Guest Network: VLAN vs. Bridge

vlan-filtering one bridge can be daunting for the new user as one is adding vlans and eventually drop DCHP and address from the bridge as one should ( bridge subnet simply becomes another data vlan etc.)
reference to read: http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

To facilitate a painless experience recommend take a port off the bridge temporarily if you have no spares to modify the config.

  1. remove port from /interface bridge ports

  2. Define the ethernet port to be clear ( let use ether5)
    /ethernet interface
    set ( interface=ether5) name=OffBridge5

  3. Define the address
    /ip address
    add address=192.168.70.1/30

  4. Ensure the interface is part of the LAN interface list ( AND ) any Trusted Interface list
    /interface list member
    add interface=OffBridge5 list=LAN
    add interface=OffBridge5 list=TRUSTED

  5. Now all you have to do is plug your laptop into ether5, change IPV4 settings to 192.168.70**.2** and you should be able to access the config, from a SAFE spot!!!