How to paint VLAN on Mikrotik?

Question

Mikrotik

Good afternoon, this is the first time I have encountered this, I ask for help.
In general, there is an NTE-RG-1402G-W (Optical terminal) on port 0 there are 3 VLANs:
1. Internet - VLAN 1
2. STB - VLAN 2.3
The problem is the following, this cable comes to my Mikrotik hAP ac in the first port, it is necessary to implement the following:
1. Raise a PPPoE connection to VLAN 1
2. Give a local network with the Internet to ports 2-3. (This is not a problem)
3. On ports 4-5, hang VLAN 2.3, respectively.
No matter how I tried to paint the VLAN, nothing happens. I will not give examples, there were many.

Answer 1

Right now I don't know how to do it. I can only say that the SWITCH YOUR ROUTERBOARD presentation will definitely help you. Just search for this query in Google, it is found quickly. If you have a solid idea of ​​​​what a VLAN is, then you will understand and configure it.

Answer 2

Look, on the first port you create all the VLAN interfaces that you need to forward further, i.e. create VLAN interfaces where the required IDs will be specified and the port will be the first. So we started to receive tagged frames from the provider
Next, create a PPPoE connection, and specify for it the previously created VLAN interface on the first port with the corresponding tag. So we said that in order to establish a connection, we need to send packets with a tag to the first port.
Then, there are two ways, 2 and 3 vlans to give to the 4th and 5th ports completely with tags or make one native, consider both.
To begin with, we make the fourth port the fourth master for the fifth port, so we said that the fifth port and the fourth are common, and the settings will need to be made only for one of them, they are, as it were, in a switch.
1. We send both vlans with tags to the fifth and fourth ports.
Then, on the fourth port, we create two virtual interfaces, each with its own ID (they may differ from 2 and 3, or they may be the same), and then we connect each such interface using a bridge with what the provider gave us. For example, we put the second vlan on the first port in the bridge with the second vlan on the fourth port, and the same is true for other vlans and for another bridge.
2. We give one vlan natively - without a tag.
We create only one virtual interface on the fourth port.
Then one of the Vlans from the first port is placed in the bridge with the fourth port, and the second VLAN from the first port is placed in the bridge with the remaining Vlan on the fourth port.
There is a way to do the same thing through the command switch, but it is less obvious, not all pieces of iron can do it the same way and I'm too lazy =)