/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce \
disabled=no distance=indoors frequency=auto hide-ssid=yes installation=\
indoor mode=ap-bridge ssid=Mikrotik wireless-protocol=802.11
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=\
20/40/80mhz-Ceee disabled=no distance=indoors frequency=auto hide-ssid=\
yes installation=indoor mode=ap-bridge ssid=Mikrotik wireless-protocol=\
802.11
You probably want to have 20MHz channelwidth on your 2GHz radio.
You may reconsider using legacy protocols (802.11a and 802.11b).
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
dynamic-keys supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk name="Guest Profile" \
supplicant-identity=""
add authentication-types=wpa-psk,wpa2-psk,wpa-eap,wpa2-eap group-ciphers=\
tkip,aes-ccm mode=dynamic-keys name="Corp Profile" supplicant-identity="" \
unicast-ciphers=tkip,aes-ccm
If guest is open, why did you set authentication-type?
Remove wpa-psk, that should not be used anymore.
After removing wpa-psk, you van also remove tkip from group-ciphers (and leave aes-ccm).
As far as I know, psk and eap should not be used together. And that is probably causing the problems.