/ip firewall nat
add action=masquerade chain=srcnat dst-address=192.168.88.0/24 src-address=\
This rule looks very strange.
Yeah I know, it was a rule I got for hairpin nat... not sure why but it seems to be working. I could disable it and see if it resolves the issue... No still the same thing.
Vlan 35 is the VLAN coming from the Modem of my ISP.
It goes to the router through the switch through the SFP+ port
PPPOE client on the VLAN35 to obtain a pppoe-out1
NAT masquerade for pppoe-out1
Bridge on SFP + each port of the router with a DHCP server.