A few things:
- you don’t have dhcp network settings for either IP subnets … I wonder how any of DHCP clients can get usable lease?
- why this firewall rule?
add action=drop chain=input dst-address=192.168.102.1 in-interface=VLAN_Interface - I already mentioned importance of LAN interface list … and this firewall rule is one of those places:
add action=drop chain=input comment=“defconf: drop all not coming from LAN” in-interface-list=!LAN - etc.
If you haven’t already, you may want to read this nice tutorial about VLANs in ROS (hopefully you do understand basic principles of VLANs).