I have been following this guide:
http://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features
which indicates that my RB2011U should be capable of vLAN tagging in the switch config without having to do the “bridge method”.
Here is a pastebin of my /export (note: eth2 is my “trunk” port, eth1 is supposed to be out of the switch config as a WAN port)
http://pastebin.com/97mMpgRM
Unfortunately I am not able to get this working properly, when I try to view the arp cache of a machine plugged directly into the RB2011U (using eth3), it doesn’t even resolve a MAC address for the RB2011U, although it sees the device and marks it “incomplete”. Any idea what I’m doing wrong?