RB4011 doesn’t support vlans on hardware. So you should configure bridge vlan filtering (and lose hw-offloading).