Fairly simple:
- trunk ports should be tagged
- accessports should be untagged *)
It is not necessary to mark untagged explicitly as they are dynamically added (configured by the pvid in /interface bridge port).
Please also read this post carefully: http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1