Need some help looking at config

Hi Team,
I need some help with my mikrotik RB2011-Uias-2HnD running version 6.49.17.

This is my setup.
I am running OpnSense in VMware.
I created a trunk port in VMware
Created VLAN using the Parent NIC that I used for the OpnSense VM

LAN port (parent port) IP CIDR 11.27.80.0/24
VLAN50 VLAN using parent port above IP CIDR 11.27.50.0/24 with TAG 50

(VMware hosting OpnSense )
I now then plug in my mikrotik box physically to the port which I configure above (the trunk port). When I do this I can get an IP address from the parent port as I have IP CIDR block allocated and DHCP turned on for the CIDR.

What I wanted to do is have my mikrotik to be on bridge mood and tag all traffic with VLAN50 and get IP address from VLAN50 which is configured in my Opnsense. however for some reason is it getting IP from the trunk port 11.27.80.0/24 instead of 11.27.50.0/24.

I put WLAN also on the same with LAN bridge1 - I have plans to put WLAN on different VLAN.

What am I doing wrong here?

Please see my config below and please help me what I am doing wrong?




# Start logging
/log info "Starting configuration setup"

# Set password for the admin user
/user set 0 name=admin password=xxxx

# Create Bridge
/interface bridge
add name=bridge1

# Add Ports to Bridge
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5

# Create VLAN 50 on Bridge1
/interface vlan
add interface=bridge1 name=vlan50 vlan-id=50

# Assign Static IP to Bridge (for management)
/ip address
add address=10.27.50.2/24 interface=bridge1 network=10.27.50.0

# Set up DNS (using Google's DNS as an example)
/ip dns
set servers=8.8.8.8,8.8.4.4

# Configure DHCP Client on the VLAN 50 Interface (to get IP from OPNsense)
/ip dhcp-client
add interface=vlan50 disabled=no

# Configure Logging (with verbosity and storing logs on disk)
/system logging action
add name=diskbuffered target=disk disk-file-count=10 disk-file-name=logdisk disk-lines-per-file=1000
/system logging
set 0 action=diskbuffered
add topics=info action=diskbuffered
add topics=error action=diskbuffered
add topics=warning action=diskbuffered
add topics=dhcp action=diskbuffered
add topics=interface action=diskbuffered
add topics=firewall action=diskbuffered

# Disable Firewall and NAT Rules (optional if you want pure bridge mode)
/ip firewall filter remove [find]
/ip firewall nat remove [find]

# Add WLAN to the Bridge
/interface wireless
set [ find default-name=wlan1 ] ssid=nodate mode=ap-bridge band=2ghz-b/g/n frequency=2412 security-profile=wlan_security

# Create a Security Profile for WPA/WPA2 with AES CCM
/interface wireless security-profiles
add name=wlan_security authentication-types=wpa-psk,wpa2-psk unicast-ciphers=aes-ccm group-ciphers=aes-ccm mode=dynamic-keys wpa-pre-shared-key=xxx

# Add WLAN1 to the Bridge
/interface bridge port
add bridge=bridge1 interface=wlan1

# Optional: Assign DHCP Client to Bridge (if not already done)
/ip dhcp-client
add interface=bridge1 disabled=no

# Save Configuration
/system scheduler
add interval=1d name=log-rotate on-event="/system logging action set disk-buffered disk-file-count=10 disk-lines-per-file=1000" start-time=startup

I don’t see anywhere in the configuration you provided that VLAN filtering is turned on:

/interface bridge
set bridge1 vlan-filtering=yes

Also, a better option for management access to the router is to remove one port from the bridge and assign it an IP address instead on the whole bridge and when you’re confident enough, you could add it again to the bridge (beforehand VLAN filtering should be disabled) and configure management VLAN