Good morning,
I understand that GUEST and all other WiFi USERS, will fall in the same network.

Is there the possibility to separate guest in another subnet, so they are not in touch with NONGUEST users ?

DHCP is configured and all ACCESS (GUEST and NONGUEST) will have those IP ADDRESSES.

Thank you for your attention

Quick and dirty you can solve this with a second bridge with all whistles and bells (e.g. second DHCP server, second DHCP pool etc.) and attach wireless interfaces serving Guest to that second bridge.

But there are multiple ways to tackle this and the most recommended is using VLAN to segregate work and guest. Also best for future expansion of your network.

Help post to get you started on the concepts:
https://help.mikrotik.com/docs/display/ ... n+Wireless

THE VLAN tutorial around here (look for access point mode):
viewtopic.php?t=143620

Imprssive, thank you very much holvoetn !!