General • VRF Routing bug? - rule execution is depending on GUI order

I'm just getting started with RouterOS and Mikrotik devices in general, so perhaps this is a configuration issue, but it seems like the routes in my VRF are executing in the order listed in the GUI, rather than preferring the entries in the VRF table.

I've set up identical subnets (192.168.0.0/24) using VRF, one VRF per VLAN, one VLAN per port, and I'm using NAT to give them all access to the "LAN" subnet (192.168.88.0/24).
This routing setup is working for VRFPort3 and VRFPort4 when configured as shown in this screenshot:
However, trying to ping an IP in 192.168.88.x results in "Destination Net Unreachable" when connected using VRFPort2 (vlan2) and VRFPort5 (vlan5). My current workaround is for each 192.168.88.0/24 route in the VRF, instead cut it into two /25 routes, 192.168.88.0/25 to %bridge and 192.168.88.128/25 to %bridge. Having to do this feels pretty buggy though? I also can't seem to find a way to manually re-order these routes in the GUI, either.

Currently using RouterOS 7.14.

Edit: The /32 entry is working for VRFPort2 (which is how I ended up figuring out the /25 workaround), but trying anything else in the 192.168.88.x for VRFPort2 results in that unreachable error.

Statistics: Posted by lukanite — Mon Mar 11, 2024 12:08 pm

---