow | red | drop)Remarked drop precedence in mirrored packets. This QoS attribute is used for mirrored packet enqueuing or dropping.
bypass-vlan-ingress-filter-forubit (eapol, ripv1, dhcpv4, dhcpv6, igmp, mld, arp, nd, pppoe-discovery)Protocols that are excluded from Ingress VLAN filtering. These protocols are not dropped if they have an invalid VLAN. (arp, dhcpv4, dhcpv6, eapol, igmp, mld, nd, pppoe-discovery, ripv1).
bypass-ingress-port-policing-forubit (eapol, ripv1, dhcpv4, dhcpv6, igmp, mld, arp, nd, pppoe-discovery)Protocols that are excluded from Ingress Port Policing. (arp, dhcpv4, dhcpv6, eapol, igmp, mld, nd, pppoe-discovery, ripv1).
bypass-l2-security-check-filter-forubit (eapol, ripv1, dhcpv4, dhcpv6, igmp, mld, arp, nd, pppoe-discovery)Protocols that are excluded from Policy rule security check. (arp, dhcpv4, dhcpv6, eapol, igmp, mld, nd, pppoe-discovery, ripv1).
ParameterTypeDescription
typeenum (QCA-8513L | QCA-8519 | QCA-8511) { QCA-8513L:9, QCA-8519:11, QCA-8511:12 }

interface/ethernet/switch

Syscap: rbswitch Type: Directory

Global parameters for switches with Marwell Prestera chips.

ParameterTypeDescription
Iinvalid
ParameterTypeDescription
namestring
mirror-source (syscap: switch-mirror1)iface_enum { none:0 }Selects a single mirroring source port. Ingress and egress traffic will be sent to the mirror-target port. Note that the mirror-target port has to belong to the same switch.
mirror-target (syscap: switch-mirror-prestera)iface_enum { none:0, cpu:0xffffffff }Selects a single mirroring target port. Mirrored packets from mirror-egress, mirror-ingress and mirror will be sent to the selected port.
mirror-egress-target (syscap: switch-mv88e6xxx)enum (none) { none:0 }Selects a single mirroring egress target port. Mirrored packets from mirror-egress (see the property in the port menu) will be sent to the selected port.
rspan (syscap: switch-mirror-prestera)boolEnables the Remote Switch Port Analyzer (RSPAN) feature on mirror-target. Traffic marked for ingress or egress mirroring is carried over a specified remote analyzer VLAN - rspan-egress-vlan-id and rspan-ingress-vlan-id.
rspan-ingress-vlan-id (syscap: switch-mirror-prestera)numSelects the VLAN ID for marked ingress traffic. Only applies when rspan is enabled.
rspan-egress-vlan-id (syscap: switch-mirror-prestera)numSelects the VLAN ID for marked egress traffic. Only applies when rspan is enabled.
switch-all-portsboolChanges the ether1 switch group only on RB450G/RB435G/RB850Gx2 devices. yes - ether1 is part of the switch and supports all advanced features including extended statistics. no - ether1 is not part of the switch, effectively making it a stand-alone ethernet port, increasing throughput but removing switching capability.
cpu-flow-control (syscap: switch-mv88e6xxx)boolDisables or enables the CPU Flow Control feature. The switch chip ensures the CPU port is not congested by sending out Pause Frames when link capacity is exceeded. Without this feature, packets crucial for routing or management may be dropped.
l3-hw-offloading (syscap: crs_prestera)boolLayer 3 hardware offloading. Allows offloading routing features onto the switch chip to reach wire speeds.
qos-hw-offloading (syscap: crs_prestera)boolQuality of Service hardware offloading. Allows enabling QoS for the given switch chip (if it supports QoS). Turning off the this setting will not completely revert to the previous functionality. It is recommended to reboot the device after disabling it.
ParameterTypeDescription
typeenum (ADMtek | IC-Plus-175C | IC-Plus-178C | IC-Plus-175D | Atheros-8316 | Atheros-7240 | Atheros-8227 | Atheros-8327 | Atheros-8236 | QCA-8513L | Atheros-8327N | QCA-8519 | QCA-8511 | QCA-8337 | MediaTek-MT7621 | Realtek-RTL8367 | Marvell-98DX3236 | Marvell-98DX8216 | Marvell-98DX8208 | Marvell-98DX8332 | Marvell-98DX8212 | Marvell-98DX3257 | IPQ-PPE | Marvell-98DX8525 | Marvell-98PX1012 | Marvell-98DX4310 | Marvell-98DX224S | Marvell-98DX226S | Marvell-88E6393X | Marvell-98DX3255 | Marvell-88E6191X | Marvell-98DX2528 | Marvell-98CX8410 | Marvell-88E6341 | MediaTek-MT7531 | Marvell-88E6190 | Marvell-98DX7335 | Marvell-98DX3510 | Marvell-98DX3550 | MediaTek-MT7531AE | Marvell-98DX1508M | IPQ-9570 | Marvell-98DX3530 | Marvell-98DX4550 | QCA-8386 | EN7523 | Marvell-98DX2521 | Marvell-98DX2556 | Marvell-98DX2588 | Marvell-98DX7335M) { ADMtek:0, IC-Plus-175C:1, IC-Plus-178C:2, IC-Plus-175D:3, Atheros-8316:4, Atheros-7240:5, Atheros-8227:6, Atheros-8327:7, Atheros-8236:8, QCA-8513L:9, Atheros-8327N:10, QCA-8519:11, QCA-8511:12, QCA-8337:13, MediaTek-MT7621:14, Realtek-RTL8367:15, Marvell-98DX3236:16, Marvell-98DX8216:17, Marvell-98DX8208:18, Marvell-98DX8332:19, Marvell-98DX8212:20, Marvell-98DX3257:21, IPQ-PPE:22, Marvell-98DX8525:23, Marvell-98PX1012:24, Marvell-98DX4310:25, Marvell-98DX224S:26, Marvell-98DX226S:27, Marvell-88E6393X:28, Marvell-98DX3255:29, Marvell-88E6191X:30, Marvell-98DX2528:31, Marvell-98CX8410:32, Marvell-88E6341:33, MediaTek-MT7531:34, Marvell-88E6190:35, Marvell-98DX7335:36, Marvell-98DX3510:37, Marvell-98DX3550:38, MediaTek-MT7531AE:39, Marvell-98DX1508M:40, IPQ-9570:41, Marvell-98DX3530:42, Marvell-98DX4550:43, QCA-8386:44, EN7523:45, Marvell-98DX2521:46, Marvell-98DX2556:47, Marvell-98DX2588:48, Marvell-98DX7335M:49 }
driver-rx-byte
driver-rx-packet
driver-tx-byte
driver-tx-packet
rx-bytes
rx-packet
rx-too-short
rx-64
rx-65-127
rx-128-255
rx-256-511
rx-512-1023
rx-1024-1518
rx-1519-max
rx-too-long
rx-broadcast
rx-pause
rx-multicast
rx-fcs-error
rx-align-error
rx-fragment
rx-overflow
rx-control
rx-unknown-op
rx-length-error
rx-code-error
rx-carrier-error
rx-jabber
rx-drop
rx-ip-header-checksum-error
rx-tcp-checksum-error
rx-udp-checksum-error
tx-bytes
tx-packet
tx-too-short
tx-64
tx-65-127
tx-128-255
tx-256-511
tx-512-1023
tx-1024-1518
tx-1519-max
tx-too-long
tx-broadcast
tx-pause
tx-multicast
tx-underrun
tx-collision
tx-excessive-collision
tx-multiple-collision
tx-single-collision
tx-excessive-deferred
tx-deferred
tx-late-collision
tx-total-collision
tx-pause-honored
tx-drop
tx-jabber
tx-fcs-error
tx-control
tx-fragment
tx-carrier-sense-error
tx-rx-64
tx-rx-65-127
tx-rx-128-255
tx-rx-256-511
tx-rx-512-1023
tx-rx-1024-1518
tx-rx-1519-max
tx-queue-custom0-drop-packet
tx-queue-custom0-drop-byte
tx-queue-custom1-drop-packet
tx-queue-custom1-drop-byte
policy-drop-packet
custom-drop-packet
current-learned
not-learned
rx-unicast
tx-unicast
rx-error-events
tx-rx-1024-max
rx-1024-max
tx-1024-max
rs-fec-codewords
rs-fec-corrected
rs-fec-uncorrected
rs-fec-symbol-error
fc-fec-rx-block
fc-fec-block-corrected
fc-fec-block-uncorrected
tx-queue0-packet
tx-queue0-byte
tx-queue1-packet
tx-queue1-byte
tx-queue2-packet
tx-queue2-byte
tx-queue3-packet
tx-queue3-byte
tx-queue4-packet
tx-queue4-byte
tx-queue5-packet
tx-queue5-byte
tx-queue6-packet
tx-queue6-byte
tx-queue7-packet
tx-queue7-byte
tx-drop-packet
tx-drop-byte
tx-drop-queue0-packet
tx-drop-queue0-byte
tx-drop-queue1-packet
tx-drop-queue1-byte
tx-drop-queue2-packet
tx-drop-queue2-byte
tx-drop-queue3-packet
tx-drop-queue3-byte
tx-drop-queue4-packet
tx-drop-queue4-byte
tx-drop-queue5-packet
tx-drop-queue5-byte
tx-drop-queue6-packet
tx-drop-queue6-byte
tx-drop-queue7-packet
tx-drop-queue7-byte

Source

Updated 2026-08-22.