UPDATE:
Looks like it was an issue with the Paravirtualized (virtio-net) adapter. Working properly now with the Intel MT1000 Desktop adapter.
I'm having trouble getting my test setup to work on CHRs in VirtualBox. (Have tried enabling promiscuous mode on adapters as well.)
VRRP interface is up and correct RM / B election on each router, but I can only ping the VRRIP IP address from the Master router, not from the Backup or a client on the same segment. Pinging the base interface IPs works fine from all hosts.
Recap:
10.10.10.1 (vrrp1) only answers ping when performed on the master router
10.10.10.2 (ether2-rtr1) and 10.10.10.3 (ether2-rtr2) and my client on 10.10.10.40 (windows vm) can all ping each other just fine.
RM and B election working correctly, and Windows VM receives DHCP from VRRP interface. (10.10.10.1 listed as DHCP server)
No firewall config
rtr1
/interface ethernet
set [ find default-name=ether1 ] disable-running-check=no
set [ find default-name=ether2 ] disable-running-check=no
/interface vrrp
add interface=ether2 name=vrrp1 priority=200
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=10.10.10.20-10.10.10.40
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=vrrp1 name=dhcp1
/user-manager attribute
add name=Mikrotik-Wireless-PSK type-id=26 value-type=string
/user-manager limitation
add name=test-lim
/user-manager profile
add name=test-profile name-for-users=test-profile
/user-manager user
add name=admin password=voodoo
/ipv6 settings
set accept-redirects=no accept-router-advertisements=no forward=no
/ip address
add address=10.10.10.2/24 interface=ether2 network=10.10.10.0
add address=10.10.10.1 interface=vrrp1 network=10.10.10.1
/ip dhcp-client
add disabled=no interface=ether1
/ip dhcp-server network
add address=10.10.10.0/24 dns-server=1.1.1.1 gateway=10.10.10.1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/ipv6 firewall filter
add action=drop chain=input
add action=drop chain=forward
#error exporting /ipv6/route/rule
#error exporting /routing/policy/selection
/system identity
set name=rtr1
/system package update
set channel=development
/user-manager
set enabled=yes
/user-manager router
add address=192.168.8.49 name=test-router
rtr2
/interface ethernet
set [ find default-name=ether1 ] disable-running-check=no
set [ find default-name=ether2 ] disable-running-check=no
/interface vrrp
add interface=ether2 name=vrrp1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=10.10.10.41-10.10.10.60
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=vrrp1 name=dhcp1
/user-manager attribute
add name=Mikrotik-Wireless-PSK type-id=26 value-type=string
/user-manager limitation
add name=test-lim
/user-manager profile
add name=test-profile name-for-users=test-profile
/user-manager user
add name=admin password=voodoo
/ipv6 settings
set accept-redirects=no accept-router-advertisements=no forward=no
/ip address
add address=10.10.10.3/24 interface=ether2 network=10.10.10.0
add address=10.10.10.1 interface=vrrp1 network=10.10.10.1
/ip dhcp-client
add disabled=no interface=ether1
/ip dhcp-server network
add address=10.10.10.0/24 dns-server=1.1.1.1 gateway=10.10.10.1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/ipv6 firewall filter
add action=drop chain=input
add action=drop chain=forward
#error exporting /ipv6/route/rule
#error exporting /routing/policy/selection
/system identity
set name=rtr2
/system package update
set channel=development
/user-manager
set enabled=yes
/user-manager router
add address=192.168.8.49 name=test-router