TL;DR: I created a vlan with its own subnetwork and I can’t connect to devices in it from non-vlan subnetwork.
Hi,
I just bought mikrotik and started setting it up. I managed to make connection to the outside internet work (my ISP uses PPPoE), and I connected my laptop and NAS, assigned it static IP 192.168.0.2 and everything worked.
Then I added 3 vlans with following ranges:
192.168.10.0-255-iot
192.168.20.0-255-guest
192.168.30.0-255-admin
and I re-assigned static IP to the NAS: 192.168.30.2. But now I can’t connect to it from my laptop which is on 192.168.0.143.
Here is my configuration: https://gist.github.com/racinmat/ef298f0a6e9e03f73af496596507f920
I enabled firewall and routing logs on router and tried to connect to http://192.168.30.2:5000/ from my laptop (which is the port where Synology web UI runs), but I didn’t see anything mentioning any of these 2 IP addresses in the logs.
I also disabled all deny rules and I added the following rule:
/ip firewall filter
add action=log chain=forward log=yes log-prefix=“all-traffic”
but I didn’t see anything in related to the 192.168.30.2 either.
I saw lots of requests to the other pages that my laptop was connecting to, in public internet.
Typically one posts there config here directly, nobody likes going to different websites in general, as there are risks…
Just use notepadd++ and edit out stuff, then paste here and use the code block above ( black square with white rectangular brackets )
No sense mixing apples and oranges… if you have introduced vlan, forget the bridge doing any dhcp and simply make it another vlan.
See below for changes
Also, where are the vlans going you have them on all ports or what.
**MISSING totally /**interface bridge vlan settings !!!
No vlans member of LAN interface list…
MISSING entire firewall rules ???