Hello!
I am sorry for my bad English.
I need send two vlan in "untagged" mode to access port.

I have CRS317.. in sfp16 comes two tagged vlan: 1-internet and dhcp-addressing, 4 - iptv multicast.
My trying One.
I created for physical iface sfp16 two vlans: lan1 pvid=1, lan4 pvid=4. After I created bridge (vlan-filtering=no) and add into: client port sfp14, vlan1, vlan4. I have solution my problem and loop to up swith. After added rule into bridge Filter: drop forwarding traffic between vlan1 and vlan4. After it solution just work. It fine! But... traffic moved and processed in CPU, not switch chip.

My trying Two.
I need traffic processed wired speed, so created bridge br0 (vlan-filtering=yes) and two vlan into bridge. Code: Rules added, but for interface sfp14 in br0 PVID=1 and I have this situation: while pvid=1 - internet and adressing in network work, but not iptv. If I setup pvid=4 for sfp14 - multicast iptv now work, but internet and addressing - not work.

Is there a solution? Exist 2 vlan in uplink port and it needs to be forwarded to access ports (untagged mode, simulate unmanaged ethernet switch)

You can only have 1 untagged vlan on a port or trunk. All additional ports need to be tagged.

If you want to simulate unmanaged switch, then you have to relay both VLANs tagged. Unmanaged switch will send frames regardless of VLAN tag and will most certainly not untag frames.

Thanks, I understand, need add unmanaged switch after mikrotik.
I think maybe use mac-based vlan classify, but it notgood for my situation..
I will continue the search for a solution...

Hello again!
Solution on the back side: By default access port - untagged vlan 4 (iptv), for pppoe-discovery and pppoe-session tfaffic from acces-port tagged vlan 1 (mac-based vlan filtering). However, ip-addressing must be in default vlan 4 (iptv), and for pppoe-connects from client traffic going to vlan 1.