CAPsMAN is definitly more complex, but once you understand it it can help you.
Different IP addresses won’t bring any security for you, you might want to dive into the world of VLAN’s:
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
Be aware that you have to add firewall rules manually to isolate the different VLAN’s