Minimal save setup for CAP device

Hey Guys,
actually I am setting up the wireless part of my home network, again. I use an RB2011UiAS as CAPsMan and some wAP ac as CAP. So far, everything is working well, but I got some questions during the setup. My goal is to create a setup for a the CAPs, with a minimum amount of active packages. So here are my Ideas for that, maybe somebody can correct or help a little bit:

Which packages are really needed in that scenario, dhcp and system for sure, any more?
Security is need for WinBox (which I use normally) and wireless is required for CAP.
But do I need the routing, ppp, mpls, hotspot and advanced-tools packages?
Routing and firewalling are done by the CAPsMan device, so I do not need to configure this at the CAP devices, right? If I furthermore disable all IP services not needed, I should be fine.
Will I have to add some additional firewall rules at the CAP to secure it?

No
You can’t disable DHCP package anymore …

Routing and firewalling are done by the CAPsMan device, so I do not need to configure this at the CAP devices, right? If I furthermore disable all IP services not needed, I should be fine.

Yes

Will I have to add some additional firewall rules at the CAP to secure it?

No

No, Yes, No, Great :slight_smile:

Thanks. Have a good one :slight_smile: