First of all why the heck are you paying for and using managed switches if you just have one vlan, aka one flat network.
Big waste of money and time configuring… and even have a second CRS326…
In any case not interested in supporting such a whacko concept, but will provide a hypothetical.
Base VLAN or Trusted VLAN will be vlan11 192.168.11.11/24 coming from RB1100
VLA100 will be the HOUSE VLAN and vlan200 will be guest vlan
( no idea what cable to OOB means, so ports not included in example )
Best reference: http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
Best vid: https://www.youtube.com/watch?v=YLtGQAQ8iS0&t=77s
/interface bridge
add name=bridge vlan-filtering=no { change to YES as last step in config }
interface ethernet
set [ find default-name=ether20 ] name=OffBridge20
/interface vlan
add interface=bridge name=vlan11 vlan-id=11 comment=“base or trusted subnet from RB1100”
/interface list
add name=TRUSTED
/interface list members
add interface=vlan11 list=TRUSTED
add interface=OffBridge23 list=TRUSTED
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge ingress-filtering=yes frame-types=admit-only-vlan-tagged interface=ether1 comment=“trunk from RB1100”
add bridge=bridge ingress-filtering=yes frame-types=admit-only-vlan-tagged interface=ether2 comment=“trunk to second CRS326”
add bridge=bridge ingress-filtering=yes frame-types=admin-only-priority-and-untagged interface=ether10 pvid=100
add bridge=bridge ingress-filtering=yes frame-types=admin-only-priority-and-untagged interface=ether11 pvid=100
add bridge=bridge ingress-filtering=yes frame-types=admin-only-priority-and-untagged interface=ether12 pvid=200
add bridge=bridge ingress-filtering=yes frame-types=admin-only-priority-and-untagged interface=ether13 pvid=200
/ip neighbor discovery-settings
set discover-interface-list=TRUSTED
/interface bridge vlan
add bridge=bridge tagged=bridge,ether1,ether2 vlan-ids=11
add bridge=bridge tagged=ether1,ether2 untagged=ether10,ether11 vlan-ids=100
add bridge=bridge tagged=ether1,ether2 untagged=ether12,ether13 vlan-ids=200
/ip dhcp-client
/ip address
add address=192.168.11.11 interface=vlan11 network=192.168.11.0 comment=“CRS326 address on base vlan”
add address=192.168.20.1/30 interface=OffBridge20 network=192.168.20.0
/ip dns
set server=192.168.11.1
/ip route
add dst-address=0.0.0.0/0 gateway=192.168.11.1
/ip ne
/system identity
set name=xxxxxxxxxxxxxxxxxxxx
/system note
set show-at-login=no
/system routerboard settings
set boot-os=router-os enter-setup-on=delete-key
/system ntp client
set enabled=yes mode=manycast
/system ntp client servers
add address=192.168.11.1
/tool mac-server
set allowed-interface-list=none
/tool mac-server mac-winbox
set allowed-interface-list=TRUSTED
First thing, enter config, remove ether20 from bridge, give ether20 a new name and IP address and add to LAN interface list and later to TRUSTED interface list during adjustments.
Simply plug laptop into ether20 with IPV4 settings 192.168.20.2 and you can safely configure from there…
Basically all three vlans are created on the RB1100 and flow into CRS326 on a trunk port and all three flow out the trunk port to the next switch presuming both v100 and v200 are required…Regardless vlan11 is required as all smart devices aka next 326 will get its IP address on vlan11 subnet etc…