Hi,
I bought a Hex POE RB960PGS but have been having a hard time getting the vlan setups I’ve seen to work.
I have a pfsense router doing dhcp and providing some vlan’s which I believe is working (mostly) but have had seriouss trouble getting any of the mikrotik guide’s I’ve seen to work, I’ve reset it I don’t know how many times but often locked myself out or otherwise found it not working and got into a mess where I thought it best to reset.
the pfsense box has/provides:
(non-vlan) 10.0.10.1/24 & dhcp pool 10.0.10.100-150.
vlan200 10.20.20.1 &dhcp pool 10.20.20.100-120
vlan300 10.20.20.1 & dhcp pool 10.30.30.100-120
vlan66 10.0.66.1 & dhcp pool 10.0.66.100-120
I also have an ubiquiti UAP I’d like to have on the same non-vlan network(10.0.10.x) above for management purposes
So, what I’d ideally like to have working is something like:
ether1 - trunk for vlan’s (& non-vlan IP to the mikrotik if possible for mikrotik management but flexible) - ether1 picked here for PoE proximity reasons.
ether2 - untagged 10.0.10.x for management, and tagged vlan200/vlan300 for wifi networks for the UAP
ether3 - untagged vlan200
ether4 - untagged vlan66
ether5 - flexible, either management for the mikrotik if needed, alternatively untagged vlan200, tagged vlan300
If someone is able to help on how I get started (from the point I reset the hex poe) I’d really appreciate it.. I’ve tried so many guides but am clearly getting something wrong.
I think I’m trying to do something similar to https://wiki.mikrotik.com/wiki/Manual:Interface/VLAN#Port_based_VLAN_tagging_.232_.28Trunk_and_Hybrid_ports.29 but haven’t had any luck with that or other guides, both with the vlan99 management example and others the addressing for the mikrotik seems a problem.
One of my attempts had me getting the right dhcp addresses for vlan’s on different ports on the mikrotik(& the right dhcp on the UAP too, though I broke something maybe the gateway config from dhcp was wrong, wireless hosts couldn’t get net), but the mikrotik itself I could no longer reach an IP for so I reset it since things weren’t right.
And to be clear - when I reset the device I’ve been using the web interface to check the initial settings (and do I choose switch or router? I figured it doesn’t matter with what I’m changing but maybe I missed something) - I’ve then usually been ssh’ing into what IP’s I can to configure it, but sometimes locking myself out by not giving the mikrotik an IP that was reachable or something.
I’ve taken from the material available that the hex poe has one of the fancy switch chips, and that for performance reasons I should use switch if I can, but if bridge is what I need I’ll go with that, it may be worth being clear to me on how I make sure the one I don’t want is disabled. Even changing the master-port to ether1 I seem to struggle with doing (I think i succeeded once, do I just make sure nothing is using ether2 as a master-port then I can set ether1 to master?, do I need to use switch-all-ports=yes ?)
All help appreciated, thanks!