Alarm.com and VLANs on my Mikrotik network

I have a Mikrotik network (CCR2004 router, 3 CRS 125 remote switches and multiple APs). We have the network successfully setup with several VLAN defined on the bridge of the CCR2004. Each VLAN has its own IP address and DHCP pool, and the VLANs work well. Recently, a security company installed equipment from alarm.com. The company connected this equipment to our main network, and it works well. For best practice, I’d like to isolate this security equipment on its own VLAN. I set up a security VLAN at the router, like the other existing, working VLANs. At our switches, I can assign a port to the security VLAN. When I plug my laptop into this port, I get an IP address from the correct Security VLAN IP pool with internet access, and it all works well. However, when I plug the alarm.com equipment into this same port, I get no connection. No IP address assigned, and the equipment cannot connect to the alarm.com cloud based system. I’ve torched this connection, and I see some repetitive activity trying to get an IP address, but I’m not sure what it means. Since Alarm.com is a fairly large company catering to mid-sized businesses, I hope that somewhere in the vast Mikrotik universe, someone else has encountered this problem, and can guide me or suggest some answers. The CCR 2004 configuration is attached, with PWs and Wireguard keys removed.

Thanks and Regards,
Dave
CCR2004.rsc (21.7 KB)

It sounds like their equipment may be expecting a specific subnet? 192.168.0.1 or 192.168.1.1 ???
Can you plug one into a pc directly to test?

Thanks. The techs can plug into the equipment. I’ll take a look when they connected.