Splitting that in two, and inverting the two requirements it becomes:
- the tagged and untagged packets arrive on the other side as they left ← this is exactly what an ethernet wire or “dumb” switch (or a Mikrotik “wireless wire” couple of devices) would do[1]
- the antenna management part to be reachable on a specific IP and VLAN ← this is what should be doable without problems[2] ( remembering that Mikrotik devices can also normally be accessed via Winbox even if they don’t have any IP address assigned, via MAC)
[1] See for reference:
http://forum.mikrotik.com/t/vlan-passtrough-on-wireless-wire-cube/154506/1
http://forum.mikrotik.com/t/trunking-cube-pro/173957/1
[2] See this for reference, you add a VLAN port to the bridge:
http://forum.mikrotik.com/t/vlan-configuration-for-wireless-wire-rbwapg-60ad-units/153494/1
The only recommended thing is to NOT use VLAN1.