What Sob missed out on was directing you to the standard for setting up vlans
There is an example there just for Access Points, post #4.
What I suggest you do is start at the beginning and digest the information and then go back and forth from the explanation and Post #4 to come to grips with the config setup.
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
The key points are
one bridge
All subnets described/identified as vlans and with parent interface being the bridge.
No firewall rules
Only one interface list entry called MANAGE or BASE
The trusted vlan is usually the only interface as a list member (you dont need a separate vlan for management purposes if you the admin actually reside and exist on an existing trusted vlan like home (not guest or iot devices etc…).
What is important is that the AP gets an IP address on the trusted vlan subnet.
The interface list is used in three places typically, a. neighbours discovery setting and b. tools/winmac server
One IP route required and its typically dst-address= 0.0.0.0/0 gw=gatewayIPof trustedvlan table=main
However, its really tricky setting up the bridge when changing subnets and settings within the bridge.
Two recommendations
- Get use to using SAFE MODE as a normal process.
- Consider taking ether2 and using it off the bridge for all your configging of the bridge, safe and sound from bridge screwups…
https://forum.mikrotik.com/viewtopic.php?t=181718