Hybrid VLAN again

Is there no-one who can provide help with this?

RouterOS 6.27 on an RB2011


Unifi APAC

SSID 1
SSID 2 -------------------
SSID 3 - tag VLAN 3 ---------G2-----RB2011

I want to bridge the traffic from port G2 to bridge-local as usual.

Traffic that comes in tagged as VLAN3 should be separated to a separate bridge bridge-VLAN3 (and get its own DHCP)

Similary, return traffic to that SSID3 should get tagged in bridge-VLAN3 and exit G2 tagged, while traffic fo SSID2 should leave
untagged.

I am unable to get this to work…

Hi
sorry i can not fully explain your solution because of my time limitation
You could use Bridge/Firewall and Bridge/Nat to get to it , because your network it bridged or use IP/Firewall , but you must force ROS to use IP Firewall for bridged interfaces by enbaling Use IP Firewall on Bridge Setting.