Switch UNIFI whit Mikrotik

Hi,

I’m a bit desperate with an issue that brings me head over heels, I have in Mikrotik RB4011iGS+ in which I have a VPN server SSTP and a tunnel with azure to authenticate Radius.

This I have managed to get it working fine (I am new to Mikrotik), but now I have connected a unifi switch and I am unable to get it adopted by the controller (which we have at the other end of the azure tunnel), and any equipment I connect to that switch does not get IP from the DHCP that is connected to the Mikrotik.

Any ideas?

I hope I have explained myself clearly.

Do you set the Unifi Controller address manually on the switch (or is it supplied through DHCP)?
Does any other device get an IP address from the RB4011 (when directly connected to the RB)?
Do you use VLAN’s?
Can you share the RB’s config

/expoort file=anynameyoulike

Remove serial and any other private info.

Unifi switch have a fixed IP in Mikrotik (10.64.0.40),
I have computers, printers, etc in eht2-9 and all OK.
I don’t have VLAN.

In the attached image the port appears as “root”, it is the ether6, in case it contributes something.

Thanks
bridge.png
config.rsc (9.6 KB)

This is a Unifi thing, set the controller IP address fixed through CLI:

set-inform http://[IP address of controller]:8080/inform

Your firewall rules have changed, order is a bit messed up and the forward chain is not complete. Please reconsider the current rules.

I have done set-inform and nothing, I have pure Unifi infrastructures in other sites and OK, the problem is that from the unifi switch I have no ping to the controller, so even if I set-inform it never reaches the destination.

Regarding the firewall rules, they are the default ones, I added some more but I don’t know much about Mikrotik, what exactly do you mean?

Thanks so much.

Can the controller be reached from anywhere other in the network? It could be a route that is missing, could also be a misconfigured gateway on the switch. And what controller are the accesspoints configured to?

Yes, it can be accessed, in fact the access points are connected there and can be reached without any problem.

Then I think the IP configuration of the switch is incorrect. Doesn’t explain why devices connected to the switch don’t receive IP addresses. Have you already asked on the Unifi forum?

Update
The IP assignment is done through reservation (static lease). Hence the misinterpretation. On what port is the switch connected to the RB4011?

Port 6, MK says it is a “root” port.
bridge.png