How can I set up a management vlan?

Question

Computer networks

Good day.
In the near future I plan to assemble a test bench, as in the diagram below, and I am considering two options for connecting an admin PC to the network:
1) Connecting a PC to a switch. In this case, I'm going to configure the antegom port on the switch
2) Connecting the PC to the router. In this case, do you also need to configure the antegom port on the router so that further traffic is marked, and the switches understand that they are being accessed from the management vlan?

Option 1

Option 2

In the role of a circle Mikrotik 941, in the role of squares D-Link DGS-1100-05, vlan 10 for accounting, vlan 20 for the personnel department, vlan management 555.
And another question: did I take everything into account? What can you advise?
The purpose of the event is a practical acquaintance with vlans

Answer 1

Let's first deal with something that immediately catches your eye on your diagram, namely, the incorrect distribution of the address space. Look, you specify that you use one subnet for all vlans, 192.168.1.1, and mask 24 covers 254 addresses, i.e. at the level of ip addresses, you will already have confusion, and how will you configure the firewall later? I am silent about dhcp. There is a good rule, one vlan one subnet, you don't have that.
Further, you do not have intermediate addresses between switching devices, they also need their own subnet, and you should not forget about them.
If you are configuring dhcp, try configuring dhcp relay on your hardware
In your circuit there are only simple connections, if possible, I recommend adding a hybrid option, i.e. when you have tagged and untagged traffic on the same link. An example of a computer with an IP phone. We have tagged and untagged go to the phone, tagged remains in the phone, and then untagged goes to the computer.
PS In general, look for laboratories for students, many points are considered there