Thank you for your good advice!
I have no great desire to use Capsman at all! If I had 50 APs then perhaps I would fight harder to use it.
What I haven’t found yet is an easy way to add a Guest network - I tried the VLAN method on this post http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1 First time it bricked the router. Second time I found the RB4011 has incompatible wifi to vlan.
Do I have to to use vlans to get the APs to have a guest wifi? It appears that I do need to do that so the APs communicate with the router over the same bridge to get to the two DHCP servers on the router.
This is all on 7.16.1