Good day everyone!
I faced with misunderstanding of VLAN on RB3011.
I have following setup:
RB3011 - core router and in it I connected internet on port1.
Ports 3,4,6,7 ports from Server1 (ESXi). This ports are trunk.
Ports 8,9 are ports from Server 2 (ESXi). This ports are hybrid.
I configured 4 vlans - 2 for data , 2 for management.
I have several VMs on both server, on both servers VM have some data to exchange.
On each server I have machine with portforward.
All vms are NATed to have access to internet.
I created NAT to portforward 80 port to server. Add forward rule and try. Do not work. I checked log and found that router do not know where to send packet.
(log attached).
It strange cause when I try to download packages from internet it works. Why Mtik do not find MAC and out interface ?
I try to use old rule (rule 7,8) and that WORKS.
Now I am confused. Why it work?
I try to configure VLAN with switch chip and with bridge(rignt now leave it so), but nothing changed.
I suppose that I do not understand how switch interact with CPU.
Does anybody able to explain why device works so ?
How to make port forward work and configure vlan on switch chip to make device work fast as possible.