Is there a way to create untagged (802.1q) ethernet subinterfaces (with different MAC addresses), much like Virtual AP’s ? These subintefaces would of course need to be related to physical interface (of perhaps bridged to it).
Only ethernet subinterface option I could find was creating a vlan, but in that case I would get tagged traffic going out (and need tagged traffic going in).
I found this: http://wiki.mikrotik.com/wiki/Manual:Interface/Virtual-ethernet
but I can’t seem to get these virtual interfaces working, they can’t be assigned with an IP address. I guess if I could bridge them to lets say ethernet1 and get each of them an IP address it would work the way I want it? Am I on the right track?
I don’t know exactly what you want. I see you want bridge some interface and separate traffic in interfaces.
The dot1q traffic in name “tagged” no untagged traffic in dot1q (if you see untagged packet that is come from tagged interface because incoming traffic from vlan interface give you untagged packets) . If you want to separate traffic on an interface you need to firewall (layer2 or layer 3) or another way to tag it (dot1q). No other way to separate incoming/outgoing traffic on a physical ethernet interface. If you want any virtual wire, this is a different story.
If you post about “what you want”, and not “how to want” the community might help you with a solution (please make network diagram if complicated).