VLAN with "Dumb AP"

Hello,
I am a newcomer with RouterOS and VLANs, or general network technology :smiley:.
I have been reading/trying for a few days to get what I want with VLANs but I doesnt seem like I get it, so I hope someone can help me here.
My setup:
I have an Ubiquiti AC AP Pro with OpenWrt where I set up WLAN and WLAN GUEST as an Dumb AP (https://openwrt.org/docs/guide-user/network/wifi/dumbap).
The AP is connect with my Mikrotik 2011UiAS on Ether2.
Ether1 is PPPoE mit DSL-Modem.
Ether3 is my NAS.
Ether4 is my Printer.
Now I want VLAN where the Guest Wlan is, with access to the printer.
And the other VLAN should have access to everything else, including the printer.
Somehow I dont know where to go, currently I have all interfaces connected with a bridge…do I need to set a VLAN for the bridge, or configure the tags for every interface on its own or…?
I am very new in this thematic…I have my current config and my wanted config attached, I hope someone can help me.
Thanks,
Tropaion
WantedConfig.pdf (1.34 MB)
OpenWRT_Switch.png
RouterOS.png
OpenWRT_Interfaces.png

Try reading some helpful resources. If you’re fast learner, there’s manual with some helpful examples. You can look at this one:

https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#VLAN_Example_.232_.28Trunk_and_Hybrid_Ports.29

and also the following one, and it should give you some ideas. Focus on the part how vlans are defined, type (tagged/untagged), number, port, and how you assign IP subnet to different vlans (that’s in example #3).

If that’s not enough, there’s also this popular and very detailed thread: Using RouterOS to VLAN your network