Finally got rid of the "management vlan" inherited from unifi; all traffic is tagged now \o/
I do find the concept of an imperative config annoying in #routeros. #vyatta would have been closer to the nixos experience for sure. Still, routeros makes many many things trivial in re. networking and in the end the packets just flow.