Check point #21 here:
GP & CSA for Mikrotik devices
And BEFORE enabling vlan-filtering=yes on the bridge, do take a few minutes to make an offbridge port for emergency access (if everything works, then you can later re-add it to the bridge):
Once and for all COMPLETE Offbridge Port setup