docmarius, thanks to your reply.
First of all,
dlink switch is DGS-1100-06/me - it is managed l2 and work with vlans well. I thought it is clear because on the picture i use untagged and tagged vlans on it.
If the tagging from Dlink is correct and the Dlink does its job correctly, then, of course, the culprit is the RB250. And the first question which comes to mind is: do you use the latest firmware on it (from your screen shots it doesn't seem that way, if the firmware is functional identical to the RB260, which shows another image on the VLANs tab than the one you posted).
fw 1.14 - it is the latest.
When I change rb250gs to another vlan-switch, like DGS-3200-10 or Edge-core ecs3510 - everything works correct.
But I cant do this because Rb250gs is unique with possibility to be powered with poe-injector.
The problem is in rb250gs, but i cant understand why it cant work with mikrotik vlans, and cant handle macs from dlink.