Ethernet Interface Configuration
Ethernet Interface Configuration
Section titled “Ethernet Interface Configuration”TL;DR (Quick Start)
Section titled “TL;DR (Quick Start)”For the impatient: check interface status, force speed if needed, verify link.
# Check interface status and negotiated speed/interface ethernet monitor ether1 once
# Force 100Mbps (both ends must match)/interface ethernet set ether1 auto-negotiation=no speed=100M-baseT-full
# Force 1G SFP (for SFP+ port running 1G module)/interface ethernet set sfp-sfpplus1 auto-negotiation=no speed=1G-baseX
# View all interfaces and statistics/interface ethernet print statsOverview
Section titled “Overview”MikroTik RouterOS supports a comprehensive range of Ethernet interfaces from 10Mbps copper to 400Gbps fiber optic connections. Ethernet interfaces form the physical foundation of your network, and proper configuration ensures optimal performance, reliable connectivity, and effective troubleshooting.
This guide covers:
- Interface types: RJ45 copper, SFP/SFP+/SFP28 fiber, QSFP+ high-speed ports
- Auto-negotiation: How RouterOS establishes link speed and duplex
- Monitoring: Real-time diagnostics including SFP DDM (Digital Diagnostic Monitoring)
- Troubleshooting: Cable testing and common issues
The following diagram shows common Ethernet interface types on a MikroTik device:
@startumlskinparam backgroundColor whiteskinparam componentStyle rectangle
node "MikroTik Router" as R1 { [ether1-ether5\nRJ45 Copper\n10/100/1000M] as ETH [sfp1\nSFP Cage\n1G Fiber/Copper] as SFP [sfp-sfpplus1\nSFP+ Cage\n1G/10G] as SFPP}
cloud "Network" as NET
ETH --> NET : Twisted Pair\n(Cat5e/6)SFP --> NET : Fiber or\nRJ45 ModuleSFPP --> NET : Fiber/DAC\nHigh Speed
note right of ETH Auto-negotiation selects best common speedend note
@endumlPrerequisites
Section titled “Prerequisites”- Access to a RouterOS device (v7.12+ recommended for new link mode syntax)
- Physical connection to the interface you want to configure
- For SFP interfaces: A compatible transceiver module
Understanding Auto-Negotiation
Section titled “Understanding Auto-Negotiation”Auto-negotiation is enabled by default and handles most configurations automatically. However, behavior differs between copper and fiber interfaces.
Copper (RJ45) Interfaces
Section titled “Copper (RJ45) Interfaces”On twisted-pair connections, devices exchange capability advertisements and select the highest common speed and duplex mode.
Community Tip: Gigabit Ethernet requires all 4 cable pairs. If your gigabit link negotiates down to 100Mbps, check for non-gigabit PoE injectors in the path - they pass auto-negotiation (which uses 2 pairs) but fail actual gigabit traffic.
SFP/QSFP Interfaces
Section titled “SFP/QSFP Interfaces”On fiber/DAC connections, there is no capability exchange. Each side attempts its highest supported mode, and both ends must advertise the same highest mode for the link to establish.
Example failure scenario:
- Device A advertises: 25G-baseCR, 10G-baseCR
- Device B advertises: 10G-baseCR only
- Result: No link (Device A tries 25G, Device B can’t match)
Solution: Configure both ends with matching highest advertise mode.
Configuration Steps
Section titled “Configuration Steps”Step 1: View Interface Status
Section titled “Step 1: View Interface Status”Check current interface configuration and link status.
/interface ethernet printExpected Output:
Flags: R - RUNNINGColumns: NAME, MTU, MAC-ADDRESS, ARP# NAME MTU MAC-ADDRESS ARP0 R ether1 1500 AA:BB:CC:DD:EE:00 enabled1 R ether2 1500 AA:BB:CC:DD:EE:01 enabledFor detailed real-time monitoring including negotiated speed:
/interface ethernet monitor ether1 onceExpected Output:
name: ether1 status: link-ok rate: 1Gbpsfull-duplex: yes supported: 10M-baseT-half,10M-baseT-full,100M-baseT-half, 100M-baseT-full,1G-baseT-half,1G-baseT-fulladvertising: 10M-baseT-half,10M-baseT-full,100M-baseT-half, 100M-baseT-full,1G-baseT-half,1G-baseT-fullCommunity Tip: The
speedproperty in print/set is only used when auto-negotiation is disabled. Always usemonitorto see the actual negotiated rate.
Step 2: Force a Specific Speed (When Required)
Section titled “Step 2: Force a Specific Speed (When Required)”In some cases, you may need to force a specific link speed - typically when connecting to legacy equipment that doesn’t auto-negotiate properly.
Warning: Forcing speed requires matching settings on both ends. Mismatched duplex causes severe packet loss.
For 100Mbps full-duplex:
/interface ethernet set ether1 auto-negotiation=no speed=100M-baseT-fullFor 1Gbps on SFP interface:
/interface ethernet set sfp1 auto-negotiation=no speed=1G-baseXCommon Mistake: Some MikroTik devices (hEX, hAP ac2, RB750Gr3) require auto-negotiation enabled for gigabit links. If forcing 1G doesn’t work, leave auto-negotiation enabled.
Step 3: Configure SFP+ at Lower Speed
Section titled “Step 3: Configure SFP+ at Lower Speed”SFP+ ports often support multiple speeds. To use a 1G SFP module in an SFP+ cage:
/interface ethernet set sfp-sfpplus1 auto-negotiation=no speed=1G-baseXFor 2.5G operation (RouterOS 7.3+):
/interface ethernet set sfp-sfpplus1 auto-negotiation=no speed=2.5G-baseXStep 4: Configure FEC for High-Speed Links
Section titled “Step 4: Configure FEC for High-Speed Links”Forward Error Correction (FEC) is required for some high-speed links (50G+) and recommended for 25G connections between CRS switches.
/interface ethernet set sfp28-1 fec-mode=fec91FEC Mode Reference:
| Speed | Supported FEC | Notes |
|---|---|---|
| 25G | fec74, fec91 | Recommended for CRS3xx/5xx links |
| 40G | fec74 | Optional |
| 50G+ | fec91 | Required |
Community Tip: Some optical modules rely on FEC functionality in the MAC. If you have unexplained packet loss on 25G+ links, enable FEC even if not strictly required.
Step 5: Handle Module Auto-Initialization Failures
Section titled “Step 5: Handle Module Auto-Initialization Failures”If you see this log message:
module auto-initialization failed, try forced-modeThe SFP module has a corrupted or unrecognized EEPROM. Try forcing the speed manually:
For DAC cables:
/interface ethernet set sfp-sfpplus1 auto-negotiation=no speed=10G-baseCRFor optical modules:
/interface ethernet set sfp-sfpplus1 auto-negotiation=no speed=10G-baseSR-LRStep 6: Configure Combo Ports
Section titled “Step 6: Configure Combo Ports”Combo ports have both RJ45 and SFP cages but only one can be active.
# Auto mode - first connected port wins/interface ethernet set combo1 combo-mode=auto
# Force copper (RJ45)/interface ethernet set combo1 combo-mode=copper
# Force SFP/interface ethernet set combo1 combo-mode=sfpCommon Mistake: Combo ports cannot use both media types simultaneously. “Combo is one or the other, not both.”
Verification
Section titled “Verification”Check 1: Verify Link Status
Section titled “Check 1: Verify Link Status”Confirm the interface is up and running at expected speed.
/interface ethernet monitor ether1 onceExpected Output:
status: link-ok rate: 1Gbpsfull-duplex: yesCheck 2: Verify SFP Module Detection
Section titled “Check 2: Verify SFP Module Detection”For SFP interfaces, verify the transceiver is recognized.
/interface ethernet monitor sfp-sfpplus1 onceExpected Output:
sfp-module-present: yes sfp-rx-loss: no sfp-tx-fault: no sfp-type: SFP/SFP+/SFP28/SFP56 sfp-vendor-name: Mikrotik sfp-temperature: 33C sfp-tx-power: -5.8dBm sfp-rx-power: -5.2dBmCommunity Tip: Third-party SFP modules showing “sfp-type: (unknown)” often work fine. If the link is up and traffic flows, the module is functional.
Check 3: Run Cable Test (Copper Only)
Section titled “Check 3: Run Cable Test (Copper Only)”Diagnose cable problems when link won’t establish. The interface must be in “no-link” state.
/interface ethernet cable-test ether2Expected Output:
name: ether2 status: no-linkcable-pairs: open:4,open:4,open:4,open:4Interpreting Results:
open:X- Cable disconnected or broken at X metersshort:X- Cable pairs shorted at X meters- Four values represent the four twisted pairs
Monitoring and Statistics
Section titled “Monitoring and Statistics”View Interface Statistics
Section titled “View Interface Statistics”Check traffic counters and error rates:
/interface ethernet print statsKey Statistics to Monitor:
| Counter | Meaning | Action if High |
|---|---|---|
rx-fcs-error | Checksum errors | Check cable/module quality |
rx-align-error | Alignment errors | Check duplex match |
rx-overflow | Buffer overflow | Check for congestion |
tx-collision | Collisions | Check for duplex mismatch |
Reset Statistics
Section titled “Reset Statistics”Clear counters for clean troubleshooting baseline:
/interface ethernet reset-counters ether1Common Mistakes
Section titled “Common Mistakes”-
Mismatched duplex settings - If one end is full-duplex and the other half-duplex, you’ll see massive packet loss. Always ensure both ends match.
-
Gigabit over 2-pair cable - Gigabit requires all 4 pairs. Cat3 or damaged Cat5 with only 2 working pairs will negotiate 100Mbps (or fail intermittently at gigabit).
-
Non-gigabit PoE injectors - These pass auto-negotiation (2 pairs) but break gigabit (4 pairs). A common hidden cause of speed issues.
-
Forcing 1G on incompatible hardware - Some devices (hEX, hAP ac2) won’t link at forced 1G. Leave auto-negotiation enabled.
-
FEC mismatch - Both ends must use the same FEC mode. Auto vs disabled may work; fec74 vs fec91 will not.
-
Mixing bridge and switch VLANs - Don’t configure bridge VLANs and switch chip VLANs simultaneously for the same task.
-
Duplicate MACs after restore - Using backup/restore on different hardware copies MAC addresses. Use
export compactinstead, or run/interface ethernet reset-mac-address.
Community Tips
Section titled “Community Tips”Hardware Offload and VLANs: Enabling
vlan-filtering=yeson a bridge disables hardware offload except on CRS3xx series. For other devices, configure VLANs through the switch chip directly to maintain wire-speed performance. Users report CPU dropping from high load to 0-3% after switching approaches.
Link Flapping on RouterOS 7.x: Some users report Ethernet links going down/up repeatedly on v7.x that didn’t occur on v6.49. Workarounds include placing a switch between WAN and router, or generating supout.rif during failures for MikroTik support.
RB5009 Multi-Chip VLAN: Traffic between switch chips must travel via CPU ports. Include the CPU port in switch VLAN configuration, or “sacrifice two switch ports to link them together externally” for wire-speed inter-chip switching.
SFP Cold Start Issues: Some SFP+ ports won’t establish link after cold restart, showing “no link, not running, slave” until manually disabled/enabled. Script a workaround if this affects your deployment.
Troubleshooting
Section titled “Troubleshooting”Link Won’t Establish
Section titled “Link Won’t Establish”- Check physical connection - Verify cable is seated, SFP module clicked in
- Check auto-negotiation - Try matching settings on both ends
- For SFP: Check
sfp-module-present,sfp-rx-loss,sfp-tx-fault - For high-speed: Verify FEC mode compatibility
- Run cable-test on copper interfaces
Speed Lower Than Expected
Section titled “Speed Lower Than Expected”- Check
link-partner-advertisingfor remote capabilities - Verify cable category (Cat5e minimum for gigabit)
- Check for non-gigabit devices in the path (PoE injectors!)
- Verify SFP module specifications match expected speed
Intermittent Connectivity
Section titled “Intermittent Connectivity”- Check error counters:
rx-fcs-error,rx-align-error - Monitor SFP temperature (overheating causes issues)
- Check cable quality with
cable-test - Look for
rx-overflowindicating congestion
SFP Module Not Recognized
Section titled “SFP Module Not Recognized”- Check
eeprom-checksum- “bad” means corrupted module EEPROM - Try forced-mode configuration
- Verify module compatibility with your device
- Reseat the module
Related Topics
Section titled “Related Topics”Layer 2 Configurations
Section titled “Layer 2 Configurations”- Bridge Configuration - combine Ethernet ports
- Bonding/LACP - aggregate multiple links
- VLAN Configuration - tagged VLANs on Ethernet
IP Configuration
Section titled “IP Configuration”- IP Address Configuration - assign IPs to interfaces
- DHCP Server - DHCP on Ethernet interfaces
Related Topics
Section titled “Related Topics”- Interfaces Overview - all interface types
- Switch Ports - hardware switching
Reference
Section titled “Reference”Command Reference
Section titled “Command Reference”| Command | Description |
|---|---|
/interface ethernet print | List all Ethernet interfaces |
/interface ethernet print detail | Show full configuration including MAC |
/interface ethernet print stats | Display traffic statistics |
/interface ethernet monitor | Real-time link status and SFP DDM |
/interface ethernet set | Configure interface settings |
/interface ethernet cable-test | Diagnose cable problems (when no-link) |
/interface ethernet reset-counters | Clear interface statistics |
/interface ethernet reset-mac-address | Restore factory MAC address |
/interface ethernet blink | Flash interface LEDs for identification |
Quick Reference
Section titled “Quick Reference”| Task | Command |
|---|---|
| View all interfaces | /interface ethernet print |
| Monitor link status | /interface ethernet monitor ether1 |
| Force 100M | set ether1 auto-negotiation=no speed=100M-baseT-full |
| Force 1G SFP | set sfp1 auto-negotiation=no speed=1G-baseX |
| Enable FEC | set sfp28-1 fec-mode=fec91 |
| Cable test | /interface ethernet cable-test ether1 |
| Reset counters | /interface ethernet reset-counters ether1 |
| Reset MAC | /interface ethernet reset-mac-address ether1 |
Summary
Section titled “Summary”Ethernet interface configuration in RouterOS:
- Auto-negotiation is enabled by default and handles most configurations
- Copper interfaces exchange capabilities; both ends select the best common speed
- SFP/QSFP interfaces require matching highest advertise mode on both ends
- Force speed only when required (legacy equipment, troubleshooting)
- FEC is required for 50G+ links and recommended for 25G
Key points:
- Use
/interface ethernet monitorto see actual negotiated speed (notprint) - Gigabit requires all 4 cable pairs - check for non-gigabit PoE injectors
- Some devices (hEX, hAP ac2) require auto-negotiation for gigabit links
- Match FEC mode on both ends of high-speed connections
- Use
cable-testto diagnose copper wiring issues - Third-party SFPs showing “unknown” type often work fine