VLANs - use one interface as a trunk and also for the Internet access (while bridging)

Bridges have an implicit bridge-to-CPU port which provides access from all of the other bridge ports to IP resources (e.g. DHCP, routing, etc.) on the Mikrotik itself, see http://forum.mikrotik.com/t/routeros-bridge-mysteries-explained/147832/1

You need to include this port in the bridge VLAN membership
/interface bridge vlan
add bridge-bridge-lan tagged=bridge-lan,sfp-sfpplus1 untagged=ether1,…,ether24 vlan-ids=10
add bridge-bridge-lan tagged=bridge-lan,sfp-sfpplus1 vlan-ids=11

and create VLAN wrappers connected to this port, e.g.
/interface vlan
add name=vlan10 interface=bridge-lan vlan-id=10
add name=vlan11 interface=bridge-lan vlan-id=11

then attach IP addresses, DHCP servers, clients, etc. to these interfaces.