Troubleshooting simple vlans

Hello,
I have a CRS1xx switch with default config.
Ports 1-5 (bridge1) are for public facing servers and the rest 6-24 (bridge2) are for LAN.
Bridge2 has dhcp/nat. Everything seems to be working ok.

Now, I decided to gradually separate ports in bridge2 by vlan switching.
Port 6 is untagged (one PC). Ports 7-8 have tagged traffic coming in from RB962 APs. Config:

/interface vlan add interface=bridge2 name=VLAN100 vlan-id=100
/interface vlan add interface=bridge2 name=VLAN200 vlan-id=200
/ip address add address=192.168.0.1/24 interface=VLAN100
/ip address add address=192.168.1.1/24 interface=VLAN200
/ip dhcp-server add address-pool=POOL100 interface=VLAN100 name=DHCP100
/ip dhcp-server add address-pool=POOL200 interface=VLAN200 name=DHCP200

/interface ethernet switch vlan add ports=switch1-cpu,ether6 vlan-id=100
/interface ethernet switch vlan add ports=switch1-cpu,ether7,ether8 vlan-id=200
/interface ethernet switch ingress-vlan-translation add customer-vid=0 new-customer-vid=100 ports="ether6"

Once I did that, computer and wireless clients got IPs from their respective subnets. Seemed ok.
However after I rebooted CRS1xx the computer connected to port6 had no access to router/internet. I waited until its lease has expired and like minute or two more until it established a connection.
Unlike the computer connected to port6, which loses connection for more that IP lease time, wireless APs connected to ports7-8 are losing and gaining connection randomly (like every few hours or so).

Do you have any suggestion what am I doing wrong? How should I debug this issue?
Maybe it’s happening because I haven’t assigned vlans to other ports and traffic is mixing?
Or maybe it’s because I am not using bridge vlan filtering? (I assume it is not needed as I am using switch vlan)