Wireless Bridge and VLANs

Greetings,

I have a pair of RBDynaDishG-5HacD currently in a simple bridge with some static IPs, connected to Untangle firewalls.

(fw1)-(bridge)-(fw2)

fw1 has several VLAN managed networks and Cisco switches, fw2 is a smaller 4-port VLAN managed switch.

How do I configure a management VLAN into the RBDynaDishG-5HacD, so that I may access them by unique IP address?
The management VLAN is 999, and the network is 192.168.30.0/24. I assume I would need to add some default routes for these IPs in the MTs, but also tag the traffic so when it comes across the ether port is is managed separately from the bridged traffic.

Would I assign the management IPs to the ether port and bridge that to the VLAN interface, or assign the IP to the VLAN interfaces and bridge that to the existing bridge interface? Also curious how to tag the other traffic on the bridge for management, or does everything get untagged?

Just looking for the right direction in MT best-practices for this kind of setup..

Thanks!