@anav → no worries, I delete everything from firewall rules cause my router is not connected to the internet yet. I just want to setup everything “on my table” then I will connect my devices to the internet. I don’t even set different login, it’s still in default. Security I want to set according to https://wiki.mikrotik.com/wiki/Manual:Securing_Your_Router but if you have any other useful link, please share.
→ ethernet 2 is just my backup if I screw up something with VLAN setup.
→ OK, I delete dhcp-client in my AP, thanks
@tdw → I think so, I don’t need to setup untagged ports cause it’s set automaticaly. I read plenty of articles about VLANs in Mikrotik and I can confirm, it’s working like that.
Anyway I still don’t understand why the hell Mikrotik will block icmp protocol to all my gateways if there is specified exact source:
add action=drop chain=input log=yes protocol=icmp src-address-list=\VLAN3_public
in this rule - any ideas?
Some informations about VLANs, which helped me to little a bit understand to this topic (maybe will help to others:
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1 → general understanding VLAN
https://wiki.mikrotik.com/wiki/Manual:Interface/VLAN → general understanding VLAN
https://wiki.mikrotik.com/wiki/Manual:CRS1xx/2xx_VLANs_with_Trunks#Management_IP → for management VLAN
https://wiki.mikrotik.com/wiki/Manual:Bridge_VLAN_Table → tagged/untagged VLAN