Hi!
I have a problem with obtain DHCP 249 from IKEv2 on VLAN Interface (Windows 10 client)
I have a trunk port on switch chip in my RB1100AHx2
In config below there is only a part of vlan comfiguration on switch chip
interface ethernet switch port
set 10 vlan-mode=secure
set 11 vlan-mode=secure
/interface ethernet switch port
set 10 default-vlan-id=auto vlan-header=leave-as-is vlan-mode=secure
set 11 default-vlan-id=auto vlan-header=leave-as-is vlan-mode=secure
/interface ethernet switch vlan
add independent-learning=no ports=WAN-1,switch2-cpu switch=switch2 vlan-id=500
/interface bridge
add name=bridge-WAN protocol-mode=none
/interface bridge port
add bridge=bridge-WAN interface=WAN-1
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes
/interface vlan
add interface=bridge-WAN name=WAN500 vlan-id=500
When i establish connection to IKEv2 it works as expected. SA established and I have access to internal resources and Internet.
But, split-include not working. I added log rule to firewall and filtered dhcp packets with layer7 protocol by regex corresponding to DHCP Inform Type.
Log says
in:WAN500 out(unknown 0), proto UDP, 10.10.10.5:68 -> 255.255.255.255:67, len 328
It seems that DHCP Server can’t receive or process request, coming from VLAN interface
I found similar topic IKEv2 server ignores dhcp query on vlan interface http://forum.mikrotik.com/t/ikev2-server-ignores-dhcp-query-on-vlan-interface/148043/1
When I destroy VLAN configuration, configure IP address on bridge interface (without any vlans) - It works properly. Splite-include works.
Please, help! Is it bug? Or does proper solution exist when IKEv2 receive connections on VLAN interface?