The Problem of InterVLAN Construction of RB1100AHx4 and CRS317-1G-16S+

Hi Lee,
No worries, as long as you dont have any small cameras spying on me (kpop). :slight_smile:

What you are asking to do is very possible!! Thanks for the very nice diagram!

The best reference i can provide is this link, it has very good examples for what you need.
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

Have a read through that and then come back to ask further questions.
Eventually you will have to post a config for us to look at
/export hide-sensitive file=yourconfigmar21

Basically the idea on the router is to create one bridge, all your vlans run on the bridge.
Do not assign DHCP to the bridge, instead assign another vlan to be your MAIN LAN call it VLAN11.
The bridge retains its default pvid=1 setting so we can leave that alone
Same on the Switch, create one bridge all the vlans created are associated on the bridge etc..

Bridge ports are used to identify any ingress rules we need (applicable for access ports, set pvid etc).
interface bridge vlan settings are for egress rules (untagging of access ports) and tagging of vlans to all required ports.
vlan 11 should be tagged to the bridges as well.

Good luck, we will see you soon.