MX64W

[Dudley5526]

I have a site-to-site VPN using a MX250 as the hub and a MX64W as a spoke.  The MX64W is connected to the network using a CAT6 cable connected to an MS120 switch in the main network closet.  Wireless connections on the MX64W receive dhcp addresses from the vlan setup on the MX64W and are able to access the Internet.  There are 4 ports on the MX64W and I don't get any connectivity.  Where should I look?

[RWelch]

 

Dashboard > Security & SD-WAN > Configure > Addressing & VLANs
Then look at Per-Port VLAN Settings for the additional ports on your MX64W

[Dudley5526]

I changed Port 4 from drop untagged traffic to Native Vlan, and it disappeared.  How do I get it back?

This is the other 3

This is the Site-to-Site VPN settings. Are they correct?

I inherited this network.  I've had to untangle other setups.

Thank you for your help!

[RWelch]

The VPN setting for either 192 subnet would need to be enabled on the spoke (MX64W) to be able to go to the HQs hub which is checked as the default route.

what ever you toggle on for VPN enabled (192 subnet) would be set as access vlan on the MX port for clients.

the downlink to the ms120 would typically have a native vlan for management of the switch plus whatever 192 subnets your clients use.

[RWelch]

The default 192 subnet is likely the native vlan (set trunk downlink to ms120 as that vlan) and in the allowed vlans on the downlink allow both the native vlan and client vlan.

[Dudley5526]

Good afternoon Rwelch!

I enabled the default VPN settings on the spoke.  

The default 192 subnet is likely the native vlan (set trunk downlink to ms120 as that vlan) and in the allowed vlans on the downlink allow both the native vlan and client vlan.

How do I set the trunk downlink to the MS120 as that vlan? 

This is the port on the MS120

[RWelch]

What are your VLAN numbers (Security & SD-WAN > Configure > Addressing & VLANs under Routing)

IF your default VLAN subnet 192.168.125 is likely the  default VLAN (say it's VLAN # is 125) and your client VLAN 192.168.2 (say it's VLAN # is 2) you would set it as:

Native VLAN = 125
Allow VLANs = 2,125 (allow vlan 2 comma vlan 125)



You would also need to configure the trunk UPLINK on the MS120 to reflect the same (STP disabled on the TRUNK uplink to the MX)

[RWelch]

You would also want to double check the native VLAN and make sure it's set correctly under Switching > Configure > Switch Settings under the VLAN Configuration.

All must align correctly for the management VLAN.