so from this i’m learning that there’s two ways to do this… http://forum.mikrotik.com/t/problem-with-vlan-on-wan-port/160493/1
the simpler way, just add vlan interface under wan port and add that to the bridge. With vlan 1 I was able to plug in my laptop to the backbone and I got connected to my LAN!! Yay!! But I think I should not use 1, so I set it to 142, then on my laptop after updating ethernet driver I can set VLAN ID to 142 and it works again!
But the other way is to bridge the WAN port and then assign WAN and LAN to VLAN interfaces under the bridge and enable vlan filtering… so I guess even though everthing’s bridged they are isolated within the bridge by VLANs.
But I really like the simpler way!
BTW, question, on bridge port I can set for vlan interface “admit only VLAN tagged”, but does this actually do anything or is this already implicitly done by the vlan interface?