The attached documents my setup for a MikroTik CSS106/RB260GSP switch. This is a 5 port (with optional SFP) managed switch with POE-in on port 1 and POE-out available on ports 2-5. I wrote this up because the switch is quite different from other switches I've used. The result presented here is still a work in progress, but it seems to work OK. Comments welcomed. I paid about $60 for the switch.
The solution allows Internet (Port1) access for the AREDN node (port2) and Ports 3-5. It does not allow Internet access from the WAN side of the AREDN node. Ports 3-5 can access the AREDN node and mesh network and the Internet. The switch is powered from its 24 volt power supply. POE is provided to the AREDN node via port 2.
73, Don, KM4DC
The solution allows Internet (Port1) access for the AREDN node (port2) and Ports 3-5. It does not allow Internet access from the WAN side of the AREDN node. Ports 3-5 can access the AREDN node and mesh network and the Internet. The switch is powered from its 24 volt power supply. POE is provided to the AREDN node via port 2.
73, Don, KM4DC
-Damon K9CQB
I have two of the CSS106 switches in service in my home LAN (along with two Mikrotic CSS326 swithes and two RB750 routers). One is the older RB260 and the other is the newer CSS106. Neither is being used for AREDN, and also neither is the POE version. Unlike your setup, I am using the SFP port on both, however it is for Ethernet - not fiber. Both have been in service for several years without issue. Both are used in less than ideal environmental situations. One is inside a brick column in my front yard, and the other is in the attic where my measured high temp last summer was 151 degrees F.
Looking at your configuration settings looks reasonable to me. Good point about AREDN node not being able to power up and supply a DHCP address fast enough. Your solution is perfect under that situation. I have all of my switches set for static IP.
I'm not sure I understand Damon's comment about getting the SFP enumerated inside the AREDN firmware. Unless I'm missing something, there is no need to have the AREDN node to even be aware of what the transport media is. It's simply an Ethernet connection from the AREDN node to the switch. Beyond that, does not matter. If you are linking two AREDN radios (your example #1), it's just a DtD link. If you are extending the AREDN LAN to remote computer devices (your examples #2 & #2), it's just a LAN connection. The media type does not matter. In the most simple situation, the switch is being used as nothing but a media converter. If there are more devices plugged into the switch, then of course the switch functions are being used.
-Damon K9CQB
I have been able to configure DtD/VLAN2 in the Netgear GS-108E and 3COM 3C1720X devices,
but the SwOS on the Mikrotik RB260GSP it too different for me to grasp.
Anyone have a configuration for this device for
4 Nodes (POE'ed and DtD'ed) and 1 Trunk (4 VLANS) or similar?
I do not need any WAN/LAN ports configured on the RB260GSP,
I can configure LAN (& WAN?) ports at the other end of the Trunk.
If I had a sample configuration with 2 or more DtD'ed nodes, I think I could extrapolate.
Anyone configured VLAN2 on the RB260GSP?
Chuck
Here are some screen captures that should help you. Because this forum is https, if you are using a recent version of Chrome, you will not see my embedded screen captures because the website they are posted on is not secure, I have included direct links to each image.
This is a CSS106-1G-4P-1S that is used as a DtD hub for three AREDN radios (ports 2, 3, & 4) with the switch providing PoE to the three Rockets. Port 1 is a trunk that connects to my home network and provides me a separate VLAN connection (VLANs 11, 12, & 13) to each radio. My router gets an IP from each AREDN node, and has routing tables such that I can get to the LAN port of each radio from my home computer. VLAN 201 is the management LAN for the switch. Any questions, feel free to ask.
http://extraphotos.info/mikrotik/CSS106_Link.png
http://extraphotos.info/mikrotik/CSS106_VLAN.png
http://extraphotos.info/mikrotik/CSS106_VLANs.png
http://extraphotos.info/mikrotik/CSS106_System.png
Many thanks Jim.
That is like what I want. :-)
I don't understand the 'management port', but the rest matches what I want.
I may return with questions on the management port later.
Chuck
I tried your configuration and it did not work (as I expected it to work).
I set this up with a SXTsq on port 2 and 3. They powered up.
Plugged port 1 into the trunk port on my switch (3Com 3c17204).
None of the SXTs appeared on my network.
I could not find a GUI on 192.168.201.7 or 192.168.88.1 on port 1, 4, or 5.
I reset the switch to defaults.
Chuck
.
Here is part of the routing table in the router.
The first one is my default route to the internet. The next two are my (normal) hAP AREDN node. The second one of those specifies that any IP in the /28 range for my hAP gets routed via that. The first of the entries for my hAP is a entry that I put in that specifies that any 10.x.x.x address routes via the hAP. The next three are the three rockets with their IP ranges and at the right is the IP that will be used for the sourse address (the IP of the router).
Note, I am NOT using a typical home router.
As for the Management IP and VLAN, all of my switches use an IP on my 192.168.201.x network with is VLAN 201. My restricting management of the switch to the 201 VLAN, means that someone on AREDN for example could not take over the switch because they are on the wrong VLAN. I can give a longer explanation.
Thanks for the effort.
What I was hoping for was a POE version of a Netgear GS-105E.
What you describe is beyond my capacity.
73, Chuck
I was hoping for both VLANs (like the Netgear GS-105E) and POE (like the Ubiquiti N-SW).
When you indicated that my nodes would not appear on the network, I got lost.
("The SXTs don't appear on your network.")
I have 2 active nodes POE'ed in the unattached garage, one with 2 Raspberry Pis; a Meshchat and a PBX.
The POE feature would reduce the number of POEs in use, the VLAN would allow me to put the
Pis in the house via trunking to an inside the house VLAN switch.
I am currently using a 48 port VLAN switch (3Com 3C17204) in the garage and another one in the house.
I am assuming that the RB260GSP would draw far less power.
Chuck
A big thank you to Jim K6CCC.
Port 1 can be connected to a DtD port of an existing VLAN switch (hAP, AR150/300/750) or
Port 1 can be used as a 'Trunk' to another VLAN switch providing individual LAN access to each Radio port and DtD linking
(Netgear GS105E/108E or similar).
This is an indoor device.
Sheet 1: LINK
Sheet 2: VLAN
Sheet 3: VLANs