Untagged Ports on Bridge not working

Hi Team,

I’ve recently purchased a hex POE 5 port routeboard for home.

Have upgraded it to the latest stable Router OS.

I’ve setup a bridge to do layer 2 hardware switching. It works great for my wireless access point over tagged frames.

The problem is no untagged traffic is working. IT’s not picking up DHCP and even if I give my PC a static can’t ping the router.

Setup is like the below

Ether 5 = WAP - Is setup with Vlan IDs for Tagged frames - When connecting to this works great.
Ether 3 and 4 - PC’s (Access ports) , nothing works on these.

Judging on the articles I’ve read my config should work, I’m not sure why it does not. Should I log a support case with Mikrotik?

I have also tried disabling hardware offloading on these ports and using the strip VLAN id feature in the switch however the result was the same

Config below

/interface bridge port
add bridge=bridge-lan comment=defconf interface=ether2
add bridge=bridge-lan comment=defconf interface=ether3 pvid=192
add bridge=bridge-lan comment=defconf interface=ether4 pvid=172
add bridge=bridge-lan comment=defconf interface=ether5

/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface bridge vlan
add bridge=bridge-lan tagged=ether5,bridge-lan untagged=ether3 vlan-ids=
192
add bridge=bridge-lan tagged=ether5,bridge-lan untagged=ether4 vlan-ids=
172
/interface list member
add interface=ether1 list=WAN
add interface=bridge-lan list=LAN

/ip address
add address=192.168.1.1/24 interface=vlan192-gaming network=192.168.1.0
add address=172.16.1.1/24 interface=vlan172-clients network=172.16.1.0
/ip dhcp-client
add disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=8.8.8.8 gateway=192.168.1.1 netmask=24
add address=172.16.1.0/24 dns-server=8.8.8.8 gateway=172.16.1.1netmask=24

Most likely you haven’t set vlan-filtering=yes on the bridge. The name is a bit misleading; in fact, vlan-filtering=yes enables also VLAN tag processing on the bridge ports. With vlan-filtering=no, the pvid values on the /interface bridge port rows are ignored, and no tagging/untagging is done as the frames pass through the bridge ports.

THis is the best reference. Give it a read and then after changing your config post here for a review (what is shown seems okay except as Sindy noted)
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

/export hide-sensitive file=anynameyouwish