That would be the first approach by someone using logic but doesnt know the efficient approach.
- assign each port a subnet
- assign a bridge as a subnet for all ports
- assign a bridge with a subnet for some ports and for others assign separate subnets
- Assign one bridge (with no dhcp responsibilies), create all vlans assigned with bridge as interface
and use bridge vlan filtering to allocate vlans to the various ports as required.
The best document explanation: http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
Yes, the default setup is good to go for a one WAN, one subnet Bridge with associated LAN setup.
Before implementing vlan filtering setup its best to setup ether5 ( or non-used port ) to create an off bridge access to safely make the changes!!
Its actually challenging to make changes to a subnet you are working from and thus making changes to …
SO first step from the default is the following:
OffBridge option…
Remove etherX from /interface bridge port settings.
Modify the following entry
/ethernet
set [ find default-name=etherX ] name=OffBridgeX
Give it an Ip address
/ip address
add address=192.168.77.1/30 interface=OffBridgeX network=192.168.77.0
Add it to the Interface List Members
/interface list member
add interface=OffBridgeX list=LAN
Now you should be able to plug your laptop into etherX, change the IPV4 settings on the laptop to 192.168.77.2, then using winbox enter the router with username and password.
Note the netmask of 30 on the address only allows two addresses to work on the router, .1 and .2.
After reading the guide provided, you are now ready to start messing with the config!!