CRS config seems fine, it shouldn't filter anything specific (e.g. according to L3 or L4 properties). But you're saying that it's CRS326 running SwOS which connects Drayteks and Netgears ... so we'd have to see that config as well ...
Good to know. As far as I could see, on the CRS326 I have not configured any L3 or L4 protocols, all L2. It is the CRS328 that is running with SwOS. I had to get the 328 up and running quickly so used SwOS while I was learning MT on the 326. I should probably revert to RouterOS on the 328 now but as it is in production I am trying to avoid downtime. Not sure if it is unwise to mix SwOS and RouterOS on the same network. Probably not a best practice. I will try and do that as soon as I can.
I can't see any way to export the config on the CRS328 using SwOS. For now I am taking screen grabs of the relevant tabs?. I am attaching them here. Please let me know if you need to see other tabs.
I didn't fully understand from the manual what effect checking "Port isolation" on the Vlans tab has. I left it checked, although I do not have any port isolation configured. Is it better to uncheck port isolation for each VLAN? I think it might be, as my intention is to separate VLANs using tagging rather than ports.
On the Netgear switches (very simple little switches deployed locally close to devices and uplinking to the CRS328) you will see that the ng108P has ports 1,2,3,4 and 8 as trunk ports and 5,6 and 7 as access ports, and the ng108E has ports 1-7 as access ports and port 8 as the trunk.
Now I have discovered something odd which might help diagnose a misconfiguration. As I said, I have set up a Base VLAN (192.168.15.0/24), which I use for management of network devices and so all the devices referred to here have fixed IPs in that subnet. I have just discovered that I can access the management console of the Netgear switches if I connect to the VLAN 1005 (192.168.111.0/24 subnet). That is exactly the opposite of what I was trying to achieve and I don't understand why it happens.
However, I am still not able to access the Draytek APs' management console from any subnet and they are still invisible to the Draytek router. I can access the the two MT CAPacs management console from the Base VLAN subnet.
You do not have the required permissions to view the files attached to this post.