Guidance with additional Vlan on HEX RB750g3, tagging and untagging specific ports

Looking for help with setting up an additional vlan on a new routerboard hex that was just purchased
mikrotik hex - rb 750g3 - routeros 6.44.6

I have a working default config
Id like to add a new vlan, tag it on some lan ports, and untag it on others

specifically, here’s what I’m trying to accomplish

  default vlan 1 - 192.168.88.1/24
  new vlan 2 - 172.16.0.1/24

  ether2 - lan - default vlan 1 untagged,    vlan 2 tagged
  ether3 - lan - no default vlan 1,               vlan 2 untagged
  ether4 - lan - default vlan 1 untagged,    no vlan 2

I have the default single bridge setup with ether 2-5 ports
I am really struggling on :

  • where to configure the vlan tagging and untagging on each port
  • where to configure the ip address of the second vlan

From what I’ve read I should :

  • avoid the ethernet switch port settings
  • configure this all on a single bridge
  • add a new interface for the new vlan, link it to my bridge and assign the ip there
  • turn vlan-filtering on the bridge
  • define which ports are tagged and untagged in the bridge port settings

I’ve read thru the following and am still really struggling
https://wiki.mikrotik.com/wiki/Manual:Bridge_VLAN_Table
https://wiki.mikrotik.com/wiki/Manual:Interface/VLAN

I currently have this which isn’t working, obviously, I’m confused, if someone has advice I’d really appreciate it

  # RouterOS 6.44.6
  # model = RB750Gr3

  /interface bridge
  add comment=defconf name=bridge vlan-filtering=yes

  /interface vlan
  add interface=bridge name=vlan2 vlan-id=2

  /interface bridge port
  add bridge=bridge comment=defconf interface=ether2
  add bridge=bridge comment=defconf interface=ether3 pvid=2
  add bridge=bridge comment=defconf interface=ether4

  /interface bridge vlan
  add bridge=bridge tagged=ether2 untagged=ether3 vlan-ids=2

  /ip address
  add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
  add address=172.16.0.1/24 interface=vlan2 network=172.16.0.0

Advice, dont use vlan1, its a default vlan used by many devices and should be avoided.
Also use this guide…
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

Thanks. I found the same thing… Using vlan1 and trying to incorporate anything additional seems loaded with troubles. In the end I didn’t use the default/vlan1 at all. I made a vlan10 and vlan20 and tagged/untagged them on specific ports to suit my needs.

Got it, thanks so its all working then??

I did… thanks
I found similar guidance at the following link and it worked like a charm.
http://forum.mikrotik.com/t/vlan-on-rb750gr3/122405/1