Hi,
EDIT: Problem solved. My stupidity. During initial setup I had a cable plugged into ether3 and rstp did what it was supposed to do. 
I’m having trouble setting up VLAN on a hAP ac. I don’t need hardware offloading, CPU is fine for this application (and I can keep the config similar to what I use elsewhere). sfp1 should be trunk port, ether1-5 are access ports. Currently I have this configuration:
2026-02-18 07:20:21 by RouterOS 7.21.3
model = RB962UiGS-5HacT2HnT
/interface bridge
add name=BR1 vlan-filtering=yes
/interface vlan
add interface=BR1 name=VLAN_FAMLY vlan-id=10
add interface=BR1 name=VLAN_GUEST vlan-id=20
add interface=BR1 name=VLAN_MNGMT vlan-id=99
add interface=BR1 name=VLAN_TOXIC vlan-id=30
/interface bridge port
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged interface=ether1 pvid=30
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged interface=ether2 pvid=10
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged interface=ether3 pvid=10
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged interface=ether4 pvid=10
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged interface=ether5 pvid=10
add bridge=BR1 frame-types=admit-only-vlan-tagged interface=sfp1
/interface bridge vlan
add bridge=BR1 tagged=BR1,sfp1 untagged=ether2,ether3,ether4,ether5 vlan-ids=10
add bridge=BR1 tagged=BR1,sfp1 vlan-ids=20
add bridge=BR1 tagged=BR1,sfp1 untagged=ether1 vlan-ids=30
add bridge=BR1 tagged=BR1,sfp1 vlan-ids=99
/ip dhcp-client
add interface=VLAN_MNGMT
I can see incoming VLAN_MNGMT packets on sfp1, but nothing goes out. Requests from the dhcp-client are visible on VLAN_MNGMT and BR1, but not on sfp1.
I’ve tried RouterOS 7.20.8 and 7.21.3. I’m sure it’s something obvious, but I can’t see it, so I’d appreciate another pair of eyes pointing it out to me. Thanks a lot!