This is a weird one, but I bet someone here knows RouterOS well enough to help me debug this. I’ll try to provide a lot of detail, but happy to add more as needed. I have a Mikrotik router rb5009. It is using the standard network 192.168.88.1 for its address and its network. It has the SFP+ port an…

Using a vlan1 is a very bad idea. Pretty much use any vlan > 1 Why have a vlan on ether1 at all. Is your configuration changed so ether1 is part of the bridge? But it is still the wan? The default config is probably better in most cases.

Ah, the infamous vlan1 ... [image] The twelve Rules of Mikrotik Club Beginner Basics Preamble and disclaimer: The following is a set of Rules that are intended as advice useful to avoid the most common errors observed in configuration posted on this forum. I…

Hi, it is not actually VLAN 1, the ID is 201 as required by my ISP. What you are seeing is just a label.

Well, then it falls under Rule #12. :wink: Post your FULL configuration, instructions here: [image] Forum rules Beginner Basics Hello and welcome to the Mikrotik forum smiley For all new users that uses RouterOS for the first time and have some questions reg…

Post your configuration export as instructed by @jaclaz . Usually, for the purpose, when you are using an almost untouched defconf firewall, you should add sfp-sfpplus1 to the interface list WAN instead. And you won't need to add the extra masquerade rule (BTW the rule has unnecessary parameters set…

I have already posted the configuration but I think my post is stuck in some moderation queue. Thanks.

Great points all around. Good to see I can export my entire configuration. I consider this configuration “working” when I can be on a laptop on the LAN (in this case it has IP 192.168.88.229, but that doesn’t really matter) and am able to communicate with the device at 192.168.1.1. Here, communicat…

With these two settings: [image] tcprst: /interface list add comment=defconf name=WAN add comment=defconf name=LAN ... /interface list member add comment=defconf interface=bridge list=LAN add interface=ether1 list=WAN You are essentially telling: bridge is LAN ether1 is WAN sfp-sfpplus1 is…

Why can I access other network ONLY when DHCP lease is online?

RouterOS Beginner Basics

holvoetn February 19, 2026, 8:02am 3

Ah, the infamous vlan1 ...

Rules 1 and 2 apply.