Virtual AP/Virtual Client + DHCP + 2.4

The config I want is:

wlan1 - 2.4ghz client
wlan3 - 2.4ghz AP (dhcp, masquerade)
wlan2 - 5ghz AP (dhcp, masquerade)

This is my current config. Unfortunately I can’t get the Mikrotik to send a DHCP reply on virtual interface, whether virtual interface is configured as AP with station as slave or as station with AP as slave.

Can I achieve what I want with the hAP ac lite or do I have to find another box?

/interface bridge
add admin-mac=6C:3B:6B:06:09:5A auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether3 ] master-port=ether2-master
set [ find default-name=ether4 ] master-port=ether2-master
set [ find default-name=ether5 ] master-port=ether2-master
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no frequency=2447 name=wlan1-client-2.4 ssid=ALOFT \
    wireless-protocol=802.11
add disabled=no mac-address=6E:3B:6B:06:09:5F master-interface=wlan1-client-2.4 mode=ap-bridge name=wlan3 ssid=\
    ninjaroutes-2.4 wds-default-bridge=bridge
/ip neighbor discovery
set ether1 discover=no
set bridge comment=defconf
/interface wireless security-profiles
add authentication-types=wpa2-psk management-protection=allowed mode=dynamic-keys name=homeprof wpa2-pre-shared-key=\
    hanshotfirst
add authentication-types=wpa-psk,wpa2-psk management-protection=allowed mode=dynamic-keys name=ninjaroutes \
    wpa-pre-shared-key=getthehellout wpa2-pre-shared-key=getthehellout
/interface wireless
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40mhz-Ce disabled=no distance=indoors frequency=\
    auto mode=ap-bridge security-profile=ninjaroutes ssid=ninjaroutes wireless-protocol=802.11
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge lease-time=2m name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=bridge comment=defconf interface=wlan2
/interface wireless connect-list
add interface=wlan1-client-2.4 security-profile=default ssid=BB-2-GHz
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no interface=wlan1-client-2.4
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept establieshed,related" connection-state=established,related
add action=drop chain=input comment="defconf: drop all from WAN" in-interface=ether1
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related" connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf:  drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=wlan1-client-2.4
/system clock
set time-zone-name=America/Denver
/system routerboard settings
set cpu-frequency=650MHz init-delay=0s protected-routerboot=disabled
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=bridge
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=bridge

Your virtual-ap (wlan1) isn’t in bridge, and have no dhcp-server. You can add it or use dhcp-relay.