No worries, in that case the RB4011 will be the router needing full vlan settings and firewall rules etc.
The hapac 2 being an access point/switch will need the minimum.
All well captured here with examples…
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1