Raspberry Pi Router mit VLAN

root@server:/etc# cat default/isc-dhcp-server
# Defaults for isc-dhcp-server (sourced by /etc/init.d/isc-dhcp-server)

# Path to dhcpd's config file (default: /etc/dhcp/dhcpd.conf). 
#DHCPDv4_CONF=/etc/dhcp/dhcpd.conf
#DHCPDv6_CONF=/etc/dhcp/dhcpd6.conf

# Path to dhcpd's PID file (default: /var/run/dhcpd.pid). 
#DHCPDv4_PID=/var/run/dhcpd.pid
#DHCPDv6_PID=/var/run/dhcpd6.pid

# Additional options to start dhcpd with.
#       Don't use options -cf or -pf here; use DHCPD_CONF/ DHCPD_PID instead 
#OPTIONS="" 

# On what interfaces should the DHCP server (dhcpd) serve DHCP requests?
#       Separate multiple interfaces with spaces, e.g. "eth0 eth1". 
INTERFACESv4="eth1"  
#INTERFACESv6=""  

root@server:/etc# cat /etc/dhcp/dhcpd.conf
option domain-name "localtux.home.arpa";  
option domain-name-servers 9.9.9.9;

default-lease-time 600;
max-lease-time 7200;

ddns-update-style none;
authoritative;

# DHCP server to understand the network topology.
subnet 192.168.18.0 netmask 255.255.255.224 {
}
subnet 192.168.18.32 netmask 255.255.255.224 {
}
subnet 192.168.18.64 netmask 255.255.255.224 {
}

# This is a very basic subnet declaration.
# VLAN 1 subnet
#subnet  192.168.18.0 netmask 255.255.255.224 {
#       range 192.168.18.10 192.168.18.20;
#       option ntp-servers 194.25.134.196;
#       option broadcast-address 192.168.18.31;
#       option routers 192.168.18.1;
#}
# VLAN 10 subnet
subnet  192.168.18.32 netmask 255.255.255.224 {
        range 192.168.18.40 192.168.18.50;
        option ntp-servers 194.25.134.196;
        option broadcast-address 192.168.18.63;
        option routers 192.168.18.33;
}
# VLAN 20 subnet
subnet  192.168.18.64 netmask 255.255.255.224 {
        range 192.168.18.70 192.168.18.80;
        option ntp-servers 194.25.134.196;
        option broadcast-address 192.168.18.95;
        option routers 192.168.18.65;
} 

root@server:/etc# dhcp-lease-list
To get manufacturer names please download http://standards.ieee.org/regauth/oui/oui.txt to /usr/local/etc/oui.txt
Reading leases from /var/lib/dhcp/dhcpd.leases
MAC                IP              hostname       valid until          manufacturer
===============================================================================================
8c:ae:4c:fe:01:94  192.168.18.70   Laptop         2022-10-08 12:43:38   -NA- 

# adding the persistent route from the example above:
/usr/sbin/ip route add 10.1.0.0/16 via 192.168.20.1 dev eth0 

# No service will be given on this subnet, but declaring it helps the
# DHCP server to understand the network topology.
subnet 10.1.10.0 netmask 255.255.255.0 {
}
subnet 10.1.20.0 netmask 255.255.255.0 {
}
subnet 10.1.30.0 netmask 255.255.255.0 {
}
subnet 10.1.100.0 netmask 255.255.255.0 {
} 

# dhcpd.conf
#
# Sample configuration file for ISC dhcpd
#

# option definitions common to all supported networks...
#option domain-name "example.org";  
#option domain-name-servers ns1.example.org, ns2.example.org;
option domain-name "localtux.home.arpa";  
option domain-name-servers 172.16.77.254;

default-lease-time 600;
max-lease-time 7200;

# The ddns-updates-style parameter controls whether or not the server will
# attempt to do a DNS update when a lease is confirmed. We default to the
# behavior of the version 2 packages ('none', since DHCP v2 didn't  
# have support for DDNS.)
ddns-update-style none;

# If this DHCP server is the official DHCP server for the local
# network, the authoritative directive should be uncommented.
authoritative;

# Use this to send dhcp log messages to a different log file (you also
# have to hack syslog.conf to complete the redirection).
#log-facility local7;

# No service will be given on this subnet, but declaring it helps the
# DHCP server to understand the network topology.
# Active interface MUST be configured even with no pool!!!

subnet 192.168.18.0 netmask 255.255.255.224 {
}
subnet 192.168.18.32 netmask 255.255.255.224 {
}
subnet 192.168.18.64 netmask 255.255.255.224 {
}

# This is a very basic subnet declaration.

# eth1 (VLAN 1) subnet
subnet  192.168.18.0 netmask 255.255.255.224 {
        range 192.168.18.10 192.168.18.20;
        option ntp-servers 194.25.134.196;
        option broadcast-address 192.168.18.31;
        option routers 192.168.18.1;
}

# VLAN 10 subnet
subnet  192.168.18.32 netmask 255.255.255.224 {
        range 192.168.18.40 192.168.18.50;
        option ntp-servers 194.25.134.196;
        option broadcast-address 192.168.18.63;
        option routers 192.168.18.33;
}
# VLAN 20 subnet
subnet  192.168.18.64 netmask 255.255.255.224 {
        range 192.168.18.70 192.168.18.80;
        option ntp-servers 194.25.134.196;
        option broadcast-address 192.168.18.95;
        option routers 192.168.18.65;
}
# 

# On what interfaces should the DHCP server (dhcpd) serve DHCP requests?
#       Separate multiple interfaces with spaces, e.g. "eth0 eth1". 
INTERFACESv4="eth1"  
#INTERFACESv6=""  

# oct/11/2022 09:49:20 by RouterOS 7.5
#
/interface bridge
comment="VLAN Bridge" igmp-snooping=yes name=\  
    vlan-bridge vlan-filtering=yes
	
/interface ethernet
set [ find default-name=ether1 ] comment="Internet Port"  
set [ find default-name=ether5 ] comment="Switch Uplink"  

/interface vlan
add interface=vlan-bridge name=vlan1 vlan-id=1
add interface=vlan-bridge name=vlan10 vlan-id=10
add interface=vlan-bridge name=vlan20 vlan-id=20

/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN

/interface list member
add comment="WAN/Internet List" interface=ether1 list=WAN  
add comment="Local LAN List" interface=vlan1 list=LAN  
add interface=vlan10 list=LAN
add interface=vlan20 list=LAN

/ip neighbor discovery-settings
set discover-interface-list=LAN

/interface bridge port
add bridge=vlan-bridge comment="VLAN1 Port" frame-types=\  
    admit-only-untagged-and-priority-tagged interface=ether2
add bridge=vlan-bridge comment="VLAN10 Port" frame-types=\  
    admit-only-untagged-and-priority-tagged interface=ether3 pvid=10
add bridge=vlan-bridge comment="VLAN20 Port" frame-types=\  
    admit-only-untagged-and-priority-tagged interface=ether4 pvid=20
add bridge=vlan-bridge comment="Trunk Port VLAN Switch" interface=ether5  

/interface bridge vlan
add bridge=vlan-bridge tagged=vlan-bridge vlan-ids=1
add bridge=vlan-bridge tagged=vlan-bridge,ether5 vlan-ids=10
add bridge=vlan-bridge tagged=vlan-bridge,ether5 vlan-ids=20

/ip address
add address=192.168.18.1/27 comment="IP VLAN1" interface=vlan1 network=192.168.18.0  
add address=192.168.18.33/27 comment="IP VLAN10" interface=vlan10 network=192.168.18.32  
add address=192.168.18.65/27 comment="IP VLAN20" interface=vlan20 network=192.168.18.64  

/ip dhcp-client
add comment=defconf interface=ether1

/ip dhcp-relay
add dhcp-server=192.168.18.3 disabled=no interface=vlan10 name=relay_vlan10
add dhcp-server=192.168.18.3 disabled=no interface=vlan20 name=relay_vlan20

/ip dns
set allow-remote-requests=yes

/system clock
set time-zone-name=Europe/Berlin

/system identity
set name="Mikrotik"  

/system ntp client
set enabled=yes

/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN 

root@dhcpsrv:~# dhcp-lease-list
Reading leases from /var/lib/dhcp/dhcpd.leases
MAC                IP              hostname       valid until         manufacturer
===============================================================================================
00:23:5a:12:ab:78  192.168.18.20   Laptop         2022-10-11 07:48:31 COMPAL INFORMATION (KUNSHAN) CO., LTD.
00:e0:4c:36:00:e1  192.168.18.71   Windows10      2022-10-11 07:57:46 REALTEK SEMICONDUCTOR CORP.
8c:ae:4c:de:01:84  192.168.18.40   MacbookPro     2022-10-11 07:55:40 Plugable Technologies
c8:54:4a:bc:98:33  192.168.18.10   GS1200-5       2022-10-11 07:54:21 Zyxel Communications Corporation