MIKROTK + TWO WANs + VLAN + UNIFI GUEST + UNIFI PRIVATE

Hi!

I have a problem with this situation:

  1. I have two isps (one of the have a valid IP, the another one have a dynamic IP )
    WAN1: 192.168.100.1/32 (isp dynamic) connected on interface 1
    WAN2: 192.168.201.1/32 (isp static) connected on interface 2

  2. I have 6 UNIFI that have two sites (Guest Site and ADM Site)
    ** connected on switch TL-SG5428

  3. I have a LAN
    LAN: 192.168.25.0/24 connected on interface 5

  4. I have a DHCP
    dhcp server, with this range 192.168.25.10-192.168.25.250

Every computer on Lan en Every Unifi gets DHCP on 192.168.25.0/24

Here, everithing works well, but now, I have to change this and I have a little dificult how to do this:

  1. I need to separate the wifi network and lan network (both get’s dhcp on 192.168.25.0/24)
    For this, I think to use VLAN’s. So I think to do this…

a) in the switch , I know that UNIFIs are connected to the port 1,2,10,20,22,23.
b) so, I try to config the TL-SG5428:

  • I create a vlan id 2000
  • I put the vlan id on ports 1,2,10,20,22,23
  • I put the vlan id on port 19, and configure that port with trunk. This port I connect to “interface 6” on my mikrotik.

c) In my mikrotik, I create a VLAN 2000, associate with “interface 6” .
d) In my DHCP SERVER, I create another dhcp server (172.16.0.0/24) on the VLAN 2000.

Problems:

  1. The ports 1,2,10,20,22,23, have a VLAN ID 1 and VLAN ID 2000. Because of this, I imaginate, the unifs still get the dhcp server 1 (192.168.25.0/24)
  2. In my interface 5, where I have the LAN, my mikrotik server DHCP 192.168.25.0/24 and 172.16.0.0/24. And I would like only to 172.16.0.0./24 servrs on vlan 2000.
  3. In my unifi, I change the two sites to VLAN 2000, but the unif’s can’t get DHCP. (In my log, server offered dhcp, but without success).

Sorry, I’m a beginner…
May someone can help me ?