Hotspot doesn't work when attached to slave member of bridge (VLAN)

RouterOS Beginner Basics
1

Hi guys, I have bridge1 with many vlans, one of which is the guest VLAN.

I created a hotspot and tagged it to the guest VLAN interface.

zz1.png
When clients connect to SSID with VLAN99, they get the IP Address just fine, so I know the DHCP server works. When Hotspot is disabled, clients can access the internet.

When hotspot is enabled, the login page does not load. I tried inputting the server address manually 192.168.92.1 and winbox web loads instead of the hotspot login page.

I created a 2nd bridge (on the same mtik), created a hotspot server with the 2nd bridge as interface, it works.

What am I missing? Can’t hotspot server be tagged to a slave (VLAN) member of a bridge?

Thank you

2

I found the problem. If I disable “Use IP Firewall For VLAN”, everything works as it should.

Reading https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge, “use-ip-firewall-for-vlan” is described thus : Send bridged VLAN traffic to also be processed by IP/Firewall. This property is required in case you want to assign Simple Queues or global Queue Tree to VLAN traffic in a bridge.

I do use queue tree, and the priority between office and hotspot traffic is not the same. I will investigate further whether this will have an impact on my Queue Tree.