Vlan L3 Interface & Switching VLAN

RouterOS General
1

Hi Guys,
Im trying to have a Mikrotik Router which has a Interface VLAN 10 (Mikrotik-2 10.123.10.1).
This VLAN then is added as PVID to Eth1(Mikrotik-1) and Eth2(Mikrotik-3). Both Mikrotk-1/3 then has the following IP 10.1123.10.2/3.
Now 10.123.10.2 and 10.123.10.3 can ping each other, but both of them can not ping 10.123.10.1 why?
Here is my config:

Mikrotik-2

# oct/30/2023 07:52:02 by RouterOS 7.8
# software id = 
#
/interface bridge
add fast-forward=no name=br0 vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] disable-running-check=no
set [ find default-name=ether2 ] disable-running-check=no
set [ find default-name=ether3 ] disable-running-check=no
set [ find default-name=ether4 ] disable-running-check=no
set [ find default-name=ether5 ] disable-running-check=no
set [ find default-name=ether6 ] disable-running-check=no
set [ find default-name=ether7 ] disable-running-check=no
set [ find default-name=ether8 ] disable-running-check=no
set [ find default-name=ether9 ] disable-running-check=no
set [ find default-name=ether10 ] disable-running-check=no
/interface vlan
add interface=br0 name=vlan10 vlan-id=10
add interface=br0 name=vlan20 vlan-id=20
/disk
set slot1 slot=slot1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=10.123.10.0 ranges=10.123.10.2-10.123.10.254
add name=10.123.20.0 ranges=10.123.20.2-10.123.20.254
/ip dhcp-server
add address-pool=10.123.10.0 interface=vlan10 name=vlan10
add address-pool=10.123.20.0 interface=vlan20 name=vlan20
/port
set 0 name=serial0
/interface bridge port
add bridge=br0 frame-types=admit-only-untagged-and-priority-tagged interface=\
    ether1 pvid=10
add bridge=br0 frame-types=admit-only-untagged-and-priority-tagged interface=\
    ether2 pvid=10
add bridge=br0 frame-types=admit-only-untagged-and-priority-tagged interface=\
    vlan10 pvid=10
add bridge=br0 interface=vlan20 pvid=20
/ip address
add address=10.123.10.1/24 interface=vlan10 network=10.123.10.0
add address=10.123.20.1/24 interface=vlan20 network=10.123.20.0
/ip dhcp-client
# DHCP client can not run on slave or passthrough interface!
add interface=ether1
/ip dhcp-server network
add address=10.123.10.0/24 gateway=10.123.10.1
add address=10.123.20.0/24 gateway=10.123.20.1

Mikrotik-1

# oct/30/2023 07:57:14 by RouterOS 7.8
# software id = 
#
/interface ethernet
set [ find default-name=ether1 ] disable-running-check=no
set [ find default-name=ether2 ] disable-running-check=no
set [ find default-name=ether3 ] disable-running-check=no
set [ find default-name=ether4 ] disable-running-check=no
set [ find default-name=ether5 ] disable-running-check=no
set [ find default-name=ether6 ] disable-running-check=no
set [ find default-name=ether7 ] disable-running-check=no
set [ find default-name=ether8 ] disable-running-check=no
set [ find default-name=ether9 ] disable-running-check=no
set [ find default-name=ether10 ] disable-running-check=no
/disk
set slot1 slot=slot1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
/ip address
add address=10.123.10.2/24 interface=ether1 network=10.123.10.0
/ip dhcp-client
add interface=ether1

Mikrotik-3

# oct/30/2023 07:57:58 by RouterOS 7.8
# software id = 
#
/interface ethernet
set [ find default-name=ether1 ] disable-running-check=no
set [ find default-name=ether2 ] disable-running-check=no
set [ find default-name=ether3 ] disable-running-check=no
set [ find default-name=ether4 ] disable-running-check=no
set [ find default-name=ether5 ] disable-running-check=no
set [ find default-name=ether6 ] disable-running-check=no
set [ find default-name=ether7 ] disable-running-check=no
set [ find default-name=ether8 ] disable-running-check=no
set [ find default-name=ether9 ] disable-running-check=no
set [ find default-name=ether10 ] disable-running-check=no
/disk
set slot1 slot=slot1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
/ip address
add address=10.123.10.3/24 interface=ether2 network=10.123.10.0
/ip dhcp-client
add interface=ether1

Screenshot 2023-10-30 at 08.59.44.png

2

You are missing any /interface bridge vlan configuration. Whilst the bridge port pvid= settings will dynamically add those ports as untagged members you need to specify the bridge-to-cpu port tagged membership.
/interface bridge vlan
add bridge=br0 tagged=br0 vlan-ids=10
add bridge=br0 tagged=br0 vlan-ids=20

Also
/interface bridge port
…
…
add bridge=br0 frame-types=admit-only-untagged-and-priority-tagged interface=vlan10 pvid=10
add bridge=br0 interface=vlan20 pvid=20
is incorrect, remove these two members.
Similarly the DHCP client on ether1.