Hi, sorry for late reply, but lets leave it for history) I've been working on the same project, we used Mikrotik mostly for PoC. So, in genereal EAP-SIM auth for HS 2.0 works fine, yes. Regarding traffic forwarding - no, that is not possible without involving some EoGRE terminator in the middle. You...

+1
we faced the same issue. After upgrade to 6.43.2 our hAP AC became to hang up from time to time.
So we had to downgrade it. 6.42.9 works more stable.

I had the same issue ("disconnected, unicast key exchange timeout") on ROS 38.5. I fixed it with decreasing HW-retries parameter to 4.
Maybe it wil help somebody)

DHCP Lease assignment based on received DHCP Option 82 Info (this one is the most important)

+1
must have!
I believe in Mikrotik)