After i configured the port as a access port in the switch chip , that particular port can not access the router using by winbox.

You dont give much information to go on, i.e. sample of your config, but I am convinced the reason will be that your config is not complete, i.e. need to add switch-cpu interface in the switch vlan table for that vlan

After i configured the port as a access port in the switch chip , that particular port can not access the router using by winbox.

Thanks for sharing!

/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether1 ] comment="TO BS -Trunk"
set [ find default-name=ether2 ] comment="Local Management"
set [ find default-name=ether3 ] comment=Free
set [ find default-name=ether4 ] comment=Agile
set [ find default-name=ether5 ] comment=RTU
/interface vlan
add comment="Remote Management" interface=bridge1 name=vlan5 vlan-id=5
/interface ethernet switch port
set 0 vlan-header=add-if-missing vlan-mode=secure
set 1 default-vlan-id=6 vlan-header=always-strip vlan-mode=secure
set 3 default-vlan-id=7 vlan-header=always-strip vlan-mode=secure
set 4 default-vlan-id=15 vlan-header=always-strip vlan-mode=secure
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether2
/interface ethernet switch vlan
add ports=switch1-cpu switch=switch1 vlan-id=5
add ports=ether1,ether4 switch=switch1 vlan-id=7
add ports=ether1,ether5 switch=switch1 vlan-id=15
add ports=ether1,ether2,switch1-cpu switch=switch1 vlan-id=6
/ip address
add address=192.168.88.2/24 interface=vlan5 network=192.168.88.0
/ip route
add distance=1 gateway=192.168.88.1


Thank you , Sorry for the late reply.

As i mentioned here Ether-1 will connect to wireless CPE and the CPE management is tagged vlan-6, Sometime i would to login the CPE via Ether-2 un tagged interface. Ether 4 and Ether 5 also connected to scada devices. sometimes that scada devices also has to login via Ether-2 un tagged interface.
When i configured the access vlan in Ether-2 interface afterwards can not able login the router via winbox in Ethernet-2 interface.
Your prompt support will be highly appreciated.

You mention VLAN 6 for management, however this configuration uses VLAN 5 which is not configured on any of the ether ports: add ports=switch1-cpu switch=switch1 vlan-id=5

Vlan 5 for remote management of MT router.
Vlan 6 for remote management of wireless CPE , Which is connected to Ether-1.
Vlan 7 and 15 for scada devices.
Sometime i need to login locally wireless CPE via Ether-2 , which is un tagged vlan 6 interface.
Also Ether-4 and Ether-5 connected scada equipment , Which is Ether-4 un tagged vlan 7 interface and Ether-5 un tagged vlan 15 interface.
Here is question,
Once i configured interface as access port i can not see the mac address in winbox ? which is Ether- 2,4,5 interfaces.
There is any possibility to un tag the Vlan7 and vlan15 onto Ether-2 interface which is already vlan6 un tagged interface. ?

The trunk and access ports have no access (IP or MAC based) to the CPU with that configuration:
There is a VLAN5 interface configured for IP management of the device, however it is not connected to any ethernet ports.
VLAN6 is untagged on ether2, tagged on ether1 and switch1-CPU, however there is no VLAN6 interface attached to the bridge for CPU access.

Each individual ethernet port can only have one untagged VLAN.

Okay Thanks, now i understand.
why the mac address is not detecting winbox in the access port after the configuration?

As I said in my previous post your configuration does not allow traffic from the access ports to the CPU.

can anyone give us more info about vlans mode. i mean in which scenario can i use check and fallback