/int vl add name=vlan501 vlan-id=501 disabled=no interface=ether2
/int bri add protocol=rstp
/int bri port add bridge=bridge1 inter=vlan501
/int bri port add bridge=bridge1 inter=ether3
/int ethernet set ether4,ether5,ether6,++ master-port=ether3
And I need set master-port = ether2 to pc2 and pc1 if i like that work because with master-port ether3 don't work.
And with master-port = ether3 to pc3 work but... The two do not work at once. With this setup works sometimes and other time the ping does not work
Well, no surprise there (again, given that I understand what you want to do correctly). Bridge1 would have to consist of vlan501 and ether3, and ether9 should have ether3 as its master-port. To make pc1/2 work, which are connected to ether7 and ether8, you need to create another bridge where you bridge ether7, ether8 and ether2 (to make the packets go untagged out on ether2). So this should be correct (again, untested):
/int bri add
/int bri port add bridge=bridge1 inter=vlan501
/int bri port add bridge=bridge1 inter=ether3
/int bri add
/int bri port add bridge=bridge2 inter=ether2
/int bri port add bridge=bridge2 inter=ether7
/int bri port add bridge=bridge2 inter=ether8
/int ethernet set ether9 master-port=ether3
I don't know if you can have multiple master ports (and I can't check it for you as I don't have a 493 available atm). If you can, you have to set for instance ether4 as being the master port for ether7 and ether8, and bridge ether2 and ether4 instead of ether2, ether7 and ether8 to utilize the hardware switching feature. If you can't have multiple master ports, you have to choose which ports can be in the hardware "bridge" and bridge the rest with traditional software/RouterOS bridges.
I'm trying with rstp in the bridge, with two bridge (bridge1=vlan501 and ether3 and bridge2=vlan502 and ether4), with stp, with none,.. but don't work.
That will work, if the purpose is to make ether3 a member of vlan501 and ether4 a member of vlan502, provided you have set the interface on both vlans to be ether2. This was, however, not the setup you outlined in one of your earlier posts (or I may have misunderstood something). Oh, and don't get too hung up in different spanning tree protocols yet, just run with 'none' now for starters. You should probably forget about master-ports too, until you have the basic setup working.
If you ignore master ports for now and just want a basic setup where you run traffic on ether9 (pc3) on vlan 501 and traffic on ether7 and ether8 untagged, this would be it:
/int bri add
/int bri add
/int vl add name=vlan501 vlan-id=501 disabled=no interface=bridge2
/int bri port add bridge=bridge1 inter=vlan501
/int bri port add bridge=bridge1 inter=ether9
/int bri port add bridge=bridge2 inter=ether2
/int bri port add bridge=bridge2 inter=ether7
/int bri port add bridge=bridge2 inter=ether8
To mimic ether7 and ether8 being untagged interfaces, you will now have to filter vlan packets from/to ether7-8 using bridge filters so that only untagged packets will pass. I'll leave this excercise to the reader.
YMMV as it's untested, but you should now be able to ping from/to pc1, 2 and 3 at the same time, given that you have configured pfsense correctly (192.168.2.1 on vlan501, tagged on interface #1, and 192.168.1.1 untagged on interface #1).
Apologies in advance for spelling, typos or thinkos -- I was in a hurry.