I am now ready with my ROS7 Capsman Wifi installation (RB5009+cAPax) that everything works, except for the guest WLAN. The clients connect to the AP but get no IP ?!?!? I am currently at a loss, anyone have any tips ?
greetings Richard
First thing I notice: wifi interfaces should not be added to the bridge manually. I prefer to leave the CAPS as “CAPS Mode” as possible (except for having my ether1 as trunk port and enabling VLAN filtering on the bridge).
DHCP client should be on the bridge and not on an interface being part of the bridge. But again…having CAPS in CAPS Mode will solve a lot of problems.
/ip upnp
set enabled=yes
On an accespoint!? 
Mmm…you have a very “creative” configuration. Might want to check the example:
https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-CAPsMAN-CAPsimpleconfigurationexample:
Well, creative is not always bad 
yes, I still have to clean up a few little things (upnp on the AP, DHCP client on the bridge, etc.). virtual APs are now dynamically in the bridge via Datapath. But CAP in CAPS mode is then just ‘mikrotik magic’ … Is the error not obvious, why no IP comes along ?
Well, you did a very good job to make it look bad 
yes, I still have to clean up a few little things (upnp on the AP, DHCP client on the bridge, etc.). virtual APs are now dynamically in the bridge via Datapath. But CAP in CAPS mode is then just ‘mikrotik magic’ >
Not a few things, it is a complete mess. Working according to the documentation is no magic...at all.
Is the error not obvious, why no IP comes along ?
The "error" is misconfiguration. If you want to stick to your creative concept...just search for "datapath-home" and "datapath-guest" in the CAPsMAN config. You'll probably see the difference (appart from the occurences).
Is a guest WLAN under ROS7 (Capsman Wifi) even possible without VLAN?
Sure, why not? Out friend @tangent has written a nice blog on it:
https://tangentsoft.com/mikrotik/wiki?name=Isolated+Guest+WiFi+Sans+VLANs
Any reason not to use VLAN?
in a home environment I don’t necessarily want to start with VLANs
And thanks for the example from tangent, but he has Capsman + AP on one device … does that work with my configuration (RB5009+cAPax)?
br, Richard
With this extensive guide you will be good to go using VLAN’s:
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
Once you get the concepts you will never go back.
The other option I see is setting client-isolation on an access-list, filtered by SSID. Haven’t tried that myself (as I’m using VLAN’s).
Hey erlinden
I implemented it with VLAN, it worked great and right away. Nevertheless, this part was easier under ROS6.x
Thank you very much for your help !!!
br Richard
Thanks for letting the forum know…you are welcome.
I have very similar problem. My setup is very similar like this:
https://help.mikrotik.com/docs/spaces/ROS/pages/137986075/CAPsMAN+with+VLANs
In my case is only one difference, switch is running with SwOS instead of RouterOS:
cAP → switch(SwOS) → Router(DHCP server with pools for each VLAN)
The port in the switch where is plugged cable form cAP I have set as Trunk port which is member of both VLANs.
Next port which is connected with Router is also Trunk and member of both LANs.
Clients on wifi-1 gets IP from correct DHCP pool - works properly
Clients on wifi-2 does not gets IP.
I see that DHCP server get the request and offered an IP from correct pool, but client does not assign and remains without IP.
pool-23 offering lease 192.168.23.100 for 66:11:66:66:11:66 without success
Why wifi-1 works properly and wifi-2 clients has problem get the IP is mysterious, cause I checked all what is possible 
Surely you did, but sometimes a teeny-tiny mis-configuration escapes anyway.
You should start a new thread, describing your setup and posting the configuration of the devices involved, from what you write the issue appears to be on the cAP, so start by posting the configuration of that device following instructions here:
http://forum.mikrotik.com/t/forum-rules/173010/1
From your other post I conclude the problem was a misconfiguration on your switch.
http://forum.mikrotik.com/t/cap-guest-wifi-clients-does-not-gets-ip-but-home-wifi-clients-gets/183765/3