Hi folks,
I am brand new to this forum so I hope I am "doing this right". I am running an RB2011Uias-rm router at code level 6.42.6. The router is connected via fiber to a Ubiquity EdgeSwitch.
The goal is to have (4) VLANs, each with their own subnet. 3 of them should NAT to the WAN while 1 remains isolated entirely from the WAN, and all 4 of them need to talk to a DNS server on one of the VLANS. None of them should be able to talk to each other (with the DNS server exception). I can't even get the VLAN connected stuff right yet so I haven't tackled the filter rules, firewall rules or NAT stuff yet. I don't expect problems with that once I have the VLANs ironed out.
I have all 4 of the VLANs tagged on the incoming trunk port of the Edgeswitch. The router seems not to be sending tagged packets out sfp1. I know I have a basic config issue but can't seem to find it. The documentation I have found on the wiki I think is outdated and that might be part of my problem.
Basically, what I am after is:
RB2011 has WAN connected to ether1 and is a DHCP client to get IP from ISP (working fine)
sfp1 should carry VLAN94, VLAN50, VLAN100, and VLAN200 and all of them should be tagged. The switch is setup to pass each VLAN untagged to each port group (this is working fine)
A DHCP server for each VLAN should assign addresses for it's respective subnet.
Currently, I think the problem is the packets are not tagged heading to the switch. I am not able to get DHCP or even ping each subnets' default gateway. If I can get to that point, I think I can iron out the rest. I have no need for any VLAN 1 traffic, unless it's required in the config for something.
I have pasted the relevant part of the config I've built below. I'd be ever so grateful if I could get a hint as to what I am doing wrong 
Thanks
James
jul/09/2018 11:49:22 by RouterOS 6.42.6
model = 2011UiAS
/interface bridge
add fast-forward=no name=bridge1 vlan-filtering=yes
/interface vlan
add interface=bridge1 name=VLAN50 vlan-id=50
add interface=bridge1 name=VLAN94 vlan-id=94
add interface=bridge1 name=VLAN100 vlan-id=100
add interface=bridge1 name=VLAN200 vlan-id=200
/ip pool
add name=dhcp ranges=192.168.94.50-192.168.94.100
add name=dhcp_VLAN50 ranges=172.30.50.50-172.30.50.100
add name=dhcp_VLAN100 ranges=172.31.100.50-172.31.100.100
add name=dhcp_VLAN200 ranges=172.31.200.50-172.31.200.100
/ip dhcp-server
add address-pool=dhcp authoritative=after-2sec-delay disabled=no interface=VLAN94 name=dhcp94Network
add address-pool=dhcp_VLAN50 disabled=no interface=VLAN50 name=dhcp3
add address-pool=dhcp_VLAN100 disabled=no interface=VLAN100 name=dhcp4
add address-pool=dhcp_VLAN200 disabled=no interface=VLAN200 name=dhcp5
/interface bridge port
add bridge=bridge1 disabled=yes interface=ether1
add bridge=bridge1 hw=no interface=sfp1
add bridge=bridge1 hw=no interface=ether2
/interface bridge vlan
add bridge=bridge1 tagged=sfp1 vlan-ids=94
add bridge=bridge1 tagged=sfp1 vlan-ids=100
add bridge=bridge1 tagged=sfp1 vlan-ids=200
add bridge=bridge1 tagged=sfp1 vlan-ids=50
/ip address
add address=192.168.94.1/24 interface=VLAN94 network=192.168.94.0
add address=172.30.50.1/24 interface=VLAN50 network=172.30.50.0
add address=172.31.100.1/24 interface=VLAN100 network=172.31.100.0
add address=172.31.200.1/24 interface=VLAN200 network=172.31.200.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=172.30.50.0/24 dns-server=192.168.94.2 gateway=172.30.50.1
add address=172.31.100.0/24 dns-server=192.168.94.2 gateway=172.31.100.1
add address=172.31.200.0/24 dns-server=192.168.94.2 gateway=172.31.200.1
add address=192.168.94.0/24 dns-server=192.168.94.2,192.168.94.1 gateway=192.168.94.1 netmask=24
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1