Manage a Mikrotik router via pfSense

Networking & Firewalls
1

I use pfSense as my router. One of the vlans’s is my management vlan. I use that vlan to manage network equipment.

For switches that is normally no issue however I not in case of my CRS317 (routeros 17.18.2; used as switch).

Form pfSense there is a trunk towards the CRS317. The trunk does contain many vlan’s one of them is my management vlan.

The trunk is terminated on the switch its main bridge. On the bridge I did create a vlan which does include a couple of tagged ports (trunks) and the also as trunk the bridge interface itself.

The bride is of course programmed as vlan aware and the bridge pivd is the pivd of my management vlan. I assigned a ip-address to the bridge.

Problem is that I do not manage to access the bridge (also being cpu access) via the pfSense based vlan.

I spend a lot of time trying to get this working and despite help in the Mikrotik forum, I did not manage. :frowning:

I hope somebody here knows how to configure this / can help!

2

I solved the problem. I did create a default rule in the routing section. That was wrong. The default rule towards pfSense should have been in the ip routing section.

Adding that rule fixed the problem :slightly_smiling_face:

See https://www.youtube.com/watch?v=YLtGQAQ8iS0&t=1126s and watch very carefully what he is doing especially where he is adding the default rule towards the router.