to je ono, ze neviem kde som sa stratil :)
tu VLANu som nastavil (dve, jednu pre port 2 a potom pre 3-4 port dalsiu), tak isto som na nich rozbehal DHCP (kazda VLAN ma svoj range)
bridge tam mam, ked ho vsak odstranim, tak mikrotik "vytuhne" a ja sa nan uz nedostanem
ten posledny bod s tym firewallom mi mozno komplet chyba, pretoze tie VLANY sa vidia (ping funguje)
mam to takto:
/interface bridge
add name=bridgeVLAN100
add name=bridgeVLAN200
/interface vlan
add interface=bridgeVLAN100 name=vlan100 vlan-id=100
add interface=bridgeVLAN200 name=vlan200 vlan-id=200
/ip pool
add name=dhcp_pool1 ranges=192.168.100.2-192.168.100.254
add name=dhcp_pool2 ranges=192.168.200.2-192.168.200.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=bridgeVLAN100 name=dhcp1
add address-pool=dhcp_pool2 disabled=no interface=bridgeVLAN200 name=dhcp2
/interface bridge port
add bridge=bridgeVLAN200 interface=ether3
add bridge=bridgeVLAN200 interface=ether4
add bridge=bridgeVLAN100 interface=ether2-master
/ip address
add address=192.168.1.1/24 comment=defconf interface=ether2-master network=\
192.168.1.0
add address=192.168.100.1/24 interface=bridgeVLAN100 network=192.168.100.0
add address=192.168.200.1/24 interface=bridgeVLAN200 network=192.168.200.0
/ip dhcp-server network
add address=192.168.1.0/24 comment=defconf gateway=192.168.1.1 netmask=24
add address=192.168.100.0/24 gateway=192.168.100.1
add address=192.168.200.0/24 gateway=192.168.200.1