Hello.
My name is Robert and greetings from Poland 
I would like to ask you for help with a broken Trunk connection between CCR2004-16G-2S+ and CSS610-8P-2S-IN.
Below is a diagram of my network and router and switch configuration.
R1 config: (I have removed irrelevant lines and firewall configuration is not complete yet. I do not filter traffic between VLANs).
[masiu@R1] > /export
/interface bridge
add name=BR1 vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] advertise=1000M-full auto-negotiation=no comment=MATRIX loop-protect=on
set [ find default-name=ether2 ] advertise=1000M-full auto-negotiation=no comment=Robert_PC loop-protect=on
set [ find default-name=ether3 ] advertise=1000M-full auto-negotiation=no comment=Robert_work_laptop loop-protect=on
set [ find default-name=ether4 ] advertise=1000M-full auto-negotiation=no comment=Kate_work_laptop loop-protect=on
set [ find default-name=ether5 ] advertise=1000M-full auto-negotiation=no comment=Linksys_switch loop-protect=on
set [ find default-name=ether6 ] advertise=1000M-full auto-negotiation=no comment=TP-Link_switch loop-protect=on
set [ find default-name=ether7 ] advertise=1000M-full auto-negotiation=no comment=PROXMOX_bond1 loop-protect=on
set [ find default-name=ether8 ] advertise=1000M-full auto-negotiation=no comment=PROXMOX_bond1 loop-protect=on
set [ find default-name=sfp-sfpplus1 ] comment=Main_Mikrotik_switch
/interface pppoe-client
add add-default-route=yes comment=Internet disabled=no interface=ether1 keepalive-timeout=60 name=Internet user=XXX
/interface vlan
add interface=BR1 name=vlan101 vlan-id=101
add interface=BR1 name=vlan102 vlan-id=102
/interface bonding
add mii-interval=1m40s mode=802.3ad name=bond1 slaves=ether7,ether8 transmit-hash-policy=layer-2-and-3
/ip pool
add name=ip_pool_vlan101 ranges=10.100.101.1-10.100.101.100
add name=ip_pool_vlan102 ranges=10.100.102.1-10.100.102.100
/ip dhcp-server
add address-pool=ip_pool_vlan101 interface=vlan101 lease-time=1w name=dhcp_serv_vlan101
add address-pool=ip_pool_vlan102 interface=vlan102 lease-time=1w name=dhcp_serv_vlan102
/interface bridge port
add bridge=BR1 comment="Robert's workstation" frame-types=admit-only-untagged-and-priority-tagged interface=ether2 pvid=101
add bridge=BR1 comment="Kate's laptop" frame-types=admit-only-untagged-and-priority-tagged interface=ether4 pvid=101
add bridge=BR1 comment=S3-Linksys frame-types=admit-only-untagged-and-priority-tagged interface=ether5 pvid=102
add bridge=BR1 comment="S2 TP-Link" frame-types=admit-only-untagged-and-priority-tagged interface=ether6 pvid=102
add bridge=BR1 comment="Robert's laptop" frame-types=admit-only-untagged-and-priority-tagged interface=ether3 pvid=101
add bridge=BR1 comment=PROXMOX frame-types=admit-only-untagged-and-priority-tagged interface=bond1 pvid=102
/ip settings
set rp-filter=strict
/interface bridge vlan
add bridge=BR1 tagged=BR1 vlan-ids=101
add bridge=BR1 tagged=BR1 vlan-ids=102
/ip address
add address=10.100.102.254/24 interface=vlan102 network=10.100.102.0
add address=10.100.101.254/24 interface=vlan101 network=10.100.101.0
/ip dhcp-server network
add address=10.100.101.0/24 dns-server=1.1.1.1 gateway=10.100.101.254
add address=10.100.102.0/24 dns-server=1.1.1.1 gateway=10.100.102.254
/ip dns
set allow-remote-requests=yes cache-max-ttl=2w cache-size=20480KiB servers=1.1.1.1,1.0.0.1
/ip firewall filter
add action=accept chain=input comment="Accept established and related packages from Internet" connection-state=established,related in-interface=Internet
add action=drop chain=input comment="Drop all invalid packages from Internet" connection-state=invalid,new in-interface=Internet log=yes
add action=drop chain=input comment="Drop everything else" in-interface=Internet
add action=fasttrack-connection chain=forward comment="Fast-Track for established and related" connection-state=established,related hw-offload=yes
add action=accept chain=forward comment="Forward established and related packages" connection-state=established,related
add action=drop chain=forward comment="Drop invalid packet from Internet to inside LAN" connection-state=invalid
add action=drop chain=forward comment="Drop access to clients behind NAT from WAN" connection-nat-state=!dstnat connection-state=invalid,new in-interface=Internet
/ip firewall nat
add action=masquerade chain=srcnat out-interface=Internet
S1 config:
System:
VLANs:
Sorry, there is an error in the image, which I have already corrected. In VLAN102, the Eth8 port is incorrectly selected.
VLAN102 on ports 1-7 and SFP1
VLAN101 on ports 8 and SFP1
VLAN config:
VLAN:
Eth VLAN Mode VLAN Receive Default VLAN ID
1 optional any 1
2 optional any 1
3 optional any 1
4 optional any 1
5 strict only tagged 102 (The first Cisco Access Point is connected to this port.)
6 strict only tagged 102 (A second Cisco Access Point is connected to this port.)
7 strict only untagged 1 (The first Camera is connected to this port.)
8 strict only untagged 1 (A second Camera is connected to this port.)
SFP+1 strict only tagged 1 (Trunk to R1)
Everything works fine except Trunk between Mikrotik Router and Mikrotik Switch (R1 <> S1).
Searching online for help didn’t help me unfortunately.
Additionally, I watched the video: https://www.youtube.com/watch?v=38lR7UH51LY. But on my CSS610 there is no below option to check.
I will be grateful for any help.
Thank you in advance for your help.
Kind regards, Robert.