Just to make it clear: which device (CCR or anonymous router) should take care of VLANs? If it’s CCR, then you can use bridge, which is kind of a software bridge and can deal with VLAN tags as well. Have a look at this fine tutorial, applies to CCR as well.