Problem with Ubiquiti cloud controller when APs are behind a Mikrotik

Think you need both port forward and hairpin nat.