IP space issues

Not exactly sure where to post this but I ran into an issue and can’t find any other explanation. I had a setup with a MikroTik router, one physical interface trunked to an s8-pro with 2 AP6s. All but one network is working. I have several internal networks which are working and a guest networks on vlan999 with IP space 100.64.0.0/24. This is all working without issue.

I created a new guest network vlan998 with IP space 100.65.0.0/24 (also tried 100.64.1.0/24) and can not get it to pass traffic. This was all tested over wifi. Wifi network was tagged with 998 and set to standard network type, and had multi-vlan enabled and tested with it disabled. This network would not pass traffic no matter what I tried. I could get DHCP but that was it. Could not ping the router or anything on the internet. Is the alta equipment using some kind of internal vlan or IP space that could be overlapping? That’s all I can figure at this point.

Hello,
Firstly i will suggest to avoid 100.x.x.x network as it may overlap with public ips, second can you share the setup of the router vlan interface 998 over the mikrotik interface and also configuration of the ports in the S8 to manage it as allowed vlan?

Posting your config from S8 and Mikrotik will definitely help us assist, but also, you said you’d can’t ping the router IP from a client. Is ARP resolved for the default GW or is that failing too?

Didn’t check ARP while I was connected, so can’t say for sure on that. Literally all I did though was change the IP address to 192.168.90.1/24 and 192.168.100.1/24 and it works just fine. 100.64.0.0/10 is reserved for CGNAT uses and since I’m the ISP in this case that IP space isn’t in use anywhere else in my network, so it should be safe to use. Vlan999 I purposely have arp reply-only enabled and add arp for leases configured in that DHCP server. 998 though is the network that wasn’t working.

Ether8 on the tik is connected to Port8 on the s8

/interface vlan
add comment="guest 2 wireless" interface=ether8 name=v998-GUEST-2 vlan-id=998
add arp=reply-only interface=ether8 name=v999-GUEST vlan-id=999

/ip address
add address=100.64.0.1/24 comment="guest wifi" interface=v999-GUEST network=100.64.0.0
add address=100.64.1.1/24 comment="guest 2 wifi" interface=v998-GUEST-2 network=100.64.1.0