MikroTik CRS328 blocking macOS updates

Hi folks,

I just purchased a CRS328-24P-4S+RM last week and have been spending time setting it up and tuning things to my liking. I’m very new to networking, so things are slow and there’s definitely lots of trial and error. Yesterday I found that macOS updates on my M1 MacBook Pro as well as my Intel Mac mini fail, specifically with the error “Failed to personalize the software update. Please try again.” I’ve confirmed this is an issue with the switch/my switch configuration as I have plugged in my Mac directly to my ISP modem and downloaded the update without issue. I attempted to update my Mac via terminal and this was the full error:

Failed to download & prepare update: Error Domain=SUOSUErrorDomain Code=201 "Failed to personalize the software update. Please try again." UserInfo={NSLocalizedRecoverySuggestion=An error occurred while downloading the selected updates. Please check your internet connection and try again., NSLocalizedDescription=Failed to personalize the software update. Please try again., NSUnderlyingError=0x600003b9d3b0 {Error Domain=SUMacControllerError Code=7723 "[SUMacControllerErrorPreflightPersonalizeFailed=7723] Failed to perform PreflightPersonalize operation: [MobileSoftwareUpdateErrorDomain(MSU):MSU_ERR_PERSONALIZATION_FAILURE(2)_1_PersonalizationErrorDomain(Personalization):kAMAuthInstallErrorServerNotReachable(11)|NetworkRequired|]" UserInfo={SUMacControllerErrorIndicationsSummary=|NetworkRequired|, SUMacControllerErrorIndicationsMask=1, NSUnderlyingError=0x600003b9ce40 {Error Domain=MobileSoftwareUpdateErrorDomain Code=2 "Could not personalize boot/firmware bundle." UserInfo={NSUnderlyingError=0x600003b9d3e0 {Error Domain=PersonalizationErrorDomain Code=11 "AMAuthInstallBundlePersonalize() failed: Server not reachable" UserInfo=0x60000359eb60 (not displayed)}, NSLocalizedDescription=Could not personalize boot/firmware bundle., target_update=22G74}}, NSLocalizedDescription=Failed to personalize the software update. Please try again., NSDebugDescription=[SUMacControllerErrorPreflightPersonalizeFailed=7723] Failed to perform PreflightPersonalize operation: [MobileSoftwareUpdateErrorDomain(MSU):MSU_ERR_PERSONALIZATION_FAILURE(2)_1_PersonalizationErrorDomain(Personalization):kAMAuthInstallErrorServerNotReachable(11)|NetworkRequired|], SUMacControllerErrorIndicationsDescription=-> Network access is required.}}}

My switch setup is basic. I followed the First Time Configuration guide here: https://help.mikrotik.com/docs/display/ROS/First+Time+Configuration up to the NAT Configuration section (though I skipped the Port Forwarding section). I am also running PiHole on the Mac mini and have set my MikroTik DNS to point to the Mac mini. Everything is working great, except for the macOS updates (and also some weird issues with my Apple TV and connecting to HomeKit). Here are things that I’ve tried while troubleshooting:

1: Momentarily disabled PiHole
2: Disabled all firewall rules
3: Pointed my MikroTik switch DNS to 8.8.8.8
4: Pointed my Mac’s DNS to 8.8.8.8

My RouterBOARD and packages version is: 7.10.2

I would really appreciate any tips or help anyone might be able to give.