Vlan Setup

RouterOS General
1

Topology :
R1 (ether2) <> (ether1) R2 (ether2) <> (ether2) R3

--- R1 Config : ---
/interface vlan add interface=ether2 name=vlan1111 vlan-id=1111
/ip address add address=192.168.251.1/30 interface=vlan1111 network=192.168.251.0

--- R2 Config : ---
/interface bridge add name=bridge1
/interface bridge port add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged interface=ether1 pvid=1111
/interface bridge port add bridge=bridge1 frame-types=admit-only-vlan-tagged interface=ether2 pvid=69
/interface bridge vlan add bridge=bridge1 tagged=ether2 untagged=ether1 vlan-ids=1111
/interface bridge vlan add bridge=bridge1 tagged=ether2,bridge1 vlan-ids=69
/interface vlan add interface=bridge1 name=Management vlan-id=69
/ip address add address=192.168.252.2/28 interface=Management network=192.168.252.0
/ip route add gateway=192.168.252.1

--- R3 Config : ---
/interface bridge add frame-types=admit-only-vlan-tagged name=bridge1 protocol-mode=mstp pvid=69 vlan-filtering=yes
/interface vlan add interface=bridge1 name=Management vlan-id=69
/interface vlan add interface=bridge1 name=vlan1111 vlan-id=1111
/interface bridge port add bridge=bridge1 frame-types=admit-only-vlan-tagged interface=ether2 pvid=69
/interface bridge vlan add bridge=bridge1 tagged=bridge1,ether2 vlan-ids=1111
/interface bridge vlan add bridge=bridge1 tagged=ether2,bridge1 vlan-ids=69
/ip address add address=192.168.251.2/30 interface=vlan1111 network=192.168.251.0
/ip address add address=192.168.252.1/28 interface=Management network=192.168.252.0
/ip firewall nat add action=src-nat chain=srcnat src-address=192.168.252.0/28 to-addresses=192.168.251.2
/ip route add gateway=192.168.251.1

Achieve :
R3 can ping to R1

Problem :
With this config everything works, i can ping from R3 to R1, but when i set vlan-filtering=yes in R2, ping from R3 to R1 fail immediately, why is it ?

2

I dont look at part configs so all three are needed and what is the relationship and type of devices R1,R2,R3
/export file=anynameyouwish ( minus router serial number, any public WANIP information, keys etc.)

ensure also you read this guidance on vlans: http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

3

Thank you for coming, I’ve put all of the config inside the code, it start with the — R1 Config : — — R2 Config : — — R3 Config : —
Could you recheck.

4

Solved by research and reading, thanks.