Force Guest VLAN to go through VPN client?

This guide was perfect: http://forum.mikrotik.com/t/nordvpn-ipsec-ikev2-killswitch-for-ros6/144817/1

That’s it, everything is now working with killswitch tested.

MikroTik is fantastic, so many excellent resources on this forum.