Disable inter Vlan firewall

Ippo

Hi everyone,

I have an EX3301-T0 and two EX3100-T0 all wired and connected via a managed switch.

The EX3301-T0 port is configured to be bridged and I have two interfaces, tagged with Vlan 10 and 40.

Vlan 10 doesn't really go anywhere, I just needed to have two interfaces.

I have two SSID: SSID1 together with Lan1, Lan3, Lan4 are part of the default interface group, while SSID2 and Lan2 are part of another group.

I am using a Mikrotik router and it is connected to the WAN as tagged vlan 40 network and Lan1 as untagged network.

Everything works fine on the EX3301-T, I managed to have my trusted wifi devices on SSID1 that can talk with the rest of the 192.168.30.0/24 network and the IoT devices talking to the 192.168.40.0/24.

The problems begin when I use the extenders, it seems that the WX3301-T0 can carrier the untagged traffic but get rid of the vlan40 tag on the SSID2 wifi.

If I move cable from WAN to LAN2, the wifi devices can't even see the cabled one on the same group, regardless if Lan2 is tagged or untagged.

I just need the Mikrotik to act as router and the AP and repeaters act as dumb bridge that connect SSID1 to the untagged traffic and SSID2 to VLAN40.

Basically the repeaters need to inherit the AP configuration.

Apologies for the long post, I hope someone will be able to help.

Thanks