First:
have you ever read this excellent guide on setting up VLAN ?
It is considered the Bible around here:
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
What 3 CRS109 ?
How do they relate to this CRS328 ?
Maybe we also need a network drawing …
First comments after seeing config:
- pvid on bridge is useless. How are frame-types defined ? Since it’s not in your export, I assume it’s set to admit-all ? Should be “admit only vlan tagged”
- while troubleshooting, it might be recommended to get 1 port away from bridge so you can always get in via that port using Winbox/Mac.
- pools are possibly defined wrong (unless that notation is also possible, don’t know about it).
From documentation:
ranges (IP; Default: ) IP address list of non-overlapping IP address ranges in the form of: from1-to1,from2-to2,…,fromN-toN. For example, 10.0.0.1-10.0.0.27,10.0.0.32-10.0.0.47
- you have serious inconsistencies in your pool definition and IP address definitions
E.g.
/ip pool
add comment=“DHCP Pool for VLAN600” name=DP1-VL600-MAN ranges=80.144.1.64/26
/ip address
add address=80.144.1.1/24 comment=“V1-S5-VL600-MAN Gateway” interface=V1-S5-VL600-MAN network=80.144.1.0
/26 on pool and /24 on IP address ?? Align for all addresses/pools.
- Same on DHCP network settings
/ip dhcp-server network
add address=80.144.1.0/24 comment=“Network for VLAN600” dns-server=100.48.48.1,127.0.0.1,8.8.8.8 gateway=80.144.1.1 netmask=24
What should it be for Management VLAN ? /24 or /26 ??
Fix for all definitions.
- Same on firewall NAT rules
/ip firewall nat
add action=masquerade chain=srcnat comment=“NAT: Masquerade for VL600 to WAN” out-interface-list=WAN src-address=80.144.1.0/24
Correct those things first please.
UNLESS you are deliberately restricting pool sizes for those subnets ?