Mikrotik to Unifi AP via Dual Nanostation Bridge -- Newbie

OK, so I confess that I’m not an IP or VLAN expert; I’m an electrical engineer by training, but I honestly thought I could do this by reading the forums and doing a bunch of self-exploration. I’m at my limit on time investment here, so a “boost” would be GREATLY appreciated.

My system: Cable Modem → (ether1)RB2011(ether3)<—>Nano M5 AP ~ ~ {1 mile}~ ~ Nano M5 Sta <—>Unifi AP

I’ve gotten the Nano M5 link working, and tried the HOTSPOT setup in the RB, and I’ve had the Unifi accept logins, but I’m sure I’m a LONG WAY from clients on the Unifi being served the WWW. My eventual campground installation will have a few more Nano links to an additional handful of Unifi AP’s, and I want to do all the logins (up to 500 users eventually) in the RB, so I can have everyone on a central authorization server.

If someone could give me a fairly concise initial layout that avoids the command-line-interface lingo, I’d sure appreciate it. I assume this can all be done with the webfig menu entries. My weak points (it’s good to know your weaknesses, right?) are: sub-net addressing schemes; range assignments, separation of “management ip’s” from client ip’s, and the need (or lack of it) for VLANs.

I’m really trying not being lazy here asking for someone else to do my work, but SO MANY of the answers I’ve perused give important snippets and then just say, “…then setup your nuclear reactor like always, yada, yada” and skim past the parts that I’m not understanding. As a final example, anytime an IP field includes x.x.x.x/y, I simply don’t get the /y methodology, even after reading the entire wiki entry.

I’m sorry I’m so stupid – please help the handicapped. If I’m allowed, I’d send my savior a Paypal “Thanks”