Wireless Networking via CAPsMAN

hi guys this is my second post on this forum hope this time i will get help again

i am running small hotspot business and have taken mikrotik switch to manage all aps and all aps is QRT-2

i am running this via CAPsMAN but facing some problem all where going good but when i installed new ap or sometime old ap is showing same problem and i need to reset all switch and need to control all again

before its shows some loop warning and i have enabled RSTP in bridge mode but i think i am doing some wrong config

but after sometime when i open my aps i seen this and shocked
i have given image sample this all firewall rules is config by switch i think so i didn’t done any thing means i dint maken any rule

please tell me how to config it properly