I think you can do it by using port-level isolation on your CRS, you can then have private VLANs. You need to create port group communities (in your case, you need totally 3 port group community) and uplink ports. (here you have 2 uplink ports, one for your router and one for your server) Communicat...

http://mikrotik.online.ir availble on both ipv4 and ipv6.

Regards,

Arash Naderpour

in sxt, check the wireless mode you are using, some of them can not be used when you add wlan as a port in bridge. your bridge seems not working correctly now.

when you use setup in /ip hotspot, the primary name server your clients receive from DHCP server is set to local IP address of hotspot, means all your clients DNS requests will be send to MikroTik first. you can change the DNS servers later in DHCP server configuration. but please note that if you r...

Stateful NAT64 (Network Address and Protocol Translation from IPv6 Clients to IPv4 Servers) is not availble in RouterOS. you can try an open-source implementation of a NAT64 gateway called Ecdysis availble at http://ecdysis.viagenie.ca/index.html