I have one hEX router that is connected to two isp routers, one in ether1(with ip 10.250.10.x/24) and the other in ether5(with ip 10.251.10.x/24). I have to forward this traffic and ips to a switch that is configured to receive vlan10,20 and 30 in port 1 of the switch and through ether4 of the router.
The hex should also give ip 10.252.10.x/24 in vlan30 with a DHCP server. All the ports are bridged (eth1 to eth5). I dont have to make it the links redundant or load balanced.
I have tried setting static ips for interfaces ether1 and ether5, and tagging the bridge, ether1 and ether4, the same for ether5. I could forward one ip(10.250.10.x) all the way to the switch with vlan 1 but not after configuring the vlans.
Your description is pretty confusing to be honest. Normally I’d say you just need to make the hEX a bridge that has ether1 as an access port to VLAN 10, ether5 as an access port to VLAN 20, and ether4 as a trunk where VLANs 10, 20, and 30 are all tagged, and you need to create an /interface vlan for VLAN 30 and attach an IP address and DHCP server to it (it is not possible to have a DHCP server without an own address). But in such a scenaro, there is no need to assign addresses from 10.250.10.0/24 and 10.251.10.0/24 to the hEX itself - there must be some other router connected to VLANs 10 and 20 somewhere beyond that other switch where these addresses live.
Concur, confusing explanation is an understatement… Need a least a detailed diagram to sort out context.
Impossible to define requirements…and thus OP should
a. identify all users/devices ( internal/externals and admin)
b. identify all traffic they require
I have configured a DHCP server that gives the ip 10.252.10.1/24 in R3.
After i connect a device to a port that i have vlan10 untagged in the switch it gets no ip, where i have vlan30 or 1 tagged it gets the vlan30 ip or the bridge ip.
Remove the two /interface vlan named vlan10 and vlan20, these are IP interfaces allowing the router part of the hEX itself to access those VLANs which according to your drawing is not necessary.
Under /interface bridge port, change the pvid for ether1 and ether5 to 10 and 20, respectively.
# NAME MTU ARP VLAN-ID INTERFACE
0 R vlan30 1500 enabled 30 LAN-Switch
I have tagged on vlan10 ether1(where i get the ip 10.250.x.x) and ether4(connection to switch). It is still not able to receive ip from the isp1 router.
Your descriptions are still confusing, what does “I have tagged on vlan10 ether1” mean? If R1 does not send and expect VLAN-tagged frames with VID 10, you need ether1 on the hEX to be an access port to VLAN 10; to do that, it is not enough to set pvid under /interface bridge port to 10 but you must also remove ether1 from the tagged list for vlan-ids=10 under /interface bridge vlan.
Impossible to define requirements…and thus OP should
a. identify all users/devices ( internal/externals and admin)
b. identify all traffic they require
without referring to any config speak.
Also details on your wans separately
How many. Public or private IP, static or dynamic,
Detail which wan is primary and which one is secondary, or are you aiming for load balancing between the two.
Or perhaps most out one WAN and some user out the other WAN only.
