Native vlan

RouterOS General
1

Please help me how to configure native vlan 1 to work together with vlan 4, 5, 30.
With the setting below, only vlan 4, 5, 30 works.
When I turn off vlan-filtering, only vlan 1 works.

/interface bridge
add comment=defconf name=bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] name=ether1-vlan1
set [ find default-name=ether2 ] name=ether2-vlan1
set [ find default-name=ether3 ] name=ether3-vlan1
set [ find default-name=ether4 ] name=ether4-vlan1
set [ find default-name=ether5 ] name=ether5-vlan1
set [ find default-name=ether6 ] name=ether6-vlan1
set [ find default-name=ether7 ] name=ether7-vlan4
set [ find default-name=ether8 ] name=ether8-vlan4
set [ find default-name=ether9 ] name=ether9-vlan4
set [ find default-name=ether10 ] name=ether10-vlan4
set [ find default-name=ether11 ] name=ether11-vlan4
set [ find default-name=ether12 ] name=ether12-vlan4
set [ find default-name=ether13 ] name=ether13-vlan5
set [ find default-name=ether14 ] name=ether14-vlan5
set [ find default-name=ether15 ] name=ether15-vlan5
set [ find default-name=ether16 ] name=ether16-vlan5
set [ find default-name=ether17 ] name=ether17-vlan5
set [ find default-name=ether18 ] name=ether18-vlan5
set [ find default-name=ether24 ] name=ether24-TRUNK
set [ find default-name=sfp-sfpplus4 ] name=sfp-sfpplus4-TRUNK
/interface vlan
add interface=bridge name=vlan4 vlan-id=4
add interface=bridge name=vlan5 vlan-id=5
add interface=bridge name=vlan30 vlan-id=30
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge interface=ether1-vlan1
add bridge=bridge interface=ether2-vlan1
add bridge=bridge interface=ether3-vlan1
add bridge=bridge interface=ether4-vlan1
add bridge=bridge interface=ether5-vlan1
add bridge=bridge interface=ether6-vlan1
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether7-vlan4 pvid=4
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether8-vlan4 pvid=4
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether9-vlan4 pvid=4
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether10-vlan4 pvid=4
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether11-vlan4 pvid=4
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether12-vlan4 pvid=4
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether13-vlan5 pvid=5
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether14-vlan5 pvid=5
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether15-vlan5 pvid=5
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether16-vlan5 pvid=5
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether17-vlan5 pvid=5
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=no interface=ether18-vlan5 pvid=5
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=no interface=ether24-TRUNK
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=no interface=sfp-sfpplus4-TRUNK
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface bridge vlan
add bridge=bridge tagged=bridge,ether24-TRUNK,sfp-sfpplus4-TRUNK untagged=ether7-vlan4,ether8-vlan4,ether9-vlan4,ether10-vlan4,ether11-vlan4,ether12-vlan4 vlan-ids=4
add bridge=bridge tagged=bridge,ether24-TRUNK,sfp-sfpplus4-TRUNK untagged=ether13-vlan5,ether14-vlan5,ether15-vlan5,ether16-vlan5,ether17-vlan5,ether18-vlan5 vlan-ids=5
add bridge=bridge tagged=bridge,ether24-TRUNK,sfp-sfpplus4-TRUNK vlan-ids=30
/ip address
add address=10.30.30.101/24 interface=vlan30 network=10.30.30.0
/system identity
set name=Mikrotik
/system note
set show-at-login=no
/system routerboard settings
set boot-os=router-os enter-setup-on=delete-key
/system swos
set address-acquisition-mode=static allow-from-vlan=30 identity=MikroTik static-ip-address=10.30.30.101
2

You might want to consider not using VLAN ID 1.
Have a look at this topic with lots of explanation and examples:
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

3

the network is large and unfortunately vlan1 must remain

4

VLAN 1 should be only used for non tagged traffic. Fire your network architector.

5

What do you mean by ‘works’. ether1-6 will be able to communicate with each other, if VLAN 1 untagged also has to transit the ether24 and sfp-sfpplus4 trunks then change frame-types=admit-only-vlan-tagged to admit-all

Unrelated, there is no need to create /interface vlan and tag VLANs on the bridge-to-CPU port if they are merely passing throught the bridge, not accessing services provided by the CPU itself.