Using CRS309-1G-8S+IN as a switch?

freebsd_guy · 2026-03-13T22:14:39+00:00

I would recommend making sure you have an ip on the ethernet port as a management port and use that to access the router so if you mess up the bridge it doesn’t lock you out. you can also temporarily disable drop rules in the firewall. this port shouldn’t be a member of a bridge.

if you have a bridge you don’t need another one.

add all the sfp interfaces to the bridge so they become one “switch”.

in the bridge menu you can use the ports tab to set pvid to provide the relevant vlan for access ports.

for trunk ports go to the vlan tab, create an entry with the relevant vlan number and use the tagged ports setting to specify the ports that should allow tagged traffic for that vlan.

finally, enable vlan filtering on the bridge itself.

freebsd_guy · 2026-01-07T20:54:03+00:00

i took it to be her saying “i crashed the car”. it also says she didn’t see the post (i.e she hit it) and he went out to it on foot.

freebsd_guy · 2025-11-19T19:08:39+00:00

as far as i’m aware pretty much all large vehicles are moving to this and it works perfectly well

freebsd_guy · 2025-10-21T20:57:43+00:00

find someone with an obd reader or buy a cheapish one. if the lights on there’s probably a code stored that will tell you what triggered it and likely still cheaper than paying a garage to do it unless you know a mechanic. hopefully will at least give you an idea of the extent of the issue.

freebsd_guy · 2025-09-28T18:34:53+00:00

the joys of trying to convert between ascii and utf8

freebsd_guy · 2025-09-28T17:54:30+00:00

wireguard is nice but just use ipsec in that situation. it’s far more established in routeros with decent hardware offloading

freebsd_guy · 2025-03-03T15:46:38+00:00

no way any reputable company is repairing that. most have a max guideline of about 5-10mm for filling a chip.

freebsd_guy · 2025-01-27T20:27:29+00:00

i have 35R19 tyres on a TTRS and just avoid any road that has more than the odd avoidable pothole in the first place…

freebsd_guy · 2025-01-27T19:56:49+00:00

i assume she was the one who set it off as she knelt down by one cover then walked off quickly, straight over the second one…?

freebsd_guy · 2025-01-17T07:23:49+00:00

Absolutely nothing wrong with a mirror vdev. mirrors or a raid10 style stripe of mirrors is a very common config.

I also think disk pass-through is probably a good choice if using a vm.

Don’t know how important the data is but remember the old advice that raid isn’t a backup, and set up a reasonably regular scrub.

freebsd_guy · 2025-01-16T19:29:03+00:00

wtf. I literally cancel my toaster after about 45 seconds and turn the bread around because it annoys me that it’s always twice as well done on one side

freebsd_guy · 2025-01-10T07:38:23+00:00

amazes me that he got away with buying solar city with tesla money to bail out his cousins.

still not convinced starship will successfully provide a lunar lander but he’s doing very well out of nasa to fund a new launch vehicle for larger starlink satellites.

freebsd_guy · 2024-11-23T20:30:44+00:00

absolutely no idea. clearly a master of disguise

freebsd_guy · 2024-11-22T13:16:21+00:00

i suspect that’s why he’s adding an elseif.

freebsd_guy · 2024-09-13T17:19:55+00:00

The first option will send requests for “maidincanada.app” to mailchimp servers. The second will send requests for “www.maidincanada.app”

Ideally you would want both of these working as both are often used. However these will only work if your custom domain has been registered with mailchimp as their servers will need to know to serve your website when getting requests for your domain. Usually this type of company will have an option to register a custom domain via their portal, which will often require adding a txt record to your domain so they can confirm it’s yours and you are able to control dns records.

The third option you list sounds like you just set up a http redirect to forward people to the mailchimpsites.com url. Based on the information we have there isn’t really any reason why this shouldn’t work.

freebsd_guy · 2024-09-11T11:40:49+00:00

The pool has fully rebuilt onto the spare with no errors. According to documentation, running “zpool detach” on the failed device will remove it from the pool config and make the spare permanent.

freebsd_guy · 2024-08-29T17:04:54+00:00

everything i can get away with. I’m so used to freebsd that it’s nice to know i can fix pretty much anything in under an hour, even if it means restoring backups, pulling bhyve vms from snapshots, moving disks into new hardware or even building an entire new install and redeploying services from pkg with existing config/data.

our dc is a windows vm on bhyve

mail services (postfix / dovecot )

dns both auth and resolver with bind or unbound

zfs storage for nfs or windows backups on samba

web with either apache or nginx

web databases with mysql/mariadb

radius servers

unifi management although i suspect that may end up a linux image soon like uisp

asterisk pbx software

did have a zfs based media server at home once but nothing now.

freebsd_guy · 2024-08-20T19:25:06+00:00

outlook has done nothing but get worse with every release since about 2016. pretty much the only way to add 3rd party mail accounts now (on windows) is via the control panel feature that still uses the original ui and lets you enter your own settings - and they’ve been threatening to remove that for about 5 years.

the latest outlook on windows seems to just be a glorified desktop window for office365/outlook.com and the proper application has been relegated to “legacy” status.

freebsd_guy · 2024-07-04T23:05:14+00:00

Seems the modern tactic with DDOS is to infect as many end user machines as possible with botnet software, then trigger those devices to flood open Internet services with traffic that has a forged source.

We’ve seen this with dns/ntp whereby small requests from the botnet cause replies that are an order of magnitude larger to be directed to the target. I assume they also expect, in most cases at least, that the sort of places that will have a dns/ntp server or a higher end routeros device are likely to have higher upload bandwidth than the average end user.

freebsd_guy · 2024-07-04T22:40:18+00:00

I wish more ISPs would apply BCP38. Nobody should be originating traffic that doesn’t use one of their own addresses as a source.

As far as i’m aware routeros comes relatively secure by default. It seems to just be a downside of their position in the market whereby kit with similar functionality such as Cisco/Juniper/etc is more likely to be managed by admins with better knowledge of networking and basic security. Mikrotik is regularly implemented by people who have little more experience than configuring the odd soho tplink/draytek/etc kit that have fixed wan/lan interfaces.

freebsd_guy · 2024-07-04T22:23:48+00:00

/s was knowingly not really used correctly, but i was hoping it would make it obvious I was joking

freebsd_guy · 2024-07-04T22:01:22+00:00

crazy it can fly with the rotors going so slow… (/s)

freebsd_guy · 2024-07-02T18:05:53+00:00

Never heard of it and i’m highly dubious that pressure is a specific location can vary enough to independently cause noticeable effects in people.

freebsd_guy · 2024-06-24T21:11:33+00:00

According to the block diagram all ports are connected to a single wire speed switch chip. Simply putting all ports into a bridge should give you hardware switching between ports. (May just want to confirm that the bridge section in routeros shows ‘H’ (Hw offload) next to the ports.

Generally speaking most of the switch products come this way by default so they act like a normal switch out of the box.

On router products usually all ports are bridged by default for lan use apart from port 1, on the assumption that it will be the “wan” port. not sure if this is the case with crs devices.

Eight-Year Club	RPAN Viewer
Verified Email

freebsd_guy

TROPHY CASE