I have setup a hAP-AX2 on my existing network which is all Unifi kit. The hAP-AX2 trunk port plugs into one of my existing switches. So far so good and I am able to dedicate a port/ports on the existing switches to VLANs on the hAP-AX2 router via the Unifi Network Controller. What I’m not able to do is ping/access from the MT VLANs to the USG VLANs and vice versa. Is there a way to make this possible? For my test case I am just trying to connect to an existing network printer from a PC I now have running out of the MT router.
If it’s easier, I have a spare port on the hAP-AX2 and the USG has a spare WAN2/LAN2 port that I could use to connect them directly to each other rather than via a Switch.
What I am thinking of doing is slowly replace the USG with the MT. The subnets are different because I thought the easiest way to do this was rebuild the network from scratch and using 10.0.0.x was less keystrokes.
I’ll reconfigure the MT so it sits on the same “master” subnet as the USG and setup the vlan to also have the same subnet. If that works it’s going to save me a lot of time and I’ll need to rethink whether I want to rebuild from scratch. Thanks
The easiest way is to have the same VLANs or (some) subnets on the USG and MikroTik.
However, i am not sure if you mean virtual Lan with VLAN and not calling a subnet for VLAN.
By configuring different VLANs and/or subnets on the USG and MikroTik, it can be more problematic to migrate.
This is unless you want to redistribute or reconfigure ip ranges etc.
Make a step by step strategy for how you plan to migrate.
Be consise and illustrate how you have your VLANs and subnet distributed and how you want to maintain or establish communication.
Example for migration:
VLAN 2. MikroTik has 192.168.2.2 , USG has 192.168.2.1
VLAN 3. MikroTik has 192.168.3.2 , USG has 192.168.3.1
etc…
Configure DHCP on the MikroTik and disable it on the USG when migrating a VLAN.
Switches have VLANs configured and clients have access ports in the required VLANs.
This way migrating is transparent and clients do not have to notice anything.
I think I should have just asked for advice on how to substitute mu USG for my MT rather than bits and pieces of what I thought made sense. If keeping the same VLAN IDs and IP ranges as what I have now is the easiest way, then I can do that quite easily.
Configure DHCP on the MikroTik and disable it on the USG when migrating a VLAN
This makes sense.
My current VLANs and their subnets are as follows, once I know how to set the IP range gateway IP, I’ll mirror them on the MT. I assume the VLAN name doesn’t matter much, it’s the VLAN ID that needs to be consistent across both.
VLAN 1, USG IP: 10.10.0.1 MT IP: 10.10.0.5 (*See below)
VLAN 110, USG IP: 10.10.1.1 MT IP: 10.10.1.5
VLAN 120, USG IP: 10.10.2.1 MT IP: 10.10.2.5
VLAN 130, USG IP: 10.10.3.1 MT IP: 10.10.3.5
VLAN 140, USG IP: 10.10.4.1 MT IP: 10.10.4.5
VLAN 150, USG IP: 10.10.5.1 MT IP: 10.10.5.5
*The USG uses untagged VLAN 1 for it’s default VLAN. This is where the router, switches and APs sit. I’m guessing I need to follow this on the MT and have VLAN 1 untagged? And have it configured as untagged on my MT trunk port? Or is there a better way to do this?>
EDIT: I sorted this bit out, What’s the best way to ensure the MT broadcasts a x.x.x.2 another IP (2 is used by a DNS at the moment) as the Gateway IP? Would it be assigning VLAN in MT a statis IP like this? If not, what’s the way to do it? With the USG I had to disable the DHCP but also change the VLAN Gateway address to the MT as well (10.10.5.5) and it all worked.
So the last thing I need to work out if how to manage with the USG VLAN1, which is the Base/Mgmt VLAN that has the router, switches, APs and in my network, all my servers, PiHole DNS etc.
