https://wiki.mikrotik.com/wiki/Manual:I ... _Filtering
If you find any error, please let me now so that I can correct it.
I will add more example with configuration and Visio later
VLAN Example #1 (Trunk and Access Ports) Create a bridge with disabled vlan-filtering to avoid losing access to the router before VLANs are completely configured.
Add bridge ports and specify pvid for VLAN access ports to assign their untagged traffic to the intended VLAN.
/interface bridge add name=bridge1 vlan-filtering=no
Add Bridge VLAN entries and specify tagged and untagged ports in them.
/interface bridge port add bridge=bridge1 interface=ether2 add bridge=bridge1 interface=ether6 pvid=200 add bridge=bridge1 interface=ether7 pvid=300 add bridge=bridge1 interface=ether8 pvid=400
In the end, when VLAN configuration is complete, enable Bridge VLAN Filtering.
/interface bridge vlan add bridge=bridge1 tagged=ether2 untagged=ether6 vlan-ids=200 add bridge=bridge1 tagged=ether2 untagged=ether7 vlan-ids=300 add bridge=bridge1 tagged=ether2 untagged=ether8 vlan-ids=400
Warning: The PVID value is set to all traffic that enters the bridge and adds the port dynamically to the bridge VLAN table for VLAN ID that matches the PVID value. If you are trying to isolate tagged traffic from untagged traffic, then make sure you have set a PVID to a bridge port that is different from the bridge's PVID value, otherwise these ports will be dynamically added to the bridge VLAN table and will be able to forward traffic from untagged ports.
/interface bridge set bridge1 vlan-filtering=yes