Hello everyone,

I'm having some troubles between a new VLAN created recently, and hope to get some help here. I'm attaching a network diagram below.



Basically, clients under VLAN128 (192.168.128.x) can connect and navigate fine to LAN 192.168.0.0/24 and Internet. I'm having lag problems that occur randomly and appear to be L7 related - problems with printer server jobs, webserver caching/sessioning and Active Directory logons.

I made a post at Ubiquiti forum a few days ago, with many more details, but since I couldn't find an answer there yet, I was hoping some RouterOS specialists could help me. Here's the other post: https://community.ui.com/questions/UDM- ... ea668a8747

I believe my problem is at the RouterOS Routing, but have no idea where and am having difficulties to filter/analyze traffic.

Any help appreciated, thank you.

Packets routed by the UDM-Pro will hit the 192.168.0.x directly on the WAN-interface.
What is the gateway on these servers ?? Do you have a static route on each server for the 192.168.128.0/22 pointing back to the UDMP-PRO (*.241) or do you default to the RouterOS box and have a static route on that one pointing to UDM-Pro ?? (so have some triangular construction)

TEST1 : Add static routes on your web-servers etc for the 192.168.128.0/22 directly to UDM-WAN bypassing any RouterOS L3 interface


To be clear ; you are having issues from a client on 192.168.128.0/22 towards the machines on 192.168.0.x ??

Packets routed by the UDM-Pro will hit the 192.168.0.x directly on the WAN-interface.
What is the gateway on these servers ?? Do you have a static route on each server for the 192.168.128.0/22 pointing back to the UDMP-PRO (*.241) or do you default to the RouterOS box and have a static route on that one pointing to UDM-Pro ?? (so have some triangular construction)

To be clear ; you are having issues from a client on 192.168.128.0/22 towards the machines on 192.168.0.x ??

Hello,

Packets routed by UDM-Pro land on RouterOS without masquerade - their source IPs are being used as I need them for firewall rules.

All servers are on LAN 192.168.0.0/24 with gateway 192.168.0.254.
There's a static route on RouterOS:
Yes I have issues from VLAN 128 towards LAN 0 - but problems appear to be L7 related (clients can connect to servers via RDP/SSH/SMB/etc but are experiencing weird lag issues, but no packet loss tho).

I have examples and more info on the ubiquiti post linked, I can repost all tests / infos here if needed.

Thanks!!!