VLAN bridge troubles

I have the following config:

Eth1 connected to provider with 3 subnets active.

Sub1 - has host ip assigned at MT router, handles some BGP routes, ipsec vpn, etc.

Sub2 - is a /30 with 1 host at the provider, and the other running on an internal switch on vlan 4 of eth2. I have placed a vlan4 virtual interface on eth2, and put it in a bridge with eth1 - this works fine.

Sub3 - is an additional /30 setup with the provider as sub2 is. Internal host is on the same internal switch on vlan5 connected to MT router on the same eth2. When I add the vlan5 virtual interface on eth2 to the same bridge as eth1 and the vlan4 virtual interface handling vlan4..I lose external connectivity to the internal host on vlan4.

I’m hoping someone can explain why this is occuring. I’m considering reconfiguring the switch so both /30 subs run on vlan 4, but that doesn’t seem ideal. I have no control over external config for these subnets.

EDIT: Sorry, I intended to post diagram / config sooner. The relevant config + network topology is below.

Connectivity to “SERVER 1” in the diagram is lost when this bridge port is enabled:

add bridge=bridgeVLAN4-VLAN5 disabled=yes interface=vlan5

Config snippets:


/interface ethernet
/interface vlan
add interface=eth2 loop-protect=on name=vlan4 vlan-id=4
add interface=eth2 loop-protect=on name=vlan5 vlan-id=5
/ip address
add address=[sub1.host2IP]/29 disabled=yes interface=eth1 network=[sub1]/29
/interface bridge
add name=bridgeVLAN4-VLAN5
/interface bridge port
add bridge=bridgeVLAN4-VLAN5 hw=no interface=eth1
add bridge=bridgeVLAN4-VLAN5 interface=vlan4
add bridge=bridgeVLAN4-VLAN5 disabled=yes interface=vlan5

x.jpg

Diagram and code posted would be helpful.

Sorry, Edited post to include diagram and config.

Since you have connected VLAN to physical interface and not to the bridge, it looks like you are using the old way (RouterOS <6.41) to configure your VLAN. Look at this thread to see and get some idea on how to do it with RouterOS >= 6.41
http://forum.mikrotik.com/t/sofware-vlan-bridge-on-ruteros-explained/122534/1