DHCP - cannot connect a host in a vlan

RouterOS Beginner Basics
1

I am working with a CCR.
recently implemented a vlan network.
now i cannot make a host(host1) in server vlan to communicate with others. can ping to host1 from other hosts on same vlan and different vlans. cannot ping from host1 to other hosts on any vlan including the same vlan.
but host1 can communicate with hosts on the same physical network switch just fine.
host1 ip: 10.1.15.52

my config
[admin@MikroTik] > export

jan/02/1970 02:09:02 by RouterOS 6.24

software id =

/interface ethernet
set [ find default-name=ether8 ] disabled=yes l2mtu=1590 name=BCK
set [ find default-name=ether4 ] advertise=1000M-full disabled=yes l2mtu=1590 name=CF rx-flow-control=auto tx-flow-control=auto
set [ find default-name=ether9 ] l2mtu=1590 name=EXT
set [ find default-name=ether10 ] l2mtu=1590 name=EXT-LP
set [ find default-name=ether6 ] disabled=yes l2mtu=1590 name=LAN
set [ find default-name=ether7 ] disabled=yes l2mtu=1590 name=“LAN II”
set [ find default-name=ether2 ] l2mtu=1590 name=“WAN II”
set [ find default-name=ether3 ] comment=Internet l2mtu=1590
set [ find default-name=ether5 ] comment=“100mbp internet” l2mtu=1590
set [ find default-name=ether11 ] disabled=yes l2mtu=1590
set [ find default-name=ether12 ] disabled=yes l2mtu=1590
set [ find default-name=sfp1 ] disabled=yes l2mtu=1590
set [ find default-name=sfp2 ] disabled=yes l2mtu=1590
set [ find default-name=sfp3 ] disabled=yes l2mtu=1590
set [ find default-name=sfp4 ] disabled=yes l2mtu=1590
/interface bridge
add mtu=1500 name=EXT-BRR protocol-mode=none
/ip neighbor discovery
set ether3 comment=Internet
set ether5 comment=“100mbp internet”
/interface bonding
add mode=balance-xor name=vlantrunck slaves=ether11,ether12 transmit-hash-policy=layer-2-and-3
/interface vlan
add interface=vlantrunck name=EXECUTIVE130 vlan-id=130
add interface=vlantrunck name=IT120 vlan-id=120
add interface=vlantrunck name=SERVER110 vlan-id=110
add interface=vlantrunck name=STAFF140 vlan-id=140
add interface=vlantrunck name=VLAN99 vlan-id=99
add interface=vlantrunck name=WIFI150 vlan-id=150
/ip pool
add name=IT120_pool ranges=192.168.120.100-192.168.120.200
add name=EXECUTIVE130_pool ranges=192.168.130.100-192.168.130.200
add name=STAFF140_pool ranges=192.168.30.250-192.168.140.20
add name=WIFI150_pool ranges=192.168.150.10-192.168.150.150
/ip dhcp-server
add address-pool=IT120_pool disabled=no interface=IT120 name=IT120_DHCP
add address-pool=EXECUTIVE130_pool disabled=no interface=EXECUTIVE130 name=EXECUTIVE130_DHCP
add address-pool=STAFF140_pool disabled=no interface=STAFF140 name=STAFF140_DHCP
add address-pool=WIFI150_pool interface=WIFI150 name=WIFI150_DHCP
/port
set 0 name=serial0
set 1 name=serial1
/queue type
add kind=pcq name=pcq-down-exec pcq-classifier=dst-address pcq-rate=10M
add kind=pcq name=pcq-down-it pcq-classifier=dst-address pcq-rate=10M
add kind=pcq name=pcq-down-staff pcq-classifier=dst-address pcq-rate=512k
add kind=pcq name=pcq-up-exec pcq-classifier=src-address pcq-rate=8M
add kind=pcq name=pcq-up-it pcq-classifier=src-address pcq-rate=8M
add kind=pcq name=pcq-up-staff pcq-classifier=src-address pcq-rate=300k
add kind=pcq name=pcq-down-svrstaff pcq-classifier=dst-address pcq-rate=500k
add kind=pcq name=pcq-down-svr pcq-classifier=dst-address pcq-rate=10M
add kind=pcq name=pcq-up-svrstaff pcq-classifier=src-address pcq-rate=300k
add kind=pcq name=pcq-up-svr pcq-classifier=src-address pcq-rate=8M
/queue simple
add name=IT queue=pcq-up-it/pcq-down-it target=192.168.120.0/24
add name=Exective queue=pcq-up-exec/pcq-down-exec target=192.168.130.0/24
add name=staff queue=pcq-up-staff/pcq-down-staff target=192.168.140.0/24
add name=svrstaff queue=pcq-up-svrstaff/pcq-down-svrstaff target=10.1.7.0/24,10.1.15.0/24
add disabled=yes name=servers queue=pcq-up-svr/pcq-down-svr target=10.1.0.0/19
/interface bridge port
add bridge=EXT-BRR external-fdb=no interface=EXT point-to-point=no
add bridge=EXT-BRR external-fdb=no interface=EXT-LP point-to-point=no
/ip address
add address=192.168.88.1/24 comment=“default configuration” interface=ether1 network=192.168.88.0
add address=10.b.c.4/24 comment=EXT interface=EXT-BRR network=10.b.c.0
add address=192.168.100.100/24 comment=“100mbps connection” interface=ether5 network=192.168.100.0
add address=192.168.99.1/24 interface=VLAN99 network=192.168.99.0
add address=192.168.120.1/24 interface=IT120 network=192.168.120.0
add address=192.168.130.1/24 interface=EXECUTIVE130 network=192.168.130.0
add address=192.168.140.1/24 interface=STAFF140 network=192.168.140.0
add address=192.168.150.1/24 interface=WIFI150 network=192.168.150.0
add address=10.1.0.1/19 interface=SERVER110 network=10.1.0.0
/ip dhcp-server network
add address=192.168.120.0/24 dns-server=10.1.1.250,10.1.1.251 gateway=192.168.120.1
add address=192.168.130.0/24 dns-server=10.1.1.250,10.1.1.251 gateway=192.168.130.1
add address=192.168.140.0/24 dns-server=10.1.1.250,10.1.1.251 gateway=192.168.140.1
add address=192.168.150.0/24 dns-server=10.1.1.250,10.1.1.251 gateway=192.168.150.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip dns static
add address=10.b.c.10 name=ext-rt1-eth01.mydomain.com
add address=192.b.c.1 name=ext-rt1-eth02.mydomain.com
/ip firewall address-list
add address=10.b.c.0/24 comment=“EXT Subnets” list=ext
add address=10.b.c.0/24 list=ext
add address=10.b.c.0/24 list=ext
add address=10.b.c.0/24 list=ext
add address=10.b.c.55 list=ext
add address=10.d.c.0/24 list=ext
add address=10.d.c.100 list=ext
add address=10.d.c.0/24 list=ext
add address=10.d.e.2 list=ext
add address=10.b.c.0/24 comment=“EXT Subnets” list=ext
add address=10.1.0.0/19 comment=“Local Addresses” list=local-addr
add address=192.168.120.0/24 list=local-addr
add address=192.168.130.0/24 list=local-addr
add address=192.168.140.0/24 list=local-addr
/ip firewall mangle
add action=mark-routing chain=prerouting comment=“EXT Live Route” dst-address-list=ext new-routing-mark=ext src-address-list=local-addr
add action=mark-routing chain=prerouting comment=“EXT Live Route” dst-address=192.168.120.0/24 new-routing-mark=localnet src-address-list=local-addr
add action=mark-routing chain=prerouting comment=“EXT Live Route” dst-address=10.1.0.0/19 new-routing-mark=localnet-svr src-address-list=local-addr
add chain=prerouting routing-mark=ext
add chain=prerouting routing-mark=localnet
add chain=prerouting routing-mark=localnet-svr
/ip firewall nat
add action=masquerade chain=srcnat dst-address=10.1.0.25
add action=masquerade chain=srcnat comment=“EXT Network NAT” dst-address-list=ext out-interface=EXT-BRR src-address=10.1.0.0/19 to-addresses=10.b.c.0/24
add action=masquerade chain=srcnat comment=“EXT Network NAT” dst-address-list=ext out-interface=EXT-BRR src-address=192.168.140.0/24 to-addresses=10.b.c.0/24
add action=masquerade chain=srcnat comment=“EXT Network NAT” dst-address-list=ext out-interface=EXT-BRR src-address=192.168.130.0/24 to-addresses=10.b.c.0/24
add action=masquerade chain=srcnat comment=“EXT Network NAT” dst-address-list=ext out-interface=EXT-BRR src-address=192.168.120.0/24 to-addresses=10.b.c.0/24
add action=masquerade chain=srcnat comment=internet out-interface=ether5 to-addresses=192.168.100.2
/ip route
add comment=“EXT Routes” distance=1 gateway=10.b.c.10 routing-mark=ext
add distance=1 gateway=192.168.100.1
/system routerboard settings
set cpu-frequency=1200MHz memory-frequency=1066DDR
[admin@MikroTik] >
any help or clue appreciated.

2

insufficient data: with this info we can’t help you.

ex: what network ranges do you use? I see:
10.1.0/19
10.1.7/24
10.1.15/24

which interface?
any other hardware involved?
…
→ need more (precise) data

BTW: are you aware that 10. is a private range, not routed on internet? → “giving it away” won’t expose you

3

@sebastia network ranges are assigned to the vlans i am using. Which are
10.1.0.0/19
192.168.120.0/24
192.168.130.0/24
192.168.140.0/24
192.168.150.0/24

The blacked out ips in 10.a.b.x/x range belongs to an external network provided by another organisation. This network is used by several local organisations for sharing webservices through this network. So it is kind of locally public to a selected group of organisations who uses this netwrok.

10.1.15.52 and 10.1.7.xx are hosts in 10.1.0.0/19 network which is also used as a server network internally. I couldnt modify this network since lot of external serviced depends on these ips.



Sent from my SM-G965F using Tapatalk

4

So the network config on router is
add address=10.1.0.1/19 interface=SERVER110 network=10.1.0.0

meaning:
network is 10.1.0.0-10.1.31.255
with gateway 10.1.0.1

Any traffic to an ip within that range should go directly, outside through gateway.

What is the ip configuration on the 10.1.15.52?

5

Windows machine. Static.
10.1.15.52
mask: 255.255.224.0
gateway: 10.1.0.1
Dns: 10.1.1.50 (in the same network up and running)

Nothing specific noticed except for from other hosts i can ping the host1 (a server). But from host1 cannot ping to other hosts.

Sent from my SM-G965F using Tapatalk

6

That looks fine.
There are also no rules in “/ip firewall filter” so no ip filtering / firewall.

Must be on the hosts then: do you have local firewalls, which deny ping requests? Windows clients typically do that…