hAPac Lite VLAN Issue

I’m having trouble getting my hAPac Lite to work with vlans.
Here’s the switch config:

# may/27/2018 15:25:51 by RouterOS 6.42.3
# model = RouterBOARD 952Ui-5ac2nD
/interface ethernet switch vlan
add ports=ether1,ether5,switch1-cpu switch=switch1 vlan-id=1
add ports=ether1,ether2,ether3,ether4,switch1-cpu switch=switch1 vlan-id=20



 #   SWITCH                                                VLAN-ID PORTS
 0   switch1                                                     1 ether1
                                                                   ether5
                                                                   switch1-cpu
 1   switch1                                                    20 ether1
                                                                   ether2
                                                                   ether3
                                                                   ether4
                                                                   switch1-cpu



# may/27/2018 15:26:18 by RouterOS 6.42.3
# model = RouterBOARD 952Ui-5ac2nD
/interface ethernet switch port
set 0 default-vlan-id=1 vlan-header=add-if-missing vlan-mode=secure
set 1 default-vlan-id=20 vlan-header=always-strip vlan-mode=secure
set 2 default-vlan-id=20 vlan-header=always-strip vlan-mode=secure
set 3 default-vlan-id=20 vlan-header=always-strip vlan-mode=secure
set 5 vlan-mode=fallback



 #   NAME                                SWITCH                                VLAN-MODE VLAN-HEADER    DEFAULT-VLAN-ID
 0   ether1                              switch1                               secure    add-if-missing               1
 1   ether2                              switch1                               secure    always-strip                20
 2   ether3                              switch1                               secure    always-strip                20
 3   ether4                              switch1                               secure    always-strip                20
 4   ether5                              switch1                               disabled  leave-as-is                  0
 5   switch1-cpu                         switch1                               fallback  leave-as-is                  0

I’ve left ether5 unconfigured in order to access it.
So basically, when ether1 is connected and ether5 disconnected, the device cannot pick up a DHCP lease - the RB3011 just states ‘offered’
When ether5 is connected and ether1 disconnected,ether5 picks up an IP from the RB3011 is expected.

What puzzles me is I have the exact same config on my hAPac & RB750 and it works fine.

952Ui-5ac2nD has switch chip 8227, you can’t have hybrid ports on this model, the port has to be either tagged, or access port, not both

Thanks for the reply.
So if I read that correctly, I can’t have a trunk/more than 1 vlan on ether1?

Tagged = Trunk Port
Untagged = Access Port
Tagged + Untagged = Hybrid Port

With this specific switch chip AR8227 in Mikrotik, any port can be:
A member of single or multiple tagged vlan’s (Trunk) OR A member of a single untagged vlan (Access) BUT Cant be member of both tagged and untagged vlan’s (Hybrid)