I think my config looks correct, but operates incorrectly

RouterOS General
1

Attached is my network setup with Hex gr3 ROSv7, also the POE switch VLAN settings


Hex
Ether 1 - ISP modem to Internet
Ether 2 - Proxmox with VLAN 200 and VLAN 205
Ether 3 - NA
Ether 4 - To tp-link TL-SF1005P (POE+ switch)
Ether 5 - NA

POE switch
Ether 5 - management (should be VLAN 200, but getting an IP from VLAN 205)
Ether 4 - AP VLAN 205
Ether 3 - AP VLAN 205

/interface bridge
add ingress-filtering=no name=bridge1 pvid=200 vlan-filtering=yes
/interface vlan
add interface=bridge1 name=LAN vlan-id=205
add interface=bridge1 name=Management vlan-id=200
/ip pool
add name=Management_pool ranges=192.168.20.100-192.168.20.249
add name=LAN_pool ranges=192.168.25.100-192.168.25.254
/ip dhcp-server
add address-pool=Management_pool interface=Management name=Management_dhcp
add address-pool=LAN_pool interface="LAN (205ResetContent)" name=LAN_dhcp
/interface bridge vlan
add bridge=bridge1 tagged=bridge1,ether2,ether4 vlan-ids=200
add bridge=bridge1 tagged=bridge1,ether2,ether4 vlan-ids=205
/ip address
add address=192.168.20.1/24 interface=Management network=192.168.20.0
add address=192.168.25.1/24 interface=LAN network=192.168.25.0
/ip dhcp-server network
add address=192.168.20.0/24 dns-server=1.1.1.1,1.0.0.1 gateway=192.168.20.1 netmask=24
add address=192.168.25.0/24 dns-server=1.1.1.1,1.0.0.1 gateway=192.168.25.1 netmask=24
/ip firewall filter
add action=fasttrack-connection chain=forward connection-state=established,related hw-offload=yes
add action=accept chain=forward connection-state=established,related
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1

So here are my expectations and issues:

  • POE switch is not getting an IP from the management pool (192.168.20.x), but it’s getting an IP from 192.168.25.x)
  • Proxmox GUI is very slow and timing out

I’m looking at some misconfiguration on the POE switch because that’s the change I did. When APs and Proxmox are connected directly the the Hex with the same config, my Proxmox is working fine. It was only then when I connected the POE switch that I encountered those 2 issues.

From what I see, the config of both Hex and POE switch seem correct, but apparently there are some functionalities I’m missing…
poe pvid.png
poe vlan.png
network.jpg

2

So you should be posting on a tp link forum?

3

Remove setting of pvid on bridge1, bridge1 is configured as tagged vlan 200 member elsewhere.

Configuration export, shown in OP, is missing section /interface bridge port … if it’s missing in the actual config as well, then I wonder what else doesn’t work. If actual config has this section, then post whole config, not only part that you thing it’s relevant.

4

TP-Link “management” (webgui) are always untagged packets, its not like a enterprise-grade switch where you can “dictate” which VLAN the Management should be.
So, untagged frames will end up on the port “ether4” on the HEX
Why would you think you’ll get an IP from 192.168.25.x then ?

5

THe first pic is the big clue, PVID stays at 1, for all ports unless its an access port and the pVID changes to the vlan used on that port ( untagged to the dumb device )
The switch config is totally hosed.