Forgot to add another restriction: you cannot use NV2 (No virtual AP support, see
http://wiki.mikrotik.com/wiki/Manual:In ... AN_tagging).
To make the mANT to tag properly, each wireless interface VLAN ID property must be set, along with VLAN Mode = use service tag, that will make the mANT to tag packets coming from each "AP" stations with the proper VLAN ID.
On the Hap: there are two ways of deailing with VLANs, a "hardware" way, by using the specific routerboard switch chip features (
http://wiki.mikrotik.com/wiki/Manual:Sw ... p_Features) which doesn't impose any burden on the routerboard CPU, or a "software" way (
http://wiki.mikrotik.com/wiki/Vlans_on_ ... nvironment), that does load the CPU, but usually much more intuitive to set up and manage.
To deal with this in the software way:
On the Hap Lite all you need is to create:
1.- Two vlan interfaces "hanging" from the ether interface the mANT connects to (Say ether4).
To do this, go to Interfaces, plus button on the top left...), name one VLAN100m (id 100) and another VLAN101m (id 101).
2.- Create a vlan interface "hanging" from ether1 Vlan id 101, say VLAN101h
3.- Create a vlan interface, "hanging" from ether2 Vlan id 100, say VLAN100h
4.- Create two bridges, say BrVLAN100 and BrVLAN101; put VLAN101h and VLAN101m on BrVLAN101, and VLAN100m and VLAN100h on BrVLAN100
At this point you will have traffic for each VLAN bridged. If you want to assign IPs, you should do it on the BrVLANXXX bridge devices.