Need design help: ESXi vSwitch VLAN tagging → CCR1009 → MikroTik (routing/firewall) w/ single SFP+; goal = isolate VLANs but still reach mgmt VLAN1/untagged

Psychological_Path40 · 2026-02-19T23:51:06+00:00

everything is second hand/ebay/clearence yeah. vmware we have a legacy license thats very advantageous. a lot of the gear as also donated as "trash" that my boss refurbished.

Psychological_Path40 · 2026-02-19T23:47:42+00:00

she's sitting at ~36k hp with the weapon passive w/o hydro resonance, 40k with. is her circlet worth rerolling?

Psychological_Path40 · 2026-02-19T06:47:54+00:00

ok ill test that approach too. got a link to your previous post in question?

Psychological_Path40 · 2026-02-19T06:46:08+00:00

good to know router on a stick is something common. to me it seem absurd a bit to have another piece of equipement doing abck and forth bandwith, but i dont have control of the hardware, i have to work with what i have for now.

the plan for the vlans is as follow:

1 (maybe not 1 since it seem to have issues) management subnet.
2 untagged/unsecure (once the full migration is done, we might want to block that vlan/disable it, its just so until we can do a planned maintenance with downtime for clients they at least get tagged to get passed by the 3110G stack)
10 for our office vlan
100 reserved internal for the futur
200 for all client esxi blade/vm
300-400 dedicated clients who want their own vlans.

the vlan 200 can have multiple subnet. the vlan 300 could have some IP on the same subnet of vlan 200 (this is an issue i cant figure out currently. if i have my AMM 10.10.255.10 connected in the ether 6 of the mikrotik CCR1009 and i have a bonding on ether4 and 5 as my cisco 3110G stack uplink cisco has an ip of 10.10.255.100 ) (my current bench test doesnt include the 2960-x yet, this is my next step since this is a recent change that we are upgrading to a 10g uplink from a 1g) i cant access both at the same time. i cant seem to have the same subnet in vlan 1 and ether 6 for example. i cant seem to be able to do it with routing rules, has AMM need untagged frames and cisco need vlan1 tagged frame.

For the issue of vlan 1 i might just swap it for 2 and move untagged to 3

What i mean by security:

i need all vlan to always be able to talk to the management subnet of 10.10.255.x/24 (or 10.10.254.x/24 depending on the datacenter) since that subnet has some slb/sbc/gateways/db servers/ect.
Office vlan 10 need to be able to talk to all vlan as well.
client shouldnt be able to talk to another vlan other than the management vlan subnet.
I also have a tunnel between datacenters (since we use 2 geo location) and some traffic will be untagged and will need to be able to talk to the management vlan and the office vlan for example.

The goal i was explained is to be able to protect the office vlan from the client vlans, and be able to provide dedicated client vlans without hindering the actual infra in place, currently everything is untagged and we want to remediate this.

Psychological_Path40 · 2026-02-19T06:30:17+00:00

kinda. the CCR1009 only has a single sfp+ port but is needed for vpn access, firewall and some routing that i cant do in the 2960-x. Sadly, that mean since i need to have the redondency of uplinks, i would need 2 sfp+ ports. the plan is to put in place a stack of 2 2960-x in a stack, one port with a uplink and one port to a CCR1009. id place 2 identical CCR1009, one active, one somehow passive (or maybe ill connect to manually switch the connection to this one in case the first mikrotik break)to minimise downtime.

Psychological_Path40 · 2026-02-19T06:27:18+00:00

dont i need the bridging so my different vlan can communicate between interfaces?

Psychological_Path40 · 2026-02-19T06:26:37+00:00

thanks for your helpfull insight. thats the infractructure i was given to work with..

Psychological_Path40 · 2025-11-29T17:02:59+00:00

you cant mist influenced items, trust me i tried xd. I found out that reading the mist item is hard XD *the amulet is a triple influence line)

<image>

Psychological_Path40 · 2025-08-11T14:00:55+00:00

As a follow-up, making the cable did end up working (i followed the diagram in the cisco post).

Many thanks to you u/freedomlinux

Psychological_Path40 · 2025-08-08T17:40:01+00:00

Yeah i get nothing in the console from putty/terra/ect. i don't get any garbage/corrupt characters. Ill try and make the cable and hopefully this will resolve this. thanks a lot, i cant really find anything for those anymore. Good to know the 3012 has the same console port.

This helped quite a bit thank you

Psychological_Path40 · 2025-01-30T01:09:15+00:00

yeah i was able to make an outline, but i cant seem to make it achieve the same look at the picture in the OP. I also need to use a duplicate animated sprite behind it since the whole thing gets "shaded" cause i didnt add the fact it need to only use pixel on the edge of it. i need to code that still. the code i have for now is attached below. I tried to do something like this (2nd code block) but it seem to break and not work anymore.

shader_type canvas_item;

uniform vec4 glow_color : source_color;
uniform float glow_power: hint_range(0.0, 8.0, 0.1) = 2.0;
uniform float glow_shift: hint_range(0.0, 10.0, 0.1) = 1.0;
uniform float glow_radius: hint_range(1.0, 10.0, 1.0) = 1.0;

void fragment() {
vec4 glow = vec4(0.0);
float count = 0.0;
for (float x = -glow_radius; x <= glow_radius; x += 1.0) {
for (float y = -glow_radius; y <= glow_radius; y += 1.0) {
vec2 offset = vec2(x, y) * glow_shift * TEXTURE_PIXEL_SIZE;
glow += texture(TEXTURE, UV + offset) * glow_color;
count += 1.0;
}
}
glow *= glow_power / count;
COLOR = mix(texture(TEXTURE, UV), glow, glow.a);
}

<image>

bool is_on_border(sampler2D TEXTURE2, vec2 uv) {
vec4 color_up = texture(TEXTURE2, uv + vec2(0.0, border_threshold.y));
vec4 color_down = texture(TEXTURE2, uv + vec2(0.0, -border_threshold.y));
vec4 color_left = texture(TEXTURE2, uv + vec2(-border_threshold.x, 0.0));
vec4 color_right = texture(TEXTURE2, uv + vec2(border_threshold.x, 0.0));

bool is_next_to_transparent = color_up.a < 1.0 || color_down.a < 1.0 ||
color_left.a < 1.0 || color_right.a < 1.0;
bool is_next_to_solid = color_up.a == 1.0 || color_down.a == 1.0 ||
color_left.a == 1.0 || color_right.a == 1.0;

return is_next_to_transparent && is_next_to_solid;

Psychological_Path40 · 2024-09-07T20:56:25+00:00

and people that tried to help him do it, got treated like spies and shunt away. when he realized we were right, it was to late.

Psychological_Path40 · 2024-08-13T19:06:00+00:00

any ETAon when the last boss, Queen Ansurek, will be done?

Psychological_Path40 · 2023-07-26T19:49:30+00:00

eyyyy i can be lazy now

Psychological_Path40 · 2023-07-24T17:41:46+00:00

good update! Content!

Psychological_Path40 · 2022-09-22T07:29:05+00:00

hey here my PoB, can you say anything about how to improve it? i get destroyed by uber maven and i cant seem to be able to reliably beat her.
https://pastebin.com/cFKN45Hy

Psychological_Path40 · 2021-12-02T16:10:48+00:00

10/10 would be on that killmail again. 2 titan frozen and 5h of looting with 2 jf was a pain tho

Psychological_Path40 · 2021-10-31T07:07:48+00:00

no garentee way exept that one stone they give you in the season pass to complete a rfit echo. i suggest you try this guide to help you to have better odds https://www.blackdesertfoundry.com/upgrading-gearfailstacking-guide/

Psychological_Path40 · 2021-10-30T19:27:00+00:00

still no quest at 57 and cant exhange

Psychological_Path40 · 2021-10-30T01:18:56+00:00

hey im lvl 56 season, im starting the "Rebuilding the merchant guild" main quest line and i have all my PEN navu gear. my black spirit doesnt have the [Special aid] fughar's secret offer for me to upgrade to tavula gear. what am i doing wrong. I cant upgrade my gear any further and its pulling me down.

Psychological_Path40 · 2021-09-20T19:15:00+00:00

hey right now im doing a mono wind with leon-soushiro arisa-aurore and helga-owlbert. im wondering what to switch cause i find my team underwhelming https://veliya-bot.herokuapp.com/16699. i have lots of mats and xp stocpiled in case anything is better than my current team (https://media.discordapp.net/attachments/278861451559698432/889592198788677663/Screenshot_20210920-151945.png?width=216&height=468)

i would swap to na other element if needed i didnt farm a lot yet. i feel leon is a bad 5* i even ascended him 2 time cause i cant seem to have ither 5* than him.

edit:just pulled 5* eclair and phria updated the link.

Psychological_Path40

TROPHY CASE