My advice is not use vlan1, just change this to 10.
Why untagged vlan 30 on the ethernet interface with the ont??
I have an ont and a vlan for internet I didnt have to tag or untag anything, the vlan is associated with the ethernet interface period. Nothing more needs to be done.
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1