Thank you. I’ve read http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1 That’s how I’ve gotten this far. I thought I had done everything suggested by the post. My use case may be a little different? I don’t need the VLANs to escape the CRS326. My uplink to the USG, ether1, is a routed interface.
I believe my only deviation was to not set frame-types=admit-only-vlan-tagged. I am using admit all. And I have PVID set to values other than 1. I’ll make that adjustment and report back.