Help with VLAN setup?

Sadly, I’m poorly versed in both RouterOS and VLAN in general, so I’m a bit foggy about how this works.

I have a Mikrotik RB2011 as my router, physically in building A.

port 1 is WAN.
port 2 is a file server
port 3 is a point-to-point WAP (between building A and building B)
port 4+ are Building A’s LAN devices

I want both buildings to have access to the WAN
I want both buildings to have access to the file server (I can fine-grain control access locally)
Otherwise, I want Building A’s network to be separate from Building B’s network.

I figure this is where VLAN comes in?

I don’t suppose someone can help me out with some specifics on how to set this up in RouterOS? Thanks.


ps. Oh, I don’t know if it matters but the WAP is capable of VLAN tagging. I suspect that doesn’t matter unless I have multiple buildings connecting to the WAP but right now it is just one.

Groan… I am so lost. Can someone please help me?

Maybe VLAN isn’t even what I need here.

There’s building A and building B. Both are separate except two important things: 1) they both should have access to server in building A and 2) they should both have access to Internet. Otherwise entirely separate networks.

Possible or not? If yes, how?

You should be able to set this up using bridging and filters instead of VLANs.

Or simple routed config. One IP subnet for server (unless it’s part of network A), another for network A, and finally third for network B. Everything will work by default and you’ll only set filters to isolate networks from each other.