Internet in a VLAN

Hi All,

I have a mikrotik crs125 which is sharing and NATtin my internet connection. Internet connection is connect to a single port of switch and rest of ports are LANs groupped in different VLANs,
I would like to create a VLAN which would be directly switched to pure internet connection and keep rest of VLANs behind NAT. How should I configure it in principle?
VLAN interface needs to be done, Internet ethernet port and switch-cpu needs to be connected to it and NAT rules needs to be changed such way that masquerading uses IP address of it, but how is it with bridges? Currently I have only one bridge. Should I setup another one for internet connection?

You just set up an internet VLAN in the same way as your other VLANs. There is nothing magic about it. Do not create another bridge. It is unnecessary and you will lose hardware offload.