I've seem to hit a brick wall, and can't figure the VLAN issue out on a hEX-PoE...
Have a look at the screenshots lower down of the unit's configurations. The device has been configured from fresh start, running on the latest RouterOS stable version, with no fancy setups otherwise. I've done the exact same setup on a RB2011-UiAS and it works. Please help me, I'm starting to go crazy trying to figure it out.
The hEX-PoE will act as a Gateway for my network. It should have internet on eth/1, a management port on eth/2 (no VLAN, different bridge, own DHCP server and scope), and then trunk ports on et/3, eth/4 and eth/5 (all linked to br/1).
The VLANs are:
- VLAN1 - 192.168.66.0/24
- VLAN30 - 172.16.99.0/24
What I've done:
Following the guides online, I've setup the following:
- Created a VLAN Bridge, "VLANBridge", with ports 3-5 in it (refer to it as br/1).
- Created VLANs 1 and 30, and added them onto br/1
- Created Gateway addresses 192.168.66.1/24 binded to vlan1, and 172.16.99.1/24 binded to vlan30.
- Created DHCP Server (using DHCP Setup), and created scoped DHCP servers for each VLAN.
- Added the VLANs on br/1, where br/1 has IDs 1, 30, the tagged traffic being VLAN30 interface, and the untagged being VLAN1.
- Added the VLANs to the switch ports (under switch → VLAN), where all ports on br/1 has both VLANs with independent learning <ON>
- Changed Switch → Ports, respective br/1 ports to be in secure mode, with VLAN header set to "add if missing" (I've played around with these settings to see if any combination works, and also referred to Source 1 below.
Connecting an internet connection on eth/1, the router has break-out to the internet.
Connecting any computer on eth/2 gets an IP on the Management port, as expected.
Connecting the same or any other PC on eth/3, eth/4 or eth/5 results in loss of connectivity, with no network leases being received whatsoever. Returning to eth/2 works instantly.
1. RouterBoard's config
2. Intended Network Diagram
1. https://wiki.mikrotik.com/wiki/Manual:S ... d_Ports.29