Help! VLANs only working on sfp1 port

Hi I am using a CRS305-1G-4S+. Here is my physical port configuration:

  • ether1: AP
  • sfp1: rj45/ into AP
  • sfp2: rj45/ into AP
  • sfp3: rj45/ into AP
  • sfp4: fiber/ uplink

I have needs to trunk about 600 vlans spread across vlanid 1000-4000 (using PPSK to send clients to vlans). There are a few more switches along the path all trunked in the same way, untill it hits a unifi dream machine which handles the vlans.

I turned on vlan filtering on the bridge, and tagged the bridge and every port to vlans 1000-4000. If I only turn on the AP connected to sfp1, all my vlans trunk (all PPSK work and set me into the right vlan). However, if I try to use an AP on another port, or the ethernet port, the PPSK never lets me connect. Using a netally cable tester I can see that each port has all vlans on it. Config posted below.

2025-10-20 07:46:23 by RouterOS 7.20.2

software id = U9JY-0PYD

model = CRS305-1G-4S+

serial number = edited

/interface bridge
add admin-mac=74:4D:28:D8:01:A2 auto-mac=no comment=defconf name=bridge
vlan-filtering=yes
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=sfp-sfpplus1
add bridge=bridge comment=defconf interface=sfp-sfpplus2
add bridge=bridge comment=defconf interface=sfp-sfpplus3
add bridge=bridge comment=defconf interface=sfp-sfpplus4
/interface bridge vlan
add bridge=bridge tagged=
bridge,ether1,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4
vlan-ids=2-4000
/ip address
add address=192.168.24.160/21 interface=bridge network=192.168.24.0
/ip route
add gateway=192.168.24.2
/system identity
set name=Spare
/system swos
set address-acquisition-mode=static allow-from-ports=p1 static-ip-address=
192.168.100.22

It's not related to your problem, but don't do this with the current configuration:

Remove bridge from the tagged list of the /interface bridge vlan entry. There is no reason to put it there.

update. I put the above switch on our dev network and all ports worked as expected. This must mean something in the field is causing this issue were only sfp1 port works?

If anyone has ideas id love to hear them! thanks in advance everyone :slight_smile: