O switch 25G/100G mais acessivel do mercado. 16 portas SFP28 25G + 2 uplinks QSFP28 100G em 1U com RouterOS v7, dual PSU hot-swap e 4 fans hot-swap - tudo por US$ 1.595.
O Que Vem na Caixa
- 1x CRS518-16XS-2XQ-RM
- 2x PSU AC hot-swap (dual redundante)
- 4x Fans hot-swap pre-instaladas
- 1x Kit de rack 19" (trilhos e parafusos)
- 2x Cabos de forca AC
Especificacoes Tecnicas
| Especificacao | CRS518-16XS-2XQ-RM |
|---|---|
| Switch Chip | Marvell Prestera Aldrin2 98DX8525 |
| CPU | QCA9531 650 MHz, 1 core MIPSBE |
| Memoria RAM | 64 MB DDR2 |
| Armazenamento | 16 MB FLASH |
| Sistema Operacional | MikroTik RouterOS v7 (License Level 6) |
| Portas QSFP28 | 2x QSFP28 (100G / 40G / 4x 25G / 4x 10G) |
| Portas SFP28 | 16x SFP28 (25G / 10G / 1G) |
| Porta Ethernet de Gerencia | 1x 10/100 Mbps |
| USB | 1x USB Type-A |
| Console | RJ45 serial |
| Capacidade de Switching | 1.2 Tbps (1.200 Gbps) |
| Forwarding Rate | 600 Mpps (pacotes 64B) |
| Fonte de Alimentacao | Dual PSU AC HOT-SWAP (100-240V / 47-63 Hz) |
| Refrigeracao | 4x Fans HOT-SWAP |
| Consumo Maximo | 95W (45W sem modulos transceivers) |
| Dimensoes | Rackmount 1U (19") |
| Temperatura de Operacao | -40 C a +70 C |
| Certificacoes | CE, EAC, RoHS, FCC |
| Acesso Padrao | IP: 192.168.88.1, usuario: admin, sem senha |
| Preco Oficial MikroTik | US$ 1.595 |
Hardware classe data center em 1U. Dual PSU AC hot-swap, 4 fans hot-swap e operacao de -40 C a +70 C tornam o CRS518 adequado para sites com requisitos de alta disponibilidade. Com RouterOS v7 L6, voce tem L2/L3 completo, BGP, OSPF, MPLS, VXLAN e hardware offloading via switch chip.
Voltagens
| Tipo de Entrada | CRS518-16XS-2XQ-RM |
|---|---|
| Fonte AC Principal | 100-240V AC, 47-63 Hz (hot-swap) |
| Fonte AC Redundante | 100-240V AC, 47-63 Hz (hot-swap) |
| Consumo Tipico (sem modulos) | 45W |
| Consumo Maximo (todos modulos) | 95W |
| Redundancia | Dupla fonte ativa (1+1 hot-swap) |
Diagrama de Bloco
Benchmarks Oficiais
Dados oficiais de testes em laboratorio da MikroTik. Capacidade de switching teorica: 1.2 Tbps (1.200 Gbps). Forwarding rate: 600 Mpps em pacotes de 64 bytes. Fonte: mikrotik.com
Non-blocking Layer 2 Throughput
| Tamanho do Pacote | kpps | Mbps |
|---|---|---|
| 1518 Bytes | 48,773 | 592.296 |
| 512 Bytes | 141,001 | 577.540 |
| 64 Bytes | 600,000 | 307.200 |
Throughput unidirecional Layer 2 non-blocking. Fonte: mikrotik.com
Throughput Visual (Layer 2 - unidirecional)
Escala: 0 - 600.000 Mbps (600 Gbps unidirecional)
L2 Throughput 1518B
592.296 Mbps
L2 Throughput 512B
577.540 Mbps
L2 Throughput 64B
307.200 Mbps
Forwarding Rate 64B
600.000 kpps
1.2 Tbps com hardware offloading. O switch chip Marvell Aldrin2 98DX8525 trata bridging, VLAN e operacoes L3 em hardware, liberando o CPU para tarefas de controle (BGP, OSPF, RouterOS). Wire-speed em 1518 e 512 bytes e 600 Mpps em 64 bytes fazem do CRS518 um agregador real de 25G/100G.
Sugestao de Aplicacao
Core de Data Center Medio/Grande
Alta densidade 25G para servidores e storage, com 2 uplinks 100G para o spine. Dual PSU hot-swap e 4 fans hot-swap atendem requisitos de alta disponibilidade em racks de producao.
Agregador Principal de ISP
Conectar OLTs e CMTS via uplinks 25G dedicados, agregando ate 16 pontos de alta densidade. Os 2x 100G QSFP28 sobem para o backbone do provedor ou para o CCR2216-1G-12XS-2XQ como core L3.
Enterprise com Server Farm 25G
Infraestrutura corporativa com servidores 25G (hypervisors, storage NVMe-oF, HCI) e backbone interno 100G entre predios ou data centers locais. Ideal para migracao de 10G para 25G sem trocar toda a planta.
Backhaul Metropolitano 100G
Interconexao 100G entre data centers ou POPs regionais via QSFP28 de longo alcance (DWDM/CWDM), com 16 portas 25G locais para distribuir para PEs, edge routers ou CDNs de borda.
Configuracao e Integracao
1. Configuracao Basica (RouterOS v7)
# Acesso padrao (via porta Ethernet de gerencia)
# IP: 192.168.88.1 / usuario: admin / senha: vazia
#
# Apos primeiro login, definir identidade e credenciais
/system identity set name=CRS518-CORE01
# Criar usuario administrativo e remover o default sem senha
/user add name=netops password="SENHA_FORTE_AQUI" group=full
/user set admin password="SENHA_FORTE_AQUI"
# Timezone
/system clock set time-zone-name=America/Fortaleza
# NTP
/system ntp client set enabled=yes
/system ntp client servers
add address=a.ntp.br
add address=b.ntp.br
2. Bridge com VLAN Filtering + Hardware Offloading
# Bridge principal para todas as portas SFP28 e QSFP28
# vlan-filtering=yes ativa filtro 802.1Q; hw=yes usa o switch chip Aldrin2
/interface bridge
add name=bridge-core vlan-filtering=no protocol-mode=rstp
# Adicionar as 16 portas SFP28 25G ao bridge (hw offload ativo)
/interface bridge port
add bridge=bridge-core interface=sfp-sfpplus1 hw=yes
add bridge=bridge-core interface=sfp-sfpplus2 hw=yes
add bridge=bridge-core interface=sfp-sfpplus3 hw=yes
add bridge=bridge-core interface=sfp-sfpplus4 hw=yes
add bridge=bridge-core interface=sfp-sfpplus5 hw=yes
add bridge=bridge-core interface=sfp-sfpplus6 hw=yes
add bridge=bridge-core interface=sfp-sfpplus7 hw=yes
add bridge=bridge-core interface=sfp-sfpplus8 hw=yes
add bridge=bridge-core interface=sfp-sfpplus9 hw=yes
add bridge=bridge-core interface=sfp-sfpplus10 hw=yes
add bridge=bridge-core interface=sfp-sfpplus11 hw=yes
add bridge=bridge-core interface=sfp-sfpplus12 hw=yes
add bridge=bridge-core interface=sfp-sfpplus13 hw=yes
add bridge=bridge-core interface=sfp-sfpplus14 hw=yes
add bridge=bridge-core interface=sfp-sfpplus15 hw=yes
add bridge=bridge-core interface=sfp-sfpplus16 hw=yes
# Adicionar as 2 portas QSFP28 100G ao bridge
add bridge=bridge-core interface=qsfpplus1-1 hw=yes
add bridge=bridge-core interface=qsfpplus2-1 hw=yes
# Ativar VLAN filtering (apos configurar as VLANs abaixo)
/interface bridge set bridge-core vlan-filtering=yes
3. VLANs (tagged/untagged por porta)
# Mapeamento tipico de agregador:
# VLAN 10 = Gerencia (management)
# VLAN 20 = Servidores 25G
# VLAN 30 = Storage 25G (NVMe-oF)
# VLAN 100 = Uplink 100G para o core (trunk)
/interface bridge vlan
add bridge=bridge-core vlan-ids=10 tagged=bridge-core,qsfpplus1-1,qsfpplus2-1
add bridge=bridge-core vlan-ids=20 tagged=bridge-core,qsfpplus1-1,qsfpplus2-1,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4
add bridge=bridge-core vlan-ids=30 tagged=bridge-core,qsfpplus1-1,qsfpplus2-1,sfp-sfpplus5,sfp-sfpplus6,sfp-sfpplus7,sfp-sfpplus8
add bridge=bridge-core vlan-ids=100 tagged=bridge-core,qsfpplus1-1,qsfpplus2-1
# Definir PVID (VLAN nativa) em portas de acesso, se necessario
/interface bridge port
set [find interface=sfp-sfpplus9] pvid=20 frame-types=admit-only-untagged-and-priority-tagged
set [find interface=sfp-sfpplus10] pvid=20 frame-types=admit-only-untagged-and-priority-tagged
# Interface VLAN para gerencia L3 local
/interface vlan add name=vlan10-mgmt interface=bridge-core vlan-id=10
4. IP, Gateway e DNS
# Endereco IP na VLAN de gerencia
/ip address add address=10.0.10.2/24 interface=vlan10-mgmt
# Gateway e rota default (ex.: upstream no 10.0.10.1)
/ip route add dst-address=0.0.0.0/0 gateway=10.0.10.1
# Servidores DNS
/ip dns set servers=1.1.1.1,8.8.8.8 allow-remote-requests=no
# Verificacao
/ip address print
/ip route print
/ping 1.1.1.1 count=4
5. Firewall Input (proteger o proprio CRS518)
# Regras minimas de protecao do plano de controle
/ip firewall filter
add chain=input action=accept connection-state=established,related comment="Estabelecidas"
add chain=input action=accept src-address-list=mgmt-allow comment="Rede NOC / gerencia"
add chain=input action=accept protocol=icmp limit=50/5s,2:packet comment="ICMP controlado"
add chain=input action=drop comment="Drop all"
# Lista de redes autorizadas a acessar o switch
/ip firewall address-list
add list=mgmt-allow address=10.0.10.0/24 comment="VLAN mgmt"
add list=mgmt-allow address=10.0.20.0/24 comment="NOC"
6. Switch Chip - Hardware Offloading
# Verificar status de hardware offload
/interface bridge port print detail where hw=yes
# Cada linha deve indicar hw-offload=yes
# Caso alguma porta apareca hw-offload=no, revisar:
# - MTU consistente
# - VLAN filtering coerente
# - Recursos como bridge mirroring / L3 features
# Estatisticas do switch chip (hw counters)
/interface ethernet switch print
/interface ethernet switch port print stats
# Ativar L3 hardware offloading (disponivel no Aldrin2)
/interface ethernet switch
set [find] l3-hw-offloading=yes
# Ver tabela de rotas offloadadas
/ip route print where hw-offloaded=yes
7. Break-out QSFP28 100G -> 4x SFP28 25G (ampliar para ate 24 portas 25G)
# Cada QSFP28 pode ser quebrado em 4x 25G usando cabo AOC / DAC breakout
# Com os 2 QSFP28 em breakout 4x25G + 16 SFP28, voce tem 24x 25G total
#
# Configuracao da interface QSFP28 em modo breakout (fan-out)
/interface ethernet
set [find default-name=qsfpplus1-1] split-mode=4x-25g
set [find default-name=qsfpplus2-1] split-mode=4x-25g
# Apos reboot, as portas aparecem como:
# qsfpplus1-1, qsfpplus1-2, qsfpplus1-3, qsfpplus1-4 (4x 25G da QSFP28 1)
# qsfpplus2-1, qsfpplus2-2, qsfpplus2-3, qsfpplus2-4 (4x 25G da QSFP28 2)
# Adicionar ao bridge como qualquer outra SFP28
/interface bridge port
add bridge=bridge-core interface=qsfpplus1-2 hw=yes
add bridge=bridge-core interface=qsfpplus1-3 hw=yes
add bridge=bridge-core interface=qsfpplus1-4 hw=yes
add bridge=bridge-core interface=qsfpplus2-2 hw=yes
add bridge=bridge-core interface=qsfpplus2-3 hw=yes
add bridge=bridge-core interface=qsfpplus2-4 hw=yes
# Alternativa: 40G (breakout 4x10G) para portas SFP+ legadas
# set [find default-name=qsfpplus1-1] split-mode=4x-10g
8. LACP / MLAG nas QSFP28 100G (uplink redundante 200G)
# LACP agregando as 2x QSFP28 100G para formar 200G logicos
/interface bonding
add name=bond-uplink-200g slaves=qsfpplus1-1,qsfpplus2-1 \
mode=802.3ad transmit-hash-policy=layer-3-and-4 \
lacp-rate=1sec min-links=1
# Substituir as QSFP28 individuais pelo bond no bridge
/interface bridge port
remove [find interface=qsfpplus1-1]
remove [find interface=qsfpplus2-1]
add bridge=bridge-core interface=bond-uplink-200g hw=yes
# Atualizar VLANs para taggear no bond
/interface bridge vlan
set [find vlan-ids=10] tagged=bridge-core,bond-uplink-200g
set [find vlan-ids=20] tagged=bridge-core,bond-uplink-200g,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4
set [find vlan-ids=30] tagged=bridge-core,bond-uplink-200g,sfp-sfpplus5,sfp-sfpplus6,sfp-sfpplus7,sfp-sfpplus8
set [find vlan-ids=100] tagged=bridge-core,bond-uplink-200g
# Para MLAG real entre dois CRS518, use MSTP + peer-link dedicado
# e divida clientes em LACPs que terminam em switches diferentes
9. Seguranca L2 (RSTP, storm-control, BPDU guard)
# Rapid Spanning Tree no bridge (ja setado no passo 2)
/interface bridge set bridge-core protocol-mode=rstp priority=0x4000
# Storm control (limite de broadcast/multicast/unknown-unicast)
/interface ethernet switch port
set [find name=sfp-sfpplus1] \
broadcast-flood-limit=1000pps \
multicast-flood-limit=1000pps \
unknown-unicast-flood-limit=1000pps
# Aplicar a multiplas portas de uma vez
:foreach i in=[/interface ethernet switch port find where name~"sfp-sfpplus"] do={
/interface ethernet switch port set $i \
broadcast-flood-limit=1000pps \
multicast-flood-limit=1000pps \
unknown-unicast-flood-limit=1000pps
}
# BPDU Guard em portas de acesso (desabilita porta se receber BPDU)
/interface bridge port
set [find interface=sfp-sfpplus9] bpdu-guard=yes edge=yes
set [find interface=sfp-sfpplus10] bpdu-guard=yes edge=yes
# Port isolation (prevenir comunicacao L2 entre clientes no mesmo VLAN)
# set interface=sfp-sfpplus11 horizon=10RouterOS v7 L6 com hardware offload. Todas as funcoes L2 (bridge, VLAN, LACP, RSTP, storm-control) e uma parte das funcoes L3 (routing, VRF) sao aceleradas pelo switch chip Aldrin2. O CPU QCA9531 fica responsavel por BGP, OSPF, gestao, logs e plano de controle - mantendo o data plane a 1.2 Tbps sem impacto.