How do you allow certain MAC addresses to access only the main wireless network, but allow all to my Guest Network?
Doesn't seem like you can group interfaces together in a group. I've got 14 AP's with a main network and Guest Network. On the main network I only want to allow certain MAC's and disallow the rest without affecting the Guest Network. Hope this makes sense.

Banning everything else, is the bigger problem. Now unless a mac is allowed it,will drop. Does that sound like a good Guest network setup?
Mikrotik needs a way to group interfaces (ie. guest channels) so i can apply different rules to them.

There is a ssid regex option that you can use to apply certain rules in the access list to certain networks. You don't have to specify a Mac address either.

You could have an accept rule for all devices in your guest ssid and limit your main network with accept rules for that ssid with only defined Mac addresses - then a reject rule to block everything else on the main ssid.

@biomesh
That's exactly what I was looking for. The "list" is really the SSID and that will work perfectly. Thank you.