I prefer to use VLAN. Then you can create an additional virtual wlan interface and add vlan filtering. In the firewall you can choose how all traffic is routed.
Please read this topic carefully: http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1