RB3011 have two switch chips capable of Vlan managing
SFP port is connected to cpu instead.
How should I manage a Vlan having untagged ports on eth switch and tagged on SFP ?
Use the Bridge VLAN Filtering single bridge pattern and let RouterOS hardware offload what it can. Look for QCA8337 in Bridge Hardware Offloading
ROS doesn’t HW offload anything to QCA switch chips. So in this scenario, everything will be handled by CPU.
Depending on number of VLANs in the game and distribution of access ports between both switch chips it might be possible to create (a tad complicated) config, which would traffic partially offload to hardware, at leas traffic between ether ports belonging to same VLAN. But feasibility very much depends on detailed requirements.