Meraki AP default VLAN99 not working on CRS112-9P-4S

I’m switching (heheh) from a Cisco CBS250-16P-2G to a CRS112-8P-4S. I tried to reconstruct the config on the CRS. I have a few issues. The first one being the most “urgent” and that is that the Meraki AP does not get an IP from the managemet range (should be untagged in vlan99). Clients do get an IP from the LAN (100). Can’t get my head around what is going on and why this is not working

for reference: the switch is sitting between two others: TANK (sfp11) and MOUSE (eth7)

Any clues ?

# 2025-06-11 09:07:27 by RouterOS 7.19.1
# software id = K1LY-BX7I
#
# model = CRS112-8P-4S
/interface bridge
add admin-mac=F4:1E:57:B4:4F:BB auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether1 ] name=ether1_SLZB-06M rx-flow-control=auto tx-flow-control=auto
set [ find default-name=ether2 ] name=ether2_mu-so poe-out=off
set [ find default-name=ether3 ] name=ether3_WAP-west
set [ find default-name=ether4 ] name=ether4_appleTV poe-out=off
set [ find default-name=ether5 ] disabled=yes poe-out=off
set [ find default-name=ether6 ] name=ether6_WAP-noord
set [ find default-name=ether7 ] name="ether7<>[MT] mouse"
set [ find default-name=ether8 ] name=ether8_bureau_boven poe-out=off
set [ find default-name=sfp9 ] disabled=yes
set [ find default-name=sfp10 ] disabled=yes
set [ find default-name=sfp11 ] name="sfp11<>[MT] tank"
set [ find default-name=sfp12 ] disabled=yes
/interface vlan
add interface=bridge name=vlanif-99-mgt vlan-id=99
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge interface=ether1_SLZB-06M
add bridge=bridge interface=ether2_mu-so
add bridge=bridge interface=ether3_WAP-west
add bridge=bridge interface=ether4_appleTV
add bridge=bridge interface=ether5
add bridge=bridge interface=ether6_WAP-noord
add bridge=bridge interface="ether7<>[MT] mouse"
add bridge=bridge interface=ether8_bureau_boven
add bridge=bridge interface=sfp9
add bridge=bridge interface=sfp10
add bridge=bridge interface="sfp11<>[MT] tank"
add bridge=bridge interface=sfp12
/interface ethernet switch egress-vlan-tag
add comment=mgmt tagged-ports="switch1-cpu,ether7<>[MT] mouse,sfp11<>[MT] tank" vlan-id=99
add comment=LAN tagged-ports="ether3_WAP-west,ether6_WAP-noord,ether7<>[MT] mouse,sfp11<>[MT] tank" vlan-id=100
add comment=transit tagged-ports="ether7<>[MT] mouse,sfp11<>[MT] tank" vlan-id=500
/interface ethernet switch ingress-vlan-translation
add comment=LAN customer-vid=0 new-service-vid=100 ports=ether1_SLZB-06M,ether4_appleTV
add comment=MGMT customer-vid=0 new-service-vid=99 ports=ether3_WAP-west,ether6_WAP-noord
/interface ethernet switch vlan
add comment=LAN ports="ether1_SLZB-06M,ether3_WAP-west,ether4_appleTV,ether6_WAP-noord,ether7<>[MT] mouse,sfp11<>[MT] tank" vlan-id=100
add comment=transit ports="ether1_SLZB-06M,ether7<>[MT] mouse,sfp11<>[MT] tank" vlan-id=500
add comment=mgmt ports="switch1-cpu,ether3_WAP-west,ether6_WAP-noord,ether7<>[MT] mouse,sfp11<>[MT] tank" vlan-id=99
/ip address
add address=10.0.99.15/25 interface=vlanif-99-mgt network=10.0.99.0
/ip dns
set servers=1.1.1.1
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=10.0.99.1 routing-table=main suppress-hw-offload=no
/ip service
set ftp disabled=yes
set telnet disabled=yes
/snmp
set enabled=yes location=garage src-address=10.0.99.15
/system clock
set time-zone-name=Europe/Brussels
/system identity
set name=cypher-mt
/system routerboard settings
set enter-setup-on=delete-key

this was the config for one of those meraki ports on the Cisco switch

interface GigabitEthernet5
 flowcontrol auto 
 description "AP noord"
 switchport mode trunk 
 switchport trunk native vlan 99 
 switchport trunk allowed vlan 99-100 
 green-ethernet energy-detect

When you connect a pc instead of a laptop…does it get an IP address?
Can you supply a netowkr diagram showing all VLAN’s?

That’s one thing I didn’t check. The laptop doesn’t get an IP address in the 99 vlan either.

I changed the Meraki VLAN to tagged VLAN 99 instead of untagged. It is now working. Seems like the CRS112 doesn’t like “hybrid” ports, or whatever you want to call those.

Not had an issue with them in the past running RouterOS v6. Likely the use of new-service-vid= rather than new-customer-vid= under /interface ethernet switch ingress-vlan-translation is incorrect.

Still searching for the differences from the documentation and your config:
https://help.mikrotik.com/docs/spaces/ROS/pages/103841836/CRS1xx+2xx+series+switches+examples#CRS1xx/2xxseriesswitchesexamples-Example2(TrunkandHybridPorts)

/interface ethernet switch egress-vlan-tag
add comment=mgmt tagged-ports="switch1-cpu,ether7<>[MT] mouse,sfp11<>[MT] tank" vlan-id=99
add comment=LAN tagged-ports="ether3_WAP-west,ether6_WAP-noord,ether7<>[MT] mouse,sfp11<>[MT] tank" vlan-id=100
add comment=transit tagged-ports="ether7<>[MT] mouse,sfp11<>[MT] tank" vlan-id=500



/interface ethernet switch ingress-vlan-translation
add comment=LAN customer-vid=0 new-service-vid=100 ports=ether1_SLZB-06M,ether4_appleTV
add comment=MGMT customer-vid=0 new-service-vid=99 ports=ether3_WAP-west,ether6_WAP-noord

You can’t have port ether3_WAP-west,ether6_WAP-noord both tagged (egress-vlan-tag) and untagged (ingress-vlan-translation).

You should change it to this (remove the accesspoint ports from egress-vlan-tag):

/interface ethernet switch egress-vlan-tag
add comment=mgmt tagged-ports="switch1-cpu,ether7<>[MT] mouse,sfp11<>[MT] tank" vlan-id=99
add comment=LAN tagged-ports="ether7<>[MT] mouse,sfp11<>[MT] tank" vlan-id=100
add comment=transit tagged-ports="ether7<>[MT] mouse,sfp11<>[MT] tank" vlan-id=500

The original config has ether3_WAP-west,ether6_WAP-noord tagged (under egress-vlan-tag) for VLAN 100 and untagged (under ingress-vlan-translation) for VLAN 99 which is fine, per my previous post the issue appears to be the ingress translation settings using the incorrect tag type.

My apologies…seems the snotty brain is messing things up.