I have RB4011 and CRS112 connected with SFP.
On RB4011 I've configured bridge vlans with DHCP:
RB4011:
CRS112...
/ip dhcp-server
add address-pool=172.16.30.0 disabled=no interface=hq_bridge_vlan30 name=\
vlan30_172.16.30.0
add address-pool=172.16.20.0 disabled=no interface=hq_bridge_vlan20 name=\
vlan20_172.16.20.0
...
/interface bridge port
add bridge=HQ_BRIDGE interface=sfp_vlan20 pvid=20
add bridge=HQ_BRIDGE interface=sfp_vlan30 pvid=30
...
/ip address
add address=172.16.30.1/24 comment=vlan_30_iot interface=hq_bridge_vlan30 \
network=172.16.30.0
add address=172.16.20.1/24 comment=vlan_20_data interface=hq_bridge_vlan20 \
network=172.16.20.0
...
/interface vlan
add interface=sfp-sfpplus1 name=sfp_vlan20 vlan-id=20
add interface=sfp-sfpplus1 name=sfp_vlan30 vlan-id=30
...
/interface bridge settings
set allow-fast-path=no use-ip-firewall=yes use-ip-firewall-for-vlan=yes
...
/interface bridge vlan
add bridge=HQ_BRIDGE comment="VLAN IOT" tagged=HQ_BRIDGE,sfp_vlan30 untagged=\
wlan1_vlan30_IoT vlan-ids=30
add bridge=HQ_BRIDGE comment="VLAN DATA" tagged=HQ_BRIDGE,sfp_vlan20 \
untagged="wlan1_vlan20_DATA,wlan2_vlan20_DATA,ether2,ether3,ether4,ether1,\
eth10_vlan_20" vlan-ids=20
The case is:/interface bridge
add name=bridge vlan-filtering=yes
...
/interface vlan
add interface=bridge name=bridge_vlan20 vlan-id=20
add interface=bridge name=bridge_vlan30 vlan-id=30
add interface=sfp12 name=sfp12_vlan20 vlan-id=20
add interface=sfp12 name=sfp12_vlan30 vlan-id=30
...
/interface bridge port
add bridge=bridge interface=sfp12_vlan20 pvid=20
add bridge=bridge interface=bridge_vlan20 pvid=20
add bridge=bridge interface=sfp12_vlan30 pvid=30
add bridge=bridge interface=bridge_vlan30 pvid=30
...
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes
/interface bridge vlan
add bridge=bridge tagged=sfp12_vlan20,bridge vlan-ids=20
add bridge=bridge tagged=sfp12_vlan30,bridge vlan-ids=30
...
/ip dhcp-client
add disabled=no interface=bridge_vlan20
add disabled=no interface=bridge_vlan30
When I have both sfp.X interfaces on 4011 there is only working with proper communication ONE vlan (20 OR 30) on CRS112 side. I missed something but i don't know where.