DHCP doesn't reach guest network

Eduardo · Sat Aug 26, 2017 7:06 pm

Hi guys,

I have a problem with my MikroTik CRS125 that I can't figure out...

My pfsense router has only one network card, and is connected to port 2 of the MikroTik (vlan9=uplink,untagged=normal network,vlan200=guest nw).
My PPPoE modem is on port 1 of the MikroTik (untagged)
My Ubiquiti Access Point is on port 3 of the MikroTik (untagged=normal network, vlan200=guest network)

pfSense offers DHCP to main LAN interface on 10.0.0.0/24 network, and also offers DHCP to guest LAN interface on 10.0.3.0/24 network.

Here is my setup:

/interface bridge
add name=bridge-guest
add name=bridge-main
add name=bridge-uplink

/interface ethernet
set [ find default-name=ether1 ] name=01-UPLINK-modem
set [ find default-name=ether2 ] name=02-pfSense
set [ find default-name=ether3 ] name=03-UbiquitiAP
set [ find default-name=ether7 ] name=07-GUEST-SunnyBoy
set [ find default-name=ether8 ] name=08-GUEST-
set [ find default-name=ether17 ] name=17-Bedroom
set [ find default-name=ether18 ] name=18-Living
set [ find default-name=ether19 ] name=19-NAS1
set [ find default-name=ether20 ] name=20-NAS2
set [ find default-name=ether21 ] name=21-TV
set [ find default-name=ether22 ] name=22-Office
set [ find default-name=ether23 ] name=23-Camera
set [ find default-name=ether24 ] name=24-ProxmoxVE
set [ find default-name=sfp1 ] disabled=yes

/interface vlan
add interface=02-pfSense name=02-GUEST-pfSense-VLAN200 vlan-id=200
add interface=02-pfSense name=02-UPLINK-pfSense-VLAN9 vlan-id=9
add interface=03-UbiquitiAP name=03-GUEST-UbiquitiAP-VLAN200 vlan-id=200

/interface bridge port
add bridge=bridge-uplink interface=01-UPLINK-modem
add bridge=bridge-uplink interface=02-UPLINK-pfSense-VLAN9
add bridge=bridge-main interface=02-pfSense
add bridge=bridge-main interface=03-UbiquitiAP
add bridge=bridge-main interface=17-Bedroom
add bridge=bridge-main interface=18-Living
add bridge=bridge-main interface=19-NAS1
add bridge=bridge-main interface=20-NAS2
add bridge=bridge-main interface=21-TV
add bridge=bridge-main interface=22-Office
add bridge=bridge-main interface=23-Camera
add bridge=bridge-main interface=24-ProxmoxVE
add bridge=bridge-guest interface=02-GUEST-pfSense-VLAN200
add bridge=bridge-guest interface=03-GUEST-UbiquitiAP-VLAN200
add bridge=bridge-guest interface=07-GUEST-SunnyBoy
add bridge=bridge-guest interface=08-GUEST-

/ip address
add address=10.0.0.253 interface=02-pfSense network=10.0.0.0
add address=10.0.3.253 interface=02-GUEST-pfSense-VLAN200 network=10.0.3.0

OK. Everything works perfectly, except one thing: my wifi guest network does not get any DHCP address. If I enter a manual IP on my laptop (on the guest wifi) it works fine. If I connect my laptop to port 7 or 8 (guest ports), it is also working fine.

Any ideas?

I know the problem could also be in my access points, but I just want to check this here (because the AP is really simple setup: main wifi is untagged, and guest wifi is on VLAN200)

PS. I also can't ping 10.0.0.253 or 10.0.3.253, strangly enough...

Thanks!

pukkita · Sun Aug 27, 2017 6:42 pm

PS. I also can't ping 10.0.0.253 or 10.0.3.253, strangly enough...
Code: Select all
/ip address
add address=10.0.0.253 interface=02-pfSense network=10.0.0.0
add address=10.0.3.253 interface=02-GUEST-pfSense-VLAN200 network=10.0.3.0

Once you add ports to a bridge, any IPs should be assigned on the bridge itself:

/ip address
add address=10.0.0.253 interface=bridge-main network=10.0.0.0
add address=10.0.3.253 interface=bridge-guest network=10.0.3.0

OK. Everything works perfectly, except one thing: my wifi guest network does not get any DHCP address. If I enter a manual IP on my laptop (on the guest wifi) it works fine. If I connect my laptop to port 7 or 8 (guest ports), it is also working fine.

Double check pfsense is running the DHCP server on the proper vlan interface, L2-wise everything seems OK: your bridge looks fine, and so the fact of manual IP assignment provides connectivity.

Which IP range did you test manually? Does it work if you use a 10.0.0.0/24 IP?

Eduardo · Sat Sep 16, 2017 12:12 am

Downgrading to current firmware 6.40.3 fixed this issue.

idlemind · Sat Sep 16, 2017 1:43 am

Did you originally try 6.41rc? If so bridges and VLANs were completely reworked.

Eduardo · Sat Sep 16, 2017 1:38 pm

Yes I did. But shouldn't the code from the original post still work?

DHCP doesn't reach guest network

DHCP doesn't reach guest network

Re: DHCP doesn't reach guest network

Re: DHCP doesn't reach guest network

Re: DHCP doesn't reach guest network

Re: DHCP doesn't reach guest network

Who is online