Hello,
I’ve bought one piece of CRS312-4C+8XG-RM, it is placed behind Fortigate device. Switch is propagating VLAN10 and is doing that properly, I can ping devices in VLAN 10 behind Fortigate while I am connected through MikroTik and vice-versa. I can also ping the switch address and access it’s webgui while connected to Fortigate device. However, when I connect to any of the MikroTik ports, I am unable to ping or access the MikroTik address in VLAN10, but I can access any other device in this VLAN - only MikroTik isn’t responding properly.
I attach config for further investigation, would appreciate any help. This might be related to ARP settings, when I try to access 192.168.10.2 (MikroTik) and then check ARP table, my terminal prints (incomplete) instead of MikroTik’s MAC.
# may/13/2020 15:04:46 by RouterOS 6.44.4
# software id = 6GYD-UKG6
#
# model = CRS312-4C+8XG
# serial number = AE060A7A168B
/interface bridge
add name=fortigate-bridge vlan-filtering=yes
/interface vlan
add interface=ether1 name=vlan10-access vlan-id=10
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge=fortigate-bridge interface=ether1
add bridge=fortigate-bridge interface=ether2 pvid=10
add bridge=fortigate-bridge interface=ether3 pvid=10
add bridge=fortigate-bridge interface=ether4 pvid=10
add bridge=fortigate-bridge interface=ether5 pvid=10
add bridge=fortigate-bridge interface=ether6 pvid=10
add bridge=fortigate-bridge interface=ether7 pvid=10
add bridge=fortigate-bridge interface=ether8 pvid=10
add bridge=fortigate-bridge interface=combo1 pvid=10
add bridge=fortigate-bridge interface=combo2 pvid=11
add bridge=fortigate-bridge interface=combo3 pvid=11
add bridge=fortigate-bridge interface=combo4 pvid=11
/interface bridge vlan
add bridge=fortigate-bridge tagged=ether1 untagged=ether2,ether3,ether4,ether5,ether6,ether7,ether8,combo1,combo2,combo3,combo4 vlan-ids=10
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether9 network=192.168.88.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=vlan10-access
/ip service
set www address=0.0.0.0/0
/system clock
set time-zone-name=Europe/Warsaw
/system routerboard settings
set boot-os=router-o