Thanks for your answers. I will play around with your suggestions. I enabled the "admit only untagged and priority tagged" on the access ports. So far so good. One evening I will see what happens if I convert my hybrid port for the unifi switch into a trunk-port with "enable only VLAN...

Hi anav, a few clarifications, when you have time and feel like it :) /interface bridge vlan add bridge=bridge tagged=bridge,ether1,sfp-sfpplus1 untagged=ether2 vlan-ids=2 add bridge=bridge tagged=bridge,ether2,sfp-sfpplus1 untagged=ether4,ether5,ether6,ether7 vlan-ids=3 add bridge=bridge tagged=bri...

Wow, thanks. Yes, I can spare a port at the router, to have a physical "management port". I'll look into that. And yes, spot on with the 250 VLAN not needing to bother my PiHole with work. The unifi controller actually runs on a VLANm while both the unifi switch and the AP is on the untagg...

You're welcome. And thanks for your update as well. It makes sense that S2 would use TCP port 3500 instead of 3400, since S1 and S2 have different implementations

Hi again everyone So I just wanted to send an update this way. I got busy with other stuff, but I ended up doing the sort of slow migration from VLAN 1 to real VLANs, but not in the way I thought I would. So my takeaways from your replies are many. If you feel like it, let me know if they're wrong. ...

Update 2023-06-05: Fixed some formatting in the post I was able to get control working again using latest sonos software controller and firmware versions by opening up UDP ports 32000-65535 from sonos players to my controller PC. I can second this symptom and solution. Found out by watching communi...

add chain=forward action=accept connection-state=new connection-nat-state=dstnat in-interface-list=WAN That will match all new connection packets that have been modified by dstnat that also show up on any interface in the WAN list and allow them to forward. I liked this for its genericity, worked l...

@Buckeye: Thanks for the pointers. Was AFK for the whole day. I'll read up on your links, so just checking in to appreciate the responses. When I thought about my "problem" now and then during the day, I guess I came to a conclusion similar to yours, in my own not yet matured way of thinki...

@Buckeye: Thank you for the reply. @k6ccc: Thanks, I will keep that in mind ;) @Buckeye Yeah I agree, and I could reinsert my previous router still: An Asus RT-AX89X, though I have it up for sale. I was annoyed with it being too simple in its features and was recommended (and warned) about Mikrotik ...

Ok. I feel really stupid here. I think I grasp the concepts fairly OK now. So the new target drawing looks like the first, but it has the admin VLAN as VLAN 2 instead of the basic VLAN 1. It's the same drawing, but I attached it for good measure, and so you can facepalm if it's not what you meant ;)...

Hi guys Thanks for the responses, very nice. @Bartosz: Physical hardware and location makes this the simplest setup for me. If the RB5009 had around 17 ports instead of 9 it would be alone in my wiring closet without the unifi switch and the unmanaged switch. The RB260GSP is in the Home office / pla...

Hello Moving from a single LAN setup into the Mikrotik (and Ubiquiti Unifi) world, I haven't quite figured out how to correctly setup VLANs. I hope someone here can help. I have attached a diagram, trying to show the imagined setup: Network-Target.png My immediate questions are: On the RB5009 - ethe...