First thank for any help.
Currently my prolems that when i create a hydrid port (My mikrotik port 3 Trunk → Switch Ruijie 209 Trunk-> AP 230 with 2 ssid vlan 200 and 300). i see that in host many flap mac-address between 2 bridge (bridge-mgt for trunk port and bride-vlan for access port).i have attach the config below with the picture.
Thank you
routerconf.rsc (9.84 KB)
Well I dont see the need for different bridges, as the vlans provide all the separation required at Level2 and firewall rules at Level3.
That being said looking at your issues…
/interface bridge port
add bridge=bridge_vlan frame-types=admit-only-untagged-and-priority-tagged
interface=ether4 pvid=40
add bridge=bridge_vlan frame-types=admit-only-untagged-and-priority-tagged
interface=ether5 pvid=50
add bridge=bridge_vlan frame-types=admit-only-untagged-and-priority-tagged
interface=ether2 pvid=20
add bridge=bridge-mgmt interface=ether3 pvid=100
/interface bridge vlan
add bridge=bridge_vlan tagged=bridge_vlan untagged=ether2 vlan-ids=20
add bridge=bridge_vlan tagged=bridge_vlan untagged=ether4 vlan-ids=40
add bridge=bridge_vlan tagged=bridge_vlan untagged=ether5 vlan-ids=50
add bridge=bridge_vlan tagged=bridge_vlan vlan-ids=30
add bridge=bridge-mgmt tagged=bridge-mgmt,ether3 vlan-ids=200
add bridge=bridge-mgmt tagged=bridge-mgmt vlan-ids=100
add bridge=bridge-mgmt tagged=bridge-mgmt,ether3 vlan-ids=300
Everything looks correct to me except using a VLAN that doesnt exist.. I always manually insert my untagged vlans so the only difference is (but yours is also correcti)
add bridge=bridge-mgmt tagged=bridge-mgmt untagged=ether3 vlan-ids=100, however as we know vlan 100 doesnt exist… but lets talk about that next line.
The issue is you are trying to mix apples and oranges… All the VLANS need to be part of the bridge as their interface when defining them.
ALSO what is with the .100 networks which vlan is that? Not only do you have two bridges unnecessarily but then are you attempting to have a bridge give out dhcp besides vlans… Makes things more complex than required… As per the hint of what you were thinking, you should define VLAN 100 properly!!
These two addresses need the right interface…
add address=192.168.200.1/24 interface=eth3-vlan200-Camera network=
192.168.200.0
add address=192.168.31.1/24 interface=eth3-vlan300-Camera network=
192.168.31.0
SHOULD BE bridge_vlan
add fix the missing…
add interface=bridge-mgmt name=trustedVLAN vlan-id=100 {define the vlan}
add address=192.168.100.1/24 interface=trustedVLAN network=192.168.100.0 {proper address}
add address-pool=dhcp_pool11 interface=trustedVLAN name=dhcp1 {proper dhcp server}
(i find these errors by counting)
You have six vlans, so you should have six pools, six dchp servers etc…
You should have 8 IP addresses since you have two wireguard services setup
However I see 12 POOLS WTF over?
/ip pool
add name=dhcp_pool1 ranges=192.168.20.2-192.168.20.254
add name=dhcp_pool2 ranges=192.168.30.20-192.168.30.254
add name=dhcp_pool3 ranges=192.168.40.20-192.168.40.254
add name=dhcp_pool4 ranges=192.168.50.20-192.168.50.254
add name=dhcp_pool5 ranges=192.168.40.20-192.168.40.254
add name=pool1 ranges=192.168.100.2-192.168.100.50
add name=dhcp_pool7 ranges=192.168.200.2-192.168.200.254
add name=dhcp_pool8 ranges=192.168.31.2-192.168.31.254
add name=dhcp_pool10 ranges=192.168.31.2-192.168.31.254
add name=dhcp_pool11 ranges=192.168.100.2-192.168.100.254
add name=dhcp_pool12 ranges=192.168.200.2-192.168.200.254
add name=dhcp_pool13 ranges=192.168.31.2-192.168.31.254
SO that makes SEVEN pools in total ? Six VLANS plus the .100 ??
(I note that the 300 vlanid is using 31.x schema.)
Thank you for your responded,
Because this topic is last 2 day so i have config successfully, but currenly my new prolems that behind the ruijie switch, Port 2 3 4 (Camera) i have the access port with vlan 200, but only 1 of them can get the ip , another 2 device can get a new ip, and so strange that 1 of 2 i still see the old ip (vlan 20) and i using torch to check, i also thought rouge dhcp but im sure that not appear on my network, so i think may be the device just "remember " the static ip and dont release, because the device is on the ceil and very high so hard to reset. any tool or method to force this .
Hi mourinho, I feel your pain about a device hard to get at.
Its why I have many ladders in my house. 
)
POSSIBLY WAYS TO ACCESS YOUR ROUTER NOT VIA THE BRIDGE
GOAL: To gain access to the router at all times for configuration purposes OUTSIDE of the bridge, as typically its the bridge that burps and causes issues during configuration for many new admins.
Now all in one article and corrected…
Thank bro, at last i reset the device and everything are ok, i have the new prolems and i hope that the last haha. btw i get your suggest so i “improve my network, vlan, everything”, and my now prolems is about the trunk between the hap ac2 with my aerohive ap230, but i will get their support because i don’t think that prolems from mikrotik (i trunk with swtich ruijie is normal). So thank you very much for your help. have a nice day