Need help on "CAPsMAN with Vlans"

Hi,
I have a MikroTik CCR1009+CRS328 Switch + 5 cAP ac at small office. Just want to separate Guest WiFi from office WiFi. I set up exactly the same according to the Wiki and it works. Guest WiFi is on subnet 192.168.20.0/24, and office WiFi as well as office computer are on the subnet 192.168.10.0/24.

https://wiki.mikrotik.com/wiki/Manual:CAPsMAN_with_VLANs
Since the CCR1009 has 7 ethernet port so I connected some office computers and printers directly to the CCR1009 ETH 3-7.

My question is if I want those printer/computers join the subnet of 192.168.10.0/24, how to set up the ETH 3-7 with VLAN 10 ?

Thank you !