Assign port to VLAN

I have a RB951G I’m using as a switch. I want to assign 3 ports to working VLANs, and maintain the last port with main network access. Using Eth1 as the trunk, ports 2, 3 and 4 properly access their respective VLANs, with IP addresses from the correct pools. Eth5 has no access, and no IP address is assign to attached devices. I’m missing something, but don’t know what. My configuration is attached. Help appreciated.

Best Regards,
Dave
switchVLAN.rsc (928 Bytes)

What is the management or trusted subnet?

The trusted subnet is my main network, 192.168.60.0/24. The VLANs are 172.16.10.0/24, 10.10.0.0/24 and 10.10.1.0/24. The port 1 trunk is connected to my My RB4011 which handles routing the VLANs. Devices connected to ports 2, 3 or 4 connect to the correct VLAN, get IPs for the proper DHCP pool. Devices plugged in to port 5 get no IP address at all.

When I use the 951 as a simple switch, I can access my 192.168.60.0 network from any port. After I assigned selected ports to the VLANs, I can’t access the 192.168 network from port 5, which should not be involved with VLANs at all.

Am I missing something basic??

Just to be clear you dont use a vlan for the main subnet on the rb4011 and you assign that to the bridge of the 4011.

Reason being that mixes apples and oranges, whereas Its much easier in my opinion to give the main subnet a vlan like 11 and keep it simple.

Especially when you are talking about transferring vlans to other smart devices… then it becomes smart and simple.

Thank you for your help. Much Appreciated!