VLAN routing issue

Hi,

I’m trying to setup a RB960PGS with a TP-Link SG-3424P, which has 16 EAP220 Access points attached to it.

The EAP220’s have 3 SSID’s all on separate VLANs (10, 20, 30). Ports 1-16, 24 on the TP-Link are configured as a TRUNK ports (all with the same 3 VLANs as the EAPs), and port 24 connects to ether 5 on the RB960. The RB960 has 3 VLANs attached to ether 5, which are all connected to separate bridges, ether 3 is also in the same bridge as VLAN 1. All 3 bridges have DHCP enabled. and internet is via ether1. The EAPs and SG3424P are managed on VLAN10.

The issue:
In this configuration, I am unable to manage the switch when connected to ether 3 on the RB960. I cannot ping the device either. The EAP controller, which is connected to an unmanaged switch on ether 3 shows all 16 EAPs as disconnected. I am unable to connect to the RB960 from a VLAN access port (setup for testing) on the SG3424P. Clients on the EAPs can connect to the internet, but not to any devices on ether 3, and in addition to this, clients on VLAN 30 get a DHCP lease from the DHCP server on VLAN bridge 20 which should not be possible.

I’m at a loss as to whats going on, and think it must be a config issue on the RB960, anyone have any ideas?

No one can have any idea, because you forgot to post the /export hide-sensitive of the RB960.