Knowing which Netgear router would help…
Knowing which MT AP would also help.
In general the idea is that the netgear gives each AP a different IP address.
Each AP has a basic setup as follows…
( yours may have less LAN ports for example )
( assuming the Netgear subnet is 192.168.1.0/2 and we assign 192.168.1.2/24 to the bridge and thus to the first Mikrotik AP 192.168.1.2/24 )
/interface bridge
add comment=bridge name=PUENTE
/interface ethernet
set [ find default-name=ether1 ] comment=MainRouterConnection
set [ find default-name=ether2 ] comment=LAN
set [ find default-name=ether3 ] comment=LAN
set [ find default-name=ether4 ] comment=LAN
set [ find default-name=ether5 ] comment=LAN
/interface wifi
as required
/interface list
add name=MANAGE
/interface bridge port
add bridge=PUENTE interface=ether1 internal-path-cost=10 path-cost=10 comment=“from main router”
add bridge=PUENTE interface=ether2 internal-path-cost=10 path-cost=10
add bridge=PUENTE interface=ether3 internal-path-cost=10 path-cost=10
add bridge=PUENTE interface=ether4 internal-path-cost=10 path-cost=10
add bridge=PUENTE interface=ether5 internal-path-cost=10 path-cost=10
add bridge=PUENTE interface=wifi1 internal-path-cost=10 path-cost=10
add bridge=PUENTE interface=wifi2 internal-path-cost=10 path-cost=10
/interface list member
add interface=PUENTE list=MANAGE
/ip neighbor discovery-settings
set discover-interface-list=MANAGE
/ip address
add address=192.168.1.2/24 comment=LAN interface=PUENTE network=192.168.1.0
/ip dns
set servers=192.168.3.1
/ip route
add dst-address=0.0.0.0/0 gateway=192.168.3.1
/tool mac-server
set allowed-interface-list=none
/tool mac-server mac-winbox
set allowed-interface-list=MANAGE
++++++++++++++++++++++++++++++++
Finally recommend depending if you have extra ports, like ether1 from NETGEAR,
use router 2 off bridge, for easy management of APs.
/interface bridge
add comment=bridge name=PUENTE
/interface ethernet
set [ find default-name=ether1 ] comment=MainRouterConnection
set [ find default-name=ether2 ] comment=OffBridge2
/interface wifi
as required
/interface list
add name=MANAGE
/interface bridge port
add bridge=PUENTE interface=ether1 internal-path-cost=10 path-cost=10 comment=“from main router”
add bridge=PUENTE interface=wifi1 internal-path-cost=10 path-cost=10
add bridge=PUENTE interface=wifi2 internal-path-cost=10 path-cost=10
/interface list member
add interface=PUENTE list=MANAGEadd interface=Offbridge2 list=MANAGE
/ip neighbor discovery-settings
set discover-interface-list=MANAGE
/ip address
add address=192.168.1.2/24 comment=LAN interface=PUENTE network=192.168.1.0
add address=192.68.55.0/30 interface=Offbridg2 network=192.168.55.0
/ip dns
set servers=192.168.3.1
/ip route
add dst-address=0.0.0.0/0 gateway=192.168.3.1
/tool mac-server
set allowed-interface-list=none
/tool mac-server mac-winbox
set allowed-interface-list=MANAGE
The idea being, that you can then plug your laptop into etherport2, change your ipv4 settings to 192.168.55.2 on the laptop and gain access.