Hi,
I try using this turtorial https://wiki.mikrotik.com/wiki/Manual:Basic_VLAN_switching. Everything works great on wired ports (hw.offload works) but wifi is solw wifi speed test 1/1mbps on wired ports 100/50mbps.
Here is my config:
#RouterOS 6.46.2
# model = CRS125-24G-1S-2HnD
/interface bridge
add fast-forward=no name=bridge-lan
/interface ethernet
set [ find default-name=ether1 ] comment="dovod(mt-otroska)"
set [ find default-name=ether5 ] comment="mt-link (urska)"
set [ find default-name=ether6 ] comment=tosic-server-ilo
set [ find default-name=ether7 ] comment=tosic-server-lan1
set [ find default-name=ether8 ] comment="tosic-server-lan2(se ni)"
set [ find default-name=ether9 ] comment=rpi-tv-kuhinja
set [ find default-name=ether10 ] comment=tv-kuhinja
set [ find default-name=ether11 ] comment=iptv-siol
set [ find default-name=ether12 ] comment="qmax(ogrevanje)"
set [ find default-name=ether13 ] comment=kuhinja-16-relay-controler
set [ find default-name=ether14 ] comment=hassos-rpi3
set [ find default-name=ether15 ] comment=ekran-its-ai
set [ find default-name=ether16 ] comment="klan2(kuhija-vt2-od-okna)"
set [ find default-name=sfp1 ] comment="dovod(mt-otroska)"
/interface vlan
add comment="upravljalni - vlan99" interface=bridge-lan name=mgmt vlan-id=99
/interface ethernet switch
set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports="ether1,ether2,ether\
3,ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13,\
ether14,ether15,ether16,ether17,ether18,ether19,ether20,ether21,ether22,ethe\
r23,ether24,sfp1"
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed \
mode=dynamic-keys name=tosic supplicant-identity=""
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed \
mode=dynamic-keys name=leal supplicant-identity=""
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed \
mode=dynamic-keys name=auto supplicant-identity=""
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed \
mode=dynamic-keys name=guest supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] amsdu-limit=2048 band=2ghz-g/n channel-width=\
20/40mhz-eC country=slovenia disabled=no distance=indoors frequency=2437 \
installation=indoor mode=ap-bridge multicast-helper=disabled name=\
wlan-tosic radio-name=mt-kuhinja security-profile=tosic ssid=itsHOME \
tx-power-mode=all-rates-fixed vlan-id=11 vlan-mode=use-tag wmm-support=\
enabled wps-mode=disabled
add keepalive-frames=disabled mac-address=4E:5E:0C:90:5D:E5 master-interface=\
wlan-tosic multicast-buffering=disabled multicast-helper=disabled name=\
wlan-auto security-profile=auto ssid=itsAUTO vlan-id=101 vlan-mode=use-tag \
wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add keepalive-frames=disabled mac-address=4E:5E:0C:90:5D:E6 master-interface=\
wlan-tosic multicast-buffering=disabled multicast-helper=disabled name=\
wlan-guest security-profile=guest ssid=itsGUEST vlan-id=201 vlan-mode=\
use-tag wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add keepalive-frames=disabled mac-address=4E:5E:0C:90:5D:E4 master-interface=\
wlan-tosic multicast-buffering=disabled multicast-helper=disabled name=\
wlan-leal security-profile=leal ssid=its vlan-id=12 vlan-mode=use-tag \
wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add keepalive-frames=disabled mac-address=4E:5E:0C:90:5D:E7 master-interface=\
wlan-tosic multicast-buffering=disabled multicast-helper=disabled name=\
wlan-mgmt security-profile=leal ssid=itsMGMT vlan-id=99 vlan-mode=use-tag \
wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/interface bridge port
add bridge=bridge-lan interface=ether1
add bridge=bridge-lan interface=ether2
add bridge=bridge-lan interface=ether3
add bridge=bridge-lan interface=ether4
add bridge=bridge-lan interface=ether5 unknown-multicast-flood=no
add bridge=bridge-lan interface=ether6
add bridge=bridge-lan interface=ether7
add bridge=bridge-lan interface=ether8
add bridge=bridge-lan interface=ether9
add bridge=bridge-lan interface=ether10
add bridge=bridge-lan interface=ether11
add bridge=bridge-lan interface=ether12
add bridge=bridge-lan interface=ether13
add bridge=bridge-lan interface=ether14
add bridge=bridge-lan interface=ether15
add bridge=bridge-lan interface=ether16
add bridge=bridge-lan interface=ether17
add bridge=bridge-lan interface=ether18
add bridge=bridge-lan interface=ether19
add bridge=bridge-lan interface=ether20
add bridge=bridge-lan interface=ether21
add bridge=bridge-lan interface=ether22
add bridge=bridge-lan interface=ether23
add bridge=bridge-lan interface=ether24
add bridge=bridge-lan interface=sfp1
add bridge=bridge-lan interface=wlan-leal
add bridge=bridge-lan interface=wlan-guest
add bridge=bridge-lan interface=wlan-mgmt
add bridge=bridge-lan interface=wlan-auto
add bridge=bridge-lan interface=wlan-tosic
/interface ethernet switch egress-vlan-tag
add tagged-ports=ether1,ether5,switch1-cpu vlan-id=99
add tagged-ports=ether1,ether5,switch1-cpu vlan-id=11
add tagged-ports=ether1,ether5,switch1-cpu vlan-id=301
add tagged-ports=ether1,ether5,switch1-cpu vlan-id=101
add tagged-ports=ether1,ether5,switch1-cpu vlan-id=3999
add tagged-ports=ether1,ether5,switch1-cpu vlan-id=201
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=11 ports=ether10
add customer-vid=0 new-customer-vid=101 ports=ether13
add customer-vid=0 new-customer-vid=301 ports=ether9
add customer-vid=0 new-customer-vid=3999 ports=ether11
add customer-vid=0 new-customer-vid=101 ports=ether12
add customer-vid=0 new-customer-vid=11 ports=ether14
add customer-vid=0 new-customer-vid=11 ports=ether15
add customer-vid=0 new-customer-vid=11 ports=ether16
add customer-vid=0 new-customer-vid=11 ports=ether7
add customer-vid=0 new-customer-vid=99 ports=ether6
/interface ethernet switch vlan
add ports=ether1,ether5,ether6,switch1-cpu vlan-id=99
add ports=ether1,ether5,ether7,ether10,ether14,ether15,ether16,switch1-cpu \
vlan-id=11
add ports=ether1,ether5,ether9,switch1-cpu vlan-id=301
add ports=ether1,ether5,ether12,ether13,switch1-cpu vlan-id=101
add ports=ether1,ether5,ether11,switch1-cpu vlan-id=3999
add ports=ether1,ether5,switch1-cpu vlan-id=201
/ip address
add address=192.168.99.253/24 interface=mgmt network=192.168.99.0
/ip dns
set servers=8.8.8.8,8.8.4.4
/ip route
add distance=1 gateway=192.168.99.254
/lcd interface pages
set 0 interfaces=wlan-tosic
/system clock
set time-zone-name=Europe/Ljubljana
/system identity
set name=mt-kuhinja
Here is configuration where I am using different approach but I lose hw.offload. Wifi internet speed 20/20mbps and wired 100/50mbps.
#RouterOS 6.46.2
# model = CRS125-24G-1S-2HnD
# serial number = 49C604C44C35
/interface bridge
add fast-forward=no name=bridge-lan vlan-filtering=yes
/interface vlan
add comment="upravljalni - vlan99" interface=bridge-lan name=mgmt vlan-id=99
/interface ethernet switch
set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports="ether1,ether2,ether\
3,ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13,\
ether14,ether15,ether16,ether17,ether18,ether19,ether20,ether21,ether22,ethe\
r23,ether24,sfp1"
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=\
tkip,aes-ccm management-protection=allowed mode=dynamic-keys name=tosic \
supplicant-identity="" unicast-ciphers=tkip,aes-ccm
add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=\
tkip,aes-ccm management-protection=allowed mode=dynamic-keys name=leal \
supplicant-identity="" unicast-ciphers=tkip,aes-ccm
add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=\
tkip,aes-ccm management-protection=allowed mode=dynamic-keys name=auto \
supplicant-identity="" unicast-ciphers=tkip,aes-ccm
add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=\
tkip,aes-ccm management-protection=allowed mode=dynamic-keys name=guest \
supplicant-identity="" unicast-ciphers=tkip,aes-ccm
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=slovenia disabled=no \
distance=indoors installation=indoor mode=ap-bridge multicast-helper=\
disabled name=wlan-tosic radio-name=mt-lasko-dnevna-sp-wifi \
security-profile=tosic ssid=itsHOME vlan-id=11 vlan-mode=use-tag wps-mode=\
disabled
add disabled=no keepalive-frames=disabled mac-address=4E:5E:0C:90:5D:E5 \
master-interface=wlan-tosic multicast-buffering=disabled multicast-helper=\
disabled name=wlan-auto security-profile=auto ssid=itsAUTO vlan-id=101 \
vlan-mode=use-tag wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add disabled=no keepalive-frames=disabled mac-address=4E:5E:0C:90:5D:E6 \
master-interface=wlan-tosic multicast-buffering=disabled multicast-helper=\
disabled name=wlan-guest security-profile=guest ssid=itsGUEST vlan-id=201 \
vlan-mode=use-tag wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add disabled=no keepalive-frames=disabled mac-address=4E:5E:0C:90:5D:E4 \
master-interface=wlan-tosic multicast-buffering=disabled multicast-helper=\
disabled name=wlan-leal security-profile=leal ssid=its vlan-id=12 \
vlan-mode=use-tag wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add disabled=no keepalive-frames=disabled mac-address=4E:5E:0C:90:5D:E7 \
master-interface=wlan-tosic multicast-buffering=disabled multicast-helper=\
disabled name=wlan-mgmt security-profile=leal ssid=itsMGMT vlan-id=99 \
vlan-mode=use-tag wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/interface bridge port
add bridge=bridge-lan comment=dovod-otroska interface=ether1
add bridge=bridge-lan interface=ether2
add bridge=bridge-lan interface=ether3
add bridge=bridge-lan interface=ether4
add bridge=bridge-lan comment=odovod-ursi interface=ether5 \
unknown-multicast-flood=no
add bridge=bridge-lan comment=server-mini-ilo interface=ether6 pvid=99
add bridge=bridge-lan comment=server-mini-lan1 interface=ether7 pvid=11
add bridge=bridge-lan interface=ether8
add bridge=bridge-lan interface=ether9 pvid=301
add bridge=bridge-lan comment=kuhinja-tv interface=ether10 pvid=11
add bridge=bridge-lan interface=ether11 pvid=3999
add bridge=bridge-lan comment=ogrevanje interface=ether12 pvid=101
add bridge=bridge-lan comment=iptv interface=ether13 pvid=301
add bridge=bridge-lan comment=hassos-rpi interface=ether14 pvid=11
add bridge=bridge-lan comment=its-ai interface=ether15 pvid=11
add bridge=bridge-lan comment="vti\E8nica-okno2" interface=ether16 pvid=11
add bridge=bridge-lan interface=ether17
add bridge=bridge-lan interface=ether18
add bridge=bridge-lan interface=ether19
add bridge=bridge-lan interface=ether20
add bridge=bridge-lan interface=ether21
add bridge=bridge-lan interface=ether22
add bridge=bridge-lan interface=ether23
add bridge=bridge-lan interface=ether24 pvid=99
add bridge=bridge-lan interface=sfp1
add bridge=bridge-lan interface=wlan-tosic
add bridge=bridge-lan interface=wlan-leal
add bridge=bridge-lan interface=wlan-auto pvid=101
add bridge=bridge-lan interface=wlan-guest
add bridge=bridge-lan interface=wlan-mgmt
/interface bridge vlan
add bridge=bridge-lan tagged=ether1,ether5,wlan-auto vlan-ids=101
add bridge=bridge-lan tagged=ether1,ether5,wlan-tosic vlan-ids=11
add bridge=bridge-lan tagged=ether1,ether5,wlan-leal vlan-ids=12
add bridge=bridge-lan tagged=ether1,ether5 vlan-ids=301
add bridge=bridge-lan tagged=ether1,ether5,wlan-guest vlan-ids=201
add bridge=bridge-lan tagged=ether1,ether5,bridge-lan,wlan-mgmt vlan-ids=99
add bridge=bridge-lan tagged=ether1,ether5 vlan-ids=3999
/interface ethernet switch egress-vlan-tag
add disabled=yes tagged-ports=ether1,switch1-cpu vlan-id=99
add disabled=yes tagged-ports=ether1 vlan-id=11
add disabled=yes tagged-ports=ether1 vlan-id=301
add disabled=yes tagged-ports=ether1 vlan-id=101
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 disabled=yes new-customer-vid=99 ports=ether24
add customer-vid=0 disabled=yes new-customer-vid=11 ports=ether10
add customer-vid=0 disabled=yes new-customer-vid=11 ports=ether13
add customer-vid=0 disabled=yes new-customer-vid=301 ports=ether9
add customer-vid=0 disabled=yes new-customer-vid=301 ports=ether11
add customer-vid=0 disabled=yes new-customer-vid=101 ports=ether12
add customer-vid=0 disabled=yes new-customer-vid=11 ports=ether14
add customer-vid=0 disabled=yes new-customer-vid=11 ports=ether15
/interface ethernet switch vlan
add disabled=yes ports=ether1,ether5,ether24,switch1-cpu vlan-id=99
add disabled=yes ports=ether1,ether5,ether10,ether13,ether14,ether15 vlan-id=11
add disabled=yes ports=ether1,ether5,ether9,ether11 vlan-id=301
add disabled=yes ports=ether1,ether5,ether12 vlan-id=101
/ip address
add address=192.168.99.253/24 interface=mgmt network=192.168.99.0
/ip dns
set servers=8.8.8.8,8.8.4.4
/ip route
add distance=1 gateway=192.168.99.254
/lcd interface pages
set 0 interfaces=wlan-tosic
/system clock
set time-zone-name=Europe/Ljubljana
/system identity
set name=mt-kuhinja