It’s been discussed recently: http://forum.mikrotik.com/t/vlan-and-filtering-on-non-crs3xx-devices/131561/1