Enable Loopback Protection on Router Ethernet Ports
As far as i can tell, every router that is of a higher class than a ER605, so thats ER7206 v2, the other ER7xxx models and the ER8411 all utilise a real, seperate switch chip for their RJ45 ports and not a controller embedded in the CPU.
Since these routers can control PVIDs and port tagging this would imply that it is at least a somewhat capable switch controller chip.
I propose enabling some form of Loopback protection for these routers to protect their RJ45 ports from direct loops. I have observed over a number of models (from the 7206 v1 , the 7206v2 and the 8411) that they are highly susceptible to just....dying entirely if a loop occours on their ports even briefly, requiring a physical power cycle to correct.
One scenario this would help with is one of my own.
I have a Hitrons Chita cable modem from my ISP, operating in GRE mode. Effectively each of its 4 ethernet ports is directly switched through the modem back to the ISP datacentre where the virtual gateway resides, giving me 5 useable IP addresses. In this mode the modem is effectively a switch-bridge to the ISP data centre and it does not directly have anything to do with my internet connection, its really just a data pipe.
To utilise my multiple static IPs, i have multiple links from this modem to different WAN ports on my router, each configured with one of my public IPs - all works good.....UNTIL....
If for any reason i need to factory reset my router, i have to physically disconnect these links as upon reset as they default to LAN ports, and because they effectively terminate on the 4-port switch of my modem, a loop is formed, the router dies, and the controller cannot re-adopt it. I have to unplug the links manually until adoption and configuration is complete, when the ports return to WAN function with seperate MACs, and the loop cannot form.
My current very janky but effective solution to this is to have a "middle man" switch between the modem and my router. It has 4 links to the modem, each on a different untagged vlan. the 4 links to my router have a different, untagged vlan per port and a tagged vlan per port matching the modem-facing ports. Therefore, when the router is reset, its ports reach an untagged vlan on the middle-man switch that only exist on that one port and goes nowhere, so the loop cannot form. When the controller finishes configuration, the ports return to WAN, and are set with tags to match what i need for them to pass through the switch to the modem.
Sure, this works, but its janky as heck and could be completely mitigated if the router ports just had loopback enabled!