You have not defined all the vlans.
Where is their ip address, ip pool, dhcp-server and dhcp-server-network settings??
/interface bridge port
add bridge=bridge comment=defconf frame-types=
admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=
ether2 pvid=30
WHY, ether2 is stated on your diagram as a trunk port!! Should be
add bridge=bridge comment=defconf frame-types=
admit-only-tagged ingress-filtering=yes interface=
ether2
Same FOR ETHER3 to a managed switch!~!!
add bridge=bridge comment=defconf frame-types=
admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=
ether3 pvid=30
Seems reasonable for ether4,5 and sfp1, assuming all going to dumb devices!
add bridge=bridge comment=defconf frame-types=
admit-only-untagged-and-priority-tagged interface=ether4 pvid=30
add bridge=bridge comment=defconf frame-types=
admit-only-untagged-and-priority-tagged interface=ether5 pvid=30
add bridge=bridge comment=defconf frame-types=
admit-only-untagged-and-priority-tagged interface=sfp1 pvid=30
NOTE: FOR BOTH ETHER2 and ETHER3, if you wanted somehow for them to be hybrid vlans to accept untagged vlan30 traffic, then you should not use any frame delineation (meaning accepting all frames). Furthermore if vlan30 is your managment vlan (and all devices should get an IP from this managment vlan, what you want is to tag them with vlan30 not untag them, in other words keeep them as straight trunk ports with only tagged frames allowed.
As for bridge vlans…Cannot have two untagged vlans on same etherport!!!
Where is vlan13 defined as an access port on your bridge port setup??
/interface bridge vlan
add bridge=bridge comment=“NetAdmin VLAN” tagged=bridge untagged=
ether4,ether5,sfp1 vlan-ids=30
add bridge=bridge comment=“DevAdmin VLAN” tagged=bridge untagged=
ether4,ether5,sfp1 vlan-ids=13
You really need to use this reference.
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1