how to create this scheme?
mikrotik.png
if i create vlan1 interface (vlan id 1) on ether1 interface, it can communicate only with taggeg traffic, but i need communicate with untagged traffic!
how can i add tag for incoming traffic, and strip tag on outgoing traffic? (it possible on switch, but how to do this on bridge?)
You can configure a switch with 2 ports (set master-port of port2 to port1) and add vlan tags on incoming traffic to that
port (see the switch configuration manual) and then put the switchport in the bridge.
Of course then the traffic will be tagged when it exits the bridge so probably you will still be unhappy.
It is better to re-design your network and use routing instead of bridging.