Sometimes, I can reach the AP and the switch past the CPE, but not the CPE:
AP -> CPE -> Switch
The workaround is to toggle 'client isolation' off and then back on on the AP. This seems to make the CPE respond.
Hardware is WAP 60G; version is 6.46.6. We have seen this behavior in earlier versions as well. If Mikrotik Support can look at this, that would be great.
We have a network of 1000+ wAP 60G and have seen this ~10 times. We only do bridging, no routing on these devices.