[Megoldva] Mikrotik Guest wifi VLAN-al

Hello,

A következőt vettem a fejembe.

Szeretnék hozni két AP-t, külön VLAN-ba téve őket. A hEX ether5-ös portja lesz az átjáró, amit
nat-olok a megfelelő szabályokkal. VLAN nélkül megy is szépen a dolog, de én szeretek szívni ezért mindig a nehezebb utat járom. 2 nap alatt össze is raktam a cAP konfigját, mindkét bridge-n keresztül lehet pingetni a másik oldalon lévő gw-t.
DCHP stb. szépen megy, de a netre nem lát ki az eszköz. Már én sem látok ki a fejemből így remélem akad valaki aki rábök a problémára. Köszönöm!

R1:

# may/29/2018 22:16:54 by RouterOS 6.42.3
# software id = J7FN-6G25
#
# model = RouterBOARD 750G r3
# serial number = 6F3808C20F9E
/interface bridge
add fast-forward=no name=LAN-bridge
/interface ethernet
set [ find default-name=ether1 ] mtu=1492 name=WAN
set [ find default-name=ether5 ] l2mtu=1520 name="WIFI ether5"
set [ find default-name=ether2 ] l2mtu=1520 name=ether2-master-local
set [ find default-name=ether3 ] l2mtu=1520 name=ether3-slave-local
set [ find default-name=ether4 ] l2mtu=1520 name=ether4-slave-local
/interface vlan
add interface="WIFI ether5" name=vlan100 vlan-id=100
add interface="WIFI ether5" name=vlan200 vlan-id=200
/interface bridge port
add bridge=LAN-bridge interface=ether2-master-local
add bridge=LAN-bridge interface=ether4-slave-local
add bridge=LAN-bridge interface=ether3-slave-local
add bridge=LAN-bridge interface="WIFI ether5"
/interface bridge vlan
add bridge=LAN-bridge tagged=vlan100 untagged="WIFI ether5" vlan-ids=100
add bridge=LAN-bridge tagged=vlan200 untagged="WIFI ether5" vlan-ids=200
/interface list member
add list=mactel
add interface="WIFI ether5" list=mactel
add list=mac-winbox
add interface=ether4-slave-local list=mactel
add interface="WIFI ether5" list=mac-winbox
add interface=ether3-slave-local list=mactel
add interface=ether4-slave-local list=LAN
add interface=ether3-slave-local list=LAN
add interface=ether2-master-local list=LAN
add interface=WAN list=LAN
add interface=LAN-bridge list=LAN
/ip address
add address=192.168.1.254/24 interface=LAN-bridge network=192.168.1.0
add address=10.1.2.254/24 interface=vlan100 network=10.1.2.0
add address=10.2.2.254/24 interface=vlan200 network=10.2.2.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=WAN
/ip firewall nat
add action=masquerade chain=srcnat src-address=10.1.2.0/24
add action=masquerade chain=srcnat src-address=10.2.2.0/24

R2:

# may/29/2018 22:13:31 by RouterOS 6.42.3
# software id = TBDE-121Z
#
# model = RouterBOARD cAP L-2nD
# serial number = 792E07072F94
/interface bridge
add fast-forward=no name=bridge1
add fast-forward=no name=bridge2
/interface vlan
add interface=ether1 name=vlan100-ether1 vlan-id=100
add interface=ether1 name=vlan200-ether1 vlan-id=200
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys name=\
bs-office supplicant-identity="" wpa-pre-shared-key=***** \
wpa2-pre-shared-key=*****
add authentication-types=wpa2-psk eap-methods="" management-protection=\
allowed mode=dynamic-keys name=bs-guest supplicant-identity="" \
wpa-pre-shared-key=+++++* wpa2-pre-shared-key=+++++*
/interface wireless
set [ find default-name=wlan1 ] disabled=no distance=indoors mode=ap-bridge \
security-profile=bs-office ssid=BS vlan-id=100 vlan-mode=use-tag
add disabled=no mac-address=66:D1:54:F7:93:B0 master-interface=wlan1 name=\
wlan2 security-profile=bs-guest ssid=BS-GUEST vlan-id=200 vlan-mode=\
use-tag
/interface vlan
add interface=wlan1 name=vlan100-wlan1 vlan-id=100
add interface=wlan2 name=vlan200-wlan2 vlan-id=200
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=pool-office ranges=10.1.2.1-10.1.2.252
add name=pool-guest ranges=10.2.2.1-10.2.2.252
/ip dhcp-server
add address-pool=pool-office disabled=no interface=bridge1 name=server1
add address-pool=pool-guest disabled=no interface=bridge2 name=server2
/interface bridge port
add bridge=bridge1 interface=vlan100-ether1
add bridge=bridge1 interface=vlan100-wlan1
add bridge=bridge2 interface=vlan200-ether1
add bridge=bridge2 interface=vlan200-wlan2
/interface bridge vlan
add bridge=bridge1 tagged=vlan100-ether1,vlan100-wlan1 untagged=ether1 \
vlan-ids=100
add bridge=bridge1 tagged=vlan200-ether1,vlan200-wlan2 untagged=ether1 \
vlan-ids=200
/interface list member
add interface=ether1 list=WAN
add interface=wlan1 list=LAN
/ip address
add address=10.1.2.253/24 interface=vlan100-ether1 network=10.1.2.0
add address=10.2.2.253/24 interface=vlan200-ether1 network=10.2.2.0
/ip dhcp-server network
add address=10.1.2.0/24 dns-server=10.1.2.254 domain=office \
gateway=10.1.2.254 netmask=24
add address=10.2.2.0/24 dns-server=10.2.2.254 domain=guest \
gateway=10.2.2.254 netmask=24
/ip dns
set servers=8.8.8.8