Sun Oct 07, 2018 8:27 pm
If you're going to use hEX as switch, the you presumably have another device as router. So you should disable all firewall rules for chain=forward, disable any DHCP server that might be still there and most definitely disable NAT that might still be active. If you need firewall to protect hEX itself from LAN hosts, then you need firewall rules for chain=input, but you need to allow connections between hEX UDP port 68 and DHCP server UDP port 67.
It might be actually easier to set things up by resetting hEX to state without any configuration. You'd have to do initial configuration using winbox via MAC.