SIP provider not seeing MAC address from a VM with a SIP trunk attached

I currently run a cloud and managed service provider company. Among the services I offer is a hosted PABX/Callcenter.

For that, customers purchase a debian 10 vm from me, and I add an extra NIC interface on the VM for SIP traffic, from an ISP called Safaricom.

What happens on my end as the provider, is I get a cross connection from Safaricom to my rack at the data center, and I connect that fiber optic cable via a fiber SFP (Huawei, 155m,15km,SM) to my switch/router.

This is a description of my topology.

Perimeter Mikrotik router CCR2116-12G-4S+ - Here is where I connect internet uplinks and the Safaricom interconnection for the SIP trunks

Frontplane Netgear switch - This allows my 3 servers/hosts to access the internet as well as any vlans/networks from the mikrotik router

Backplane switch - This is only used for the 3 servers/hosts to communicate to each other. It has no other purpose and does not connect to the internet or any other network.

3 servers/hosts - these servers run a virtualization OS that allows me to create the VMs that I then sell to my customers. The servers connect to the mikrotik via the interface NGFrontPL_ether11 on the mikrotik.

For the clients to be able to get a Safaricom sip trunk to make & receive calls, I cascade the network as follows:

The fiber cross connect cable from Safaricom connects to my router via the interface sfp-sfpplus3-Safaricom. This will be a trunk port as it will carry multiple vlans. For every SIP a customer purchases from Safaricom, they are given as a vlan which looks like below. I will have around 40 SIP vlans running on that conection to Safaricom. Lets use the SIP trunk for ClientA as an example.

vlan 2434

name ClientA-714169

address 10.221.80.22

netmask 255.255.255.252

(in this case, for this sip, its gateway is 10.221.80.22, as that will be at the other end at Safaricom’s network.10.221.80.20 will be the broadcast ip)

The issue is when I try to ping the gateway IP 10.221.80.21 from the Debian 10 vm, it fails.
And when I run the command ‘arp’ from the VM, I get this, showing that I cannot learn Safaricom’s MAC address for the SIP traffic. So layer 2 is still down, seems like.

Address HWtype HWaddress Flags Mask Iface

10.101.0.1ether dc:2c:6e:d6:a3:f1 C ens3

10.221.80.21(incomplete) ens4

I need it to come up, so that I can ping the gateway.
Any assistance will be appreciated.