It’s not issue of robustness. More that the separation between Layer2 and Layer3 is kinda muddled in the bridge, so config get tricky. You might want to check this article as it might explain why things appear complex esp. the tagged=br0 needed etc.: http://forum.mikrotik.com/t/routeros-bridge-mysteries-explained/147832/1
To clarify, it seems you have a “hybrid” port on on ether1, you’d like the hAP to get DHCP address from the untagged traffic on ether1. Is that right?
If so, you’d want to make sure ether1 is enabled in /interface/bridge/port and set an as an untagged on /interface/bridge/vlan pvid=1. Currently, your config says to make VLAN packet with VLAN ID 1, and your /ip/dhcp-client is [essentially] looking at untagged packets (since dhcp-client not on some /interface/vlan with vlan-id=1 which is bad idea but likely work as configured in previous post). Also, you setting pvid of ether1 to VLAN 10, that makes VLAN 10 untagged FWIW.
Maybe you can clarify what the ideal end-state is for the various ports (e.g. what should be tagged and untagged by port).
_Couple notes:
- you can use MAC address in winbox to access the router even if bridge is messed up.
- “/interface/bridge/vlan print” with show the “dynamic” assignment (D in left column) done on a /interface/bridge/port based on PVID and frame-type=admit-only-untagged-and-priority-tagged_