Check if "Multicast Querier" is enabled on the bridge.
viewtopic.php?p=906424#p906140

You should start from https://help.mikrotik.com/docs/display/ ... ndRouterOS
Also take a look to viewtopic.php?f=2&t=134048&p=659612#p659676
and finally viewtopic.php?f=2&t=154449

For RB5009 you can enable "Multicast Querier" viewtopic.php?p=906424#p906140 or disable L2 hardware offloading.
Both methods work with igmp snooping.

@mike7, just tried that now, disabled h/w offloading on ether3 (vlan11), still the same... try all ports do you have any links to what the problems are with 5009 switch? is that something new s/w releases can fix, or is that a h/w problem? For me there are issues with ipv6 RA and igmp snooping, but...

There are several issues with RB5009 switch chip, just for testing could you please disable Hardware offload on bridge ports.

I'm not sure it will help, just to eliminate switch chip.

Thank you. I reset the configuration and started from scratch. I followed your instructions and used multiple example files from the VLAN thread. Here are my exact steps. I used the default configuration as a base. Try to disable hardware offload on all bridge ports. With this you can check you con...

The issue was with ipv6 RA packets, I have no idea how it depends on IGMP querier and L2 HW offload.

I solved this problem by enabling "Multicast Querier" on the bridge. Thank you it is working fine, also it is mentioned in the docs https://help.mikrotik.com/docs/pages/viewpage.action?pageId=59277403#BridgeIGMP/MLDsnooping-BasicIGMPsnoopingconfiguration Still have some issues with IGM pr...

ipv6 RA multicast stops work with IGMP Snooping enabled on RB5009 . Bridge configured with L2 hw offload . Steps to reproduce: enable L2 hw offload on bridge ports enable IGMP Snooping set short ra-lifetime and reachable-time in ipv6 ND config, reduce ra-interval as result ipv6 addresses will expir...

looks like firewall rule is required:

@MikroTik
Are there any plans to implement equivalent of dynamic-in and connected-in chains? It's possible to create workaround with scripts for dynamic-in but for connected it is not possible (I would like to add comments for example).

The default template will be moved to the top of the list if it was not already there. The second line should above (action=none) should be below default and above any added IKEv2 provider lines. The explaination by Sindy. Anyway, there should be a remedy - a static IPsec policy action=none src-add...