VLAN w/ trunk on RB2011

So you WAN is not a real WAN? If it is it would not be on port 4 or port 2 as well just incoming and stop at the router.
In any case all your answers are here…

http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1