Basic VLAN setup on CRS317

Read this tutorial, the second post (switch with a separate router) should be much like your use case.
Unlike most Mikrotik devices, your CRS will be full HW offloaded using such setup.