Hello,
I know that it was already mentioned here a lot of time, but I am hopeless. I have read documentation, tried it several times, but I am still missing something.
So I have a hEX mikrotik and RB2011. On RB2011 I have tagged VLANs with IP addresses and only one trunk to hEX mikrotik. VLANs 100,101,102. After some troubles I have managed to get VLANs working over VLAN filtering. I can reach from hEX RB2011. Unfortunately, I cannot reach networks behind RB2011 like internet. It looks like traffic is not handled to routing or what ever. Could you please help ? Any idea appriciated.
hEX config
# feb/28/2022 02:18:05 by RouterOS 6.49.3
# software id = NNAW-LZ8G
#
# model = RB750Gr3
# serial number = CC210E478923
/interface bridge
add name=VLAN vlan-filtering=yes
add admin-mac=2C:C8:1B:F4:75:F6 auto-mac=no comment=defconf name=bridge
/interface vlan
add interface=VLAN name=VLAN.vlan100-lan vlan-id=100
add interface=ether5 name=VLAN.vlan102-mgmt vlan-id=102
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=VLAN comment=defconf frame-types=admit-only-untagged-and-priority-tagged interface=ether3 pvid=100
add bridge=VLAN comment=defconf frame-types=admit-only-untagged-and-priority-tagged interface=ether4 pvid=100
add bridge=VLAN comment=defconf frame-types=admit-only-vlan-tagged interface=ether5
/interface bridge vlan
add bridge=VLAN tagged=ether5,VLAN vlan-ids=100
add bridge=VLAN tagged=ether5,VLAN vlan-ids=102
add bridge=VLAN tagged=ether5 vlan-ids=101
/interface ethernet switch vlan
add disabled=yes ports=ether4,ether3,ether5 switch=switch1 vlan-id=100
add disabled=yes ports=ether5 switch=switch1 vlan-id=102
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
add address=192.168.102.2/24 interface=VLAN.vlan102-mgmt network=192.168.102.0
/ip route
add distance=1 gateway=192.168.102.1
RB2011
# mar/01/2022 21:29:00 by RouterOS 6.49.3
# software id = WABD-L97V
#
# model = RB2011UiAS-2HnD
# serial number = C44F0F93D478
/interface bridge
add name=VLAN-bridge vlan-filtering=yes
add admin-mac=DC:2C:6E:65:44:6E auto-mac=no comment=defconf name=bridge
/interface vlan
add interface=VLAN-bridge name=ether2.vlan100-lan vlan-id=100
add interface=VLAN-bridge name=ether2.vlan101-guest vlan-id=101
add interface=VLAN-bridge name=ether2.vlan102-mgmt vlan-id=102
/interface ethernet switch port
set 12 default-vlan-id=102
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=lan ranges=192.168.100.10-192.168.100.254
add name=guest ranges=192.168.101.1-192.168.101.254
add name=mgmt ranges=192.168.102.100-192.168.102.120
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge name=defconf
add address-pool=lan disabled=no interface=ether2.vlan100-lan name=lan
add address-pool=guest disabled=no interface=ether2.vlan101-guest name=guest
add address-pool=mgmt disabled=no interface=ether2.vlan102-mgmt name=mgmt
/interface bridge port
add bridge=VLAN-bridge comment=defconf frame-types=admit-only-vlan-tagged interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=VLAN-bridge comment=defconf interface=ether4 pvid=102
add bridge=VLAN-bridge comment=defconf interface=ether5 pvid=101
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=ether9
add bridge=bridge comment=defconf interface=ether10
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=wlan1
add bridge=VLAN-bridge disabled=yes interface=ether2.vlan100-lan pvid=100
add bridge=VLAN-bridge disabled=yes interface=ether2.vlan101-guest pvid=101
add bridge=VLAN-bridge disabled=yes interface=ether2.vlan102-mgmt pvid=102
add bridge=VLAN-bridge disabled=yes interface=ether2.vlan102-mgmt
add bridge=VLAN-bridge disabled=yes interface=ether1
/interface bridge settings
set use-ip-firewall-for-vlan=yes
/interface bridge vlan
add bridge=VLAN-bridge tagged=ether2,VLAN-bridge vlan-ids=102
add bridge=VLAN-bridge tagged=ether2,VLAN-bridge vlan-ids=100
add bridge=VLAN-bridge tagged=ether2,VLAN-bridge untagged=ether5 vlan-ids=101