On your Mikrotik bridge, you’ll want to make sure all your VLANs are bridged and no Horizon.
I tried something similar… Mikrotik Core -> Fiber VLAN Trunk up tower -> Netonix -> Port based Untagged VLANs to APs All the APs and the Core on the same subnet and they’ll talked to each other fine, like it was all one happy bridge (because it was). Upload/Download traffic was easily discernable from the Mikrotik because each had its own VLAN. No need to configure subnets for each access point and the SMs connected to them. I was never able to get Queues working on the VLANS on an individual basis though. Packet marks were unreliable (in both the IP Firewall and the Bridge Firewall), Simple Queues don’t recognize VLAN interfaces (nor do Interface Queues, for that matter). Torching the VLAN interface worked after adding MAC Protocol to the filter, as by the time it hit the VLAN it had gone through the pppoe server on the VLAN bridge. Admittedly, it’s a pretty weird way to break up traffic on one’s core router per AP. Chris Wright Network Administrator Velociter Wireless 209-838-1221 x115 From: Af [mailto:af-boun...@afmug.com] On Behalf Of Mathew Howard Sent: Tuesday, June 28, 2016 10:33 AM To: af Subject: Re: [AFMUG] Mikrotik Bridging VLans The closest thing to a MikroTik switch with PoE out is an RB750UP or PowerBox... which could do the job, but they're missing some abilities an Edgepoint has - primarily GigE and an SFP port. On Tue, Jun 28, 2016 at 11:18 AM, Adam Moffett <dmmoff...@gmail.com<mailto:dmmoff...@gmail.com>> wrote: Sounds like you're separating the traffic at L2 just to bring it back together. If you want torch on each AP port, how about a mikrotik switch with PoE out? Those exist....I think... I have no experience with UBNT switches, but if it doesn't provide the tools you need for troubleshooting, then it's not what you want. ------ Original Message ------ From: "Nate Burke" <n...@blastcomm.com<mailto:n...@blastcomm.com>> To: af@afmug.com<mailto:af@afmug.com> Sent: 6/28/2016 11:52:56 AM Subject: Re: [AFMUG] Mikrotik Bridging VLans Ok, so I'm hearing "the way you're doing it is wrong" Is there a better way? Or just let the R6 act as a dumb switch, and then log into that to try to troubleshoot any per port issues. On 6/28/2016 10:49 AM, Josh Reynolds wrote: I think you have a fundamental misunderstanding of the purpose of vlans... On Jun 28, 2016 10:48 AM, "Nate Burke" <n...@blastcomm.com<mailto:n...@blastcomm.com>> wrote: Then how do I get all the Ports on the Edgepoint to share the same IP Space? On 6/28/2016 10:45 AM, Mike Hammett wrote: *nods* just leave the VLANs as native interfaces on the Mikrotik. No need to bridge them. ----- Mike Hammett Intelligent Computing Solutions<http://www.ics-il.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/ICSIL>[http://www.ics-il.com/images/googleicon.png]<https://plus.google.com/+IntelligentComputingSolutionsDeKalb>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/intelligent-computing-solutions>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/ICSIL> Midwest Internet Exchange<http://www.midwest-ix.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/mdwestix>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/midwest-internet-exchange>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/mdwestix> The Brothers WISP<http://www.thebrotherswisp.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/thebrotherswisp>[http://www.ics-il.com/images/youtubeicon.png] <https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg> ________________________________ From: "Josh Reynolds" mailto:j...@kyneticwifi.com To: af@afmug.com<mailto:af@afmug.com> Sent: Tuesday, June 28, 2016 10:44:28 AM Subject: Re: [AFMUG] Mikrotik Bridging VLans It doesn't like that you're bridging all these vlans. From experience, it's nothing but broken-ness. You can still torch each vlan interface you know. On Jun 28, 2016 10:42 AM, "Nate Burke" <n...@blastcomm.com<mailto:n...@blastcomm.com>> wrote: I'm working on the bench with a UBNT Edgepoint (R6 model) The newest firmware allows you to set per port untagged Vlans in switch mode. I'm thinking of using this to power a cluster of AP's, but I'd like to keep the ability to view per port traffic in the mikrotik via Torch for monitoring/troubleshooting purposes. My Plan was to put each port on the R6 on a different Vlan, Have a Trunk port to the mikrotik, then just bridge the Vlans together in the Mikrotik. This mostly works, as the Mikrotik can talk to each AP, but the AP's cannot ping each other, and it seems that I have random packet loss from the Mikrotik to the AP's. Is there a setting I'm missing that's blocking the traffic between Vlans, or is this a Edgepoint problem? Or does it not like that I'm bridging all these Vlans that are on the same Mikrotik interface.