RB450 VLAN configuration

Hello.

Hope dear MT community will give me some advices. I don’t have much experience with network equipment. Thats why my questions may seem strange for pros.

[My network scheme]

RB450:
Port1 > Link from my ISP. Static IP via DHCP.
Port2 > Configured as master port for Port[345]. It’s connected with HP 1810 switch.
Port[345] > sometimes connect desktop PC or laptop.

HP 1810:
Port1 > my desktop pc
Port2 > D-Link AP
Port3 > connected with Mikrotik
Port4 > connected with another switch HP 1910

HP 1910:
Port1 > link from HP 1810
Port2 > HP Microserver (NAS)
Port3 > Dell Optiplex. There would be ESXi for 2-3 VMs.

[Finally, question]

I want to isolate ESXi VMs from my home network. I.e. my home network should be 192.168.1.0/24, devices connected to Port[345] should communicate with all other devices on the network.

ESXi network let it be 192.168.2.0/24 and 192.168.3.0/24

As I understand. I need to create VLANs on RB4500 and on both of HP switches. For example VLAN10 (home LAN), VLAN20 (first ESXi VM), VLAN30 (other two ESXi VMs).

What and how should I do first in Mikrotik router? (I’ll try to configure HP switches myself, but I would be appreciate if someone can give basic theory steps to config - which port should be trunk, which tagged or untagged, etc).

Should I add WAN interface of Mikrotik to some VLAN interface?

[PS]

I’ve read a lot of examples related to VLAN but still don’t fully understand how it works.

I don’t need full howto or full config listing because no one have so much time to solve other people’s problems.

But short step-by-step guide will be very helpful (Step1. Add vlanX in winbox, Step2. assign portX to vlanX, Step3. and so on).

Thanks in advance for help.

Edited: forgot to post network scheme picture - http://www.gliffy.com/go/publish/5887955

Any suggestions?