I'm a beginner in Mikrotik devices and I need your help how to setup Virtual AP (Guest WiFi) in the following setup: 1 hEX router (with DHCP server, firewall, NAT etc running) and 2 wAPs connected via Ethernet to the hEX, both CAPs controlled by CAPsMAN running on hEX (local forwarding on).
I want to setup a Guest WiFi with separate IP network from the main WiFi network, with no access between them - Guest should have access only to internet via hEX & no access to WiFi clients connected to main WiFi and LAN devices connected via Ethernet to hEX.
I don't know how to create Datapath and how / where (in CAP, CAPsMAN etc) to create Bridge for the Guest WiFi, so it can get DHCP address from a different pool of addresses. All my tries end up in having Guest clients getting IP from the same network as main clients.
All tutorials I've seen have the WiFi running on the router, not on separate APs, so I cannot fully replicate them.
Any advice/tutorial/hint on my particular setup is more than welcome.