Remote Access to CRS309

I did a system reset of CRS and configured all the interfaces in bridge1 with VLAN filtering set to Yes. After that created a new VLAN and added few SFP ports and bridge to that VLAN , followed by interface vlan creation and ip address assignment.

  1. From router i can reach devices connected in SFP ports via VLAN 2 (Tagging works fine)
    2)From router i cannot reach my laptop via ether port and vice versa

BRIDGE VLAN-IDS CURRENT-TAGGED CURRENT-UNTAGGED

0 bridge1 2 bridge1
sfp-sfpplus1
sfp-sfpplus2
1 bridge1 1 ether1 bridge1
sfp-sfpplus1

What am i doing wrong ? AFAIK from my laptop i should be able to reach ether1 (There is no tagging in this process)

From what you posted it’s not clear which port is tagged member and which is untagged member. Better post output of /interface bridge export and use [__code] environment to improve readability. Indicate which interface has LAN IP address configured.