Vlan issue

Hi, i have a NWA1121 Zyxel with two SSID on two vlan.

  1. First SSD on Native VLAN. PVID: 1
  2. Guest SSD on PVID: 3

Access point is connect on TEC port on Mikrotik with 192.168.3.x subnet
Other on LAN port with 192.168.1.x subnet.

/ip address
add address=192.168.1.1/24 interface=LAN network=192.168.1.0
add address=192.168.3.1/24 interface=vlan-guest network=192.168.3.0
/interface vlan
add interface=TEC loop-protect-disable-time=0s loop-protect-send-interval=0s name=vlan-guest vlan-id=3
/ip pool
add name=dhcp_pool1 ranges=192.168.1.200-192.168.1.239
add name=dhcp_pool2 ranges=192.168.3.2-192.168.3.254
/ip dhcp-server
add add-arp=yes address-pool=dhcp_pool1 disabled=no interface=LAN lease-time=30m name=dhcp1
add add-arp=yes address-pool=dhcp_pool2 disabled=no interface=vlan-guest name=dhcp2 relay=192.168.3.1

The firt SSID working fine. The guest network on second SSID not working. Dhcp are not visibile and there aren’t request from access point.
Can you help me?
Thanks

Remove “relay=192.168.3.1”.

I removed relay=192.168.3.1 and i add

/ip firewall nat
add action=masquerade chain=srcnat src-address=192.168.1.0/24
add action=masquerade chain=srcnat src-address=192.168.3.0/24

But not working. Ssid on vlan3 not find dhcp server from mikrotik.

Mirotik used: RB750GR3

Use Tools->Torch and check what happens on TEC interface when you connect device to guest network. If AP sends properly tagged VLAN packets to router, you must see them. If not, check configuration of AP.