hEX-S "advanced" setup with VLANs, dynamic DNS, CAPsMAN, etc.

  1. If those old things have nothing to do with the new setups, then keep them.
  2. You’ll lose everything, unless you do an /export to save the certificates.
  3. They’re always numbered, but Mikrotik offers a mnemonic abstraction feature that only works within the router.
  4. You can’t easily, unless you do some scripting magic or hack the router to get access to a root shell.
  5. I’m not sure exactly, but you either have to use bridge filter rules or plain old firewall rules. This works by connection tracking to see which device initiated a connection.
  6. You could always add more stuff, such as an LTE failover that uses VRRP, but what you have is good enough, considering that plenty of home networks are way simpler.