RB2011UiAS-2hnD - Simple VLAN Question

Hello,

The RB2011UiAS-2hnD has 5 x gigabit and 5 x fast ethernet ports. Firmware version 6.33

Ports 1-5 are gigabit, ports 6-10 are fast ethernet. I’ll refer to the ports as gigE-1 or fastE-6 etc in this post.

What I’m trying to accomplish is receive 802.11q tagged packets on on fastE-6 then deliver this as a 802.11q Tagged VLAN on ports gigE-4 and gigE-5.
wat.png
I’m just wondering, is this possible? It appears that ports gigE-1 to gigE-5 is one switch; and fastE-6 to fastE-10 is another.

Here’s what I’ve configured so far:

[] Go to Switch > VLAN and created my desired VLAN (in this case VLAN 421) and configured it on ports gigE-4 & gigE-5
[
] In the same menu also create VLAN 421 and configure it for port fastE-6
[] In Bridge > Ports, ensured fastE-6 is part of the same bridge as ports gigE-1 through gigE-5
[
] In Switch > Port, I’ve configured all gigE-4, gigE-5 and fastE-6 as “secure” which means if an untagged packet comes through it will be dropped (which is the required behavior).

But I do not have connectivity on VLAN 421 if I’m plugged into port fastE-6. I do however have connectivity on gigE-4 and gigE-5 (which is the expected behavior).

I’ve attached a screenshot of all the relevant config pages below.

What am I missing here?

Is it possible to stretch a vlan across “all” ports on this device or is this device more like two individual managed switches in one?
configz.png