VLAN Access Ports CRS326-24G-2S+

RouterOS General
1

I recently purchased the CRS326-24G-2S-2S+. I an relatively new to Mikrotik. I have gotten very frustrated with trying to get VLAN Access ports working. I am using Winbox.I have surmised the configuration examples I have found and used are outdated for the CRS326. I have setup using a master slave configuration but appears this is not workable for the CRS326.
So far I have internet connectivity, all vlans working on WIFI, but no access to the correct VLANS on the access ports ether9-16.

Issues
→ I cannot get ether 9-16 to obtain an IP address from VLAN 10, they obtain an IP from Mgmt network (10.1.1.1/24), I can access the internet from these ports.
→ I will need to be able to access VLAN 10 from VLAN 20 but not vice versa.

Here is my config:
RouterOS 6.40.4
ether1 = Firewall to WAN connectivity (10.1.2.1/24)
ether2 = LAN master port; Mgmt VLAN = 10.1.1.1/24)
VLAN10 =10.1.10.1/24
VLAN20=10.1.20.1/24
VLAN30= 10.1.30.1/24
ether3 = UNIFI AP PRO 01 (using VLAN 10,20,30)
ether4 = UNIFI AP PRO 02 (using VLAN 10,20,30)

ether9-16 = Need access to VLAN 10
->These ports are slaved to ether2 (master)
->I added these ports to VLAN under Switch/VLAN menu

Any help or direction would be greatly appreciated.
John

2

/export compact

paste relevant section

3

I upgraded to Router OS 6.41rc52.

I can definitely see changes. It replaced the Master slave configuration with a Bridge. Ether ports 3 and 4 connect to 2 access points with 3 VLANS (10,20,30) assign which are working fine, I am not sure how?

I could use help on the following:
+I am trying to create access ports for VLAN 10 for ether ports 9-16.
+understand how Access Points are accessing VLANS

Attached is export compact
Thanks
John

4

In an attempt to get access ports working, I removed the bridge and created re-created. I followed the wiki (https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_VLAN_Filtering)I used ether16 as my example to add vlan 10. I was unable to obtain a vlan 10 ip address 10.1.10.x. I can only get a mgmt LAN address e.g. 10.1.1.243, I am perplexed.

When I added VLAN filtering to the Bridge, I lost all connectivity to the internet and the dhcp servers stopped handing out addresses.

Attached is the most recent export compact.