A
A
Alx2018-11-09 11:57:11
Mikrotik
Alx, 2018-11-09 11:57:11

How to set up an interface on mikrotik bridge-lan to get rid of tcp retransmit errors?

Good afternoon, colleagues.
There is a new Mikrotik 1100dx4, added ports from 2-5 to the bridge.
If you look at the traffic on any of the interfaces in the bridge, you can see that any packets go to retransmit.
At the same time, there are no problems with the transmitted information, there is an Internet, local resources are available, the speed is declared.
I tried firmware 6.43.4 and 6.42.9 (now it's worth it, this is a bugfix only branch).
Bridge configuration:

/interface bridge> export ve

/interface bridge
add ageing-time=5m arp=enabled arp-timeout=auto auto-mac=yes disabled=no fast-forward=no forward-delay=15s igmp-snooping=no max-message-age=20s mtu=auto name=bridge-lan priority=0x8000 \
    protocol-mode=rstp transmit-hold-count=6 vlan-filtering=no
/interface bridge port
add auto-isolate=no bridge=bridge-lan broadcast-flood=yes disabled=no edge=auto frame-types=admit-all horizon=none hw=yes ingress-filtering=no interface=ether2 internal-path-cost=10 learn=\
    auto path-cost=10 point-to-point=auto priority=0x80 pvid=1 restricted-role=no restricted-tcn=no unknown-multicast-flood=yes unknown-unicast-flood=yes
add auto-isolate=no bridge=bridge-lan broadcast-flood=yes disabled=no edge=auto frame-types=admit-all horizon=none hw=yes ingress-filtering=no interface=ether3 internal-path-cost=10 learn=\
    auto path-cost=10 point-to-point=auto priority=0x80 pvid=1 restricted-role=no restricted-tcn=no unknown-multicast-flood=yes unknown-unicast-flood=yes
add auto-isolate=no bridge=bridge-lan broadcast-flood=yes disabled=no edge=auto frame-types=admit-all horizon=none hw=yes ingress-filtering=no interface=ether4 internal-path-cost=10 learn=\
    auto path-cost=10 point-to-point=auto priority=0x80 pvid=1 restricted-role=no restricted-tcn=no unknown-multicast-flood=yes unknown-unicast-flood=yes
add auto-isolate=no bridge=bridge-lan broadcast-flood=yes disabled=no edge=auto frame-types=admit-all horizon=none hw=yes ingress-filtering=no interface=ether5 internal-path-cost=10 learn=\
    auto path-cost=10 point-to-point=auto priority=0x80 pvid=1 restricted-role=no restricted-tcn=no unknown-multicast-flood=yes unknown-unicast-flood=yes
/interface bridge settings
set allow-fast-path=yes use-ip-firewall=yes use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=no

Interface configuration (it is the same for all four):
set [ find default-name=ether2 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full arp=enabled arp-timeout=auto auto-negotiation=yes bandwidth=unlimited/unlimited \
    disabled=no full-duplex=yes l2mtu=1592 loop-protect=default loop-protect-disable-time=5m loop-protect-send-interval=5s mac-address=64:D1:54:FF:37:8C mtu=1500 name=ether2 \
    orig-mac-address=64:D1:54:FF:37:8C rx-flow-control=off speed=100Mbps tx-flow-control=off

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question