仔細看了您的架構後，發現您有使用vlan1[冏]
用上vlan1，會直接排除rb5009將bridge1接口定義為vlan10的機會。
vlan1您是規劃用在區域網路，所以bridge1是先歸類在dhcp區網管理者的位置；
爾後您也不能在bridge1再強加個pvid=10，硬要pppoe-out1也靠bridge1負責撥號。
如果硬強推，bridge1接口肯定會vlan1與vlan10的封包混淆在一起，感覺會非常的不妙。
所以原方案架構不變，只能將vlan20設在另拉出的虛擬接口上，
/interface bridge
add name=bridge1
/interface bridge port
add bridge=bridge1 interface=ether1 hw=yes
add bridge=bridge1 interface=ether2 hw=yes
add bridge=bridge1 interface=ether3 hw=yes
add bridge=bridge1 interface=ether4 hw=yes
add bridge=bridge1 interface=ether5 hw=yes
add bridge=bridge1 interface=ether6 hw=yes
add bridge=bridge1 interface=ether7 hw=yes
add bridge=bridge1 interface=ether8 hw=yes
add bridge=bridge1 interface=ether9 hw=yes
add bridge=bridge1 interface=ether10 hw=yes
/interface bridge vlan
add bridge=bridge1 untagged=ether1,ether2,ether3,ether4,ether6,ether7,ether8,ether9,ether10,bridge1 vlan-ids=1
add bridge=bridge1 tagged=ether1,bridge vlan-ids=10
add bridge=bridge1 tagged=ether1,bridge vlan-ids=20
add bridge=bridge1 tagged=ether1,bridge untagged=ether5 vlan-ids=200
/interface vlan
add interface=bridge1 vlan-id=10 name=vlan10
add interface=bridge1 vlan-id=20 name=vlan20
add interface=bridge1 vlan-id=200 name=vlan200
/interface bridge
set bridge1 vlan-filtering=yes
/ip address
add address=192.168.88.1/24 interface=bridge1 network=192.168.88.0
add address=192.168.89.1/24 interface=vlan200 network=192.168.89.0
add address=61.220.223.81/24 interface=vlan20 network=61.220.223.0
add address=61.220.223.82/24 interface=vlan20 network=61.220.223.0
add address=61.220.223.83/24 interface=vlan20 network=61.220.223.0
add address=61.220.223.84/24 interface=vlan20 network=61.220.223.0
add address=61.220.223.85/24 interface=vlan20 network=61.220.223.0
add address=61.220.223.86/24 interface=vlan20 network=61.220.223.0
/interface pppoe-client
add allow=pap interface=vlan10 name=pppoe-out1 profile=default [email protected] password=xxxxxx
/ip pool
add name=pool88 ranges=192.168.88.2-192.168.88.254
add name=pool89 ranges=192.168.89.2-192.168.89.254
/ip dhcp-server
add address-pool=pool88 interface=bridge1 lease-time=10m name=dhcp88
add address-pool=pool89 interface=vlan200 lease-time=10m name=dhcp89
/ip dhcp-server network
add address=192.168.88.0/24 dns-server=168.95.1.1 gateway=192.168.88.1
add address=192.168.89.0/24 dns-server=168.95.1.1 gateway=192.168.89.1
/ip route
add distance=1 dst-address=0.0.0.0/0 gateway=pppoe-out1
add distance=1 dst-address=0.0.0.0/0 gateway=61.220.223.254 routing-mark=static6
add distance=2 dst-address=0.0.0.0/0 gateway=61.220.223.254 pref-src=61.220.223.81
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1
add action=src-nat chain=srcnat out-interface=vlan20 src-address-type=!local to-addresses=61.220.223.81
/ip firewall mangle
add action=accept chain=prerouting in-interface=vlan200 dst-address=192.168.88.0/24
add action=accept chain=output src-address=61.220.223.0/24 out-interface=bridge1
add action=accept chain=output src-address=61.220.223.0/24 out-interface=vlan200
add action=mark-routing chain=prerouting in-interface=vlan200 dst-address-type=!local new-routing-mark=static6 passthrough=no
add action=mark-routing chain=output src-address=61.220.223.0/24 dst-address-type=!local new-routing-mark=static6 passthrough=no
