Your instinct is right on. Just create a VLAN on the bridge and add/move the IP to that VLAN interface.Can i create that vlan on the bridge interface and move the ip address on vlan or not ?
Ah, yes, of course! I am running connection tracking.You said you "are" running NAT? This enables connection-tracking.
/ip/dhcp-server/getall
?comment="Jane Doe account 12345"