Hi everyone,
I’m using a MikroTik hEX (architecture-name: mipsbe, board-name: hEX PoE ) running RouterOS 7. The router is connected via ether1 to our corporate network. According to the built-in packet sniffer (/tool sniffer), all incoming traffic on ether1 is tagged with VLAN ID 100.
Based on this, I created a VLAN interface on the MikroTik as follows:
/interface vlan add name=ether1_vlan100 interface=ether1 vlan-id=100
/ip address add address=10.203.119.202/26 interface=ether1_vlan100
However, when I try to ping the default gateway (10.203.119.254) from the router, I get host unreachable, and no ARP replies are received.
Interesting detail:
I tested assigning the same IP address (10.203.119.202) to an IP camera in the same network/VLAN. The camera is fully reachable from outside, and the RTSP stream on port 8554 works without any issues.
As soon as I remove the camera and assign the IP back to the MikroTik (on the VLAN interface), the connection becomes unstable again or completely unreachable.
If I assign the IP directly to ether1 (without VLAN interface), outbound traffic works perfectly (e.g., pinging 10.203.119.254), but inbound ping responses are very unreliable, with up to 30–40% packet loss.
My assumption is that there’s a VLAN mismatch:
→ The switch may be sending VLAN 100 as untagged/native, while the MikroTik expects tagged VLAN 100 via the VLAN interface.
→ Alternatively, the switchport might be blocking tagged frames coming from the MikroTik.
Has anyone encountered a similar issue with VLAN handling on the hEX or RouterOS 7? I would appreciate any insight or guidance on how to cleanly implement this VLAN configuration.
Thanks in advance!
Best regards,
Martin