/interface wifi channel
add band=2ghz-g disabled=no name=channel1-2ghz width=20mhz
add band=5ghz-a disabled=no name=channel2-5ghz-a width=20mhz
/interface wifi datapath
add bridge=bridge2-ext bridge-horizon=1 client-isolation=yes disabled=no name=datapath1
/interface wifi security
add authentication-types="" disabled=no ft=no name=sec1
/interface wifi configuration
add channel=channel1-2ghz country=Germany datapath=datapath1 disabled=no hide-ssid=no mode=ap name=cfg1-2ghz security=sec1 security.ft=yes ssid=test2
add channel=channel2-5ghz-a country=Germany datapath=datapath1 disabled=no hide-ssid=no mode=ap name=cfg2-5ghz security=sec1 security.ft=yes ssid=test2
/interface wifi capsman
set enabled=yes interfaces=bridge1-int package-path="" require-peer-certificate=no upgrade-policy=none
/interface wifi provisioning
add action=create-dynamic-enabled disabled=no master-configuration=cfg1-2ghz name-format=%I-2ghz-ax-g-n supported-bands=2ghz-ax,2ghz-g,2ghz-n
add action=create-dynamic-enabled disabled=no master-configuration=cfg2-5ghz name-format=%I-5ghz-a-an-ac-ax supported-bands=5ghz-a,5ghz-n,5ghz-ac,5ghz-ax

/interface bridge
add name=bridge1-int protocol-mode=none
add name=bridge2-ext protocol-mode=none
/interface wifi channel
add band=2ghz-g disabled=no name=channel1-2ghz-g-20mhz width=20mhz
add band=5ghz-a disabled=no name=channel2-5ghz-a-20-mhz width=20mhz
add band=2ghz-ax disabled=no name=channel3-2ghz-ax-20mhz width=20mhz
/interface wifi datapath
add bridge=bridge2-ext bridge-horizon=1 client-isolation=yes disabled=no name=datapath1-master
add bridge=bridge2-ext bridge-horizon=1 client-isolation=yes disabled=no name=datapath2-slave1
/interface wifi security
add authentication-types="" disabled=no ft=no name=sec1
/interface wifi configuration
add channel=channel1-2ghz-g-20mhz country=Germany datapath=datapath1-master disabled=no hide-ssid=no mode=ap name=cfg1-2ghz-g-20mhz security=sec1 security.ft=yes ssid=test2-g
add channel=channel2-5ghz-a-20-mhz country=Germany datapath=datapath1-master disabled=no hide-ssid=no mode=ap name=cfg2-5ghz-a-20mhz security=sec1 security.ft=yes ssid=test5-a
add channel=channel3-2ghz-ax-20mhz country=Germany datapath=datapath2-slave1 disabled=no hide-ssid=no mode=ap name=cfg3-2ghz-ax-20mhz security=sec1 security.ft=yes ssid=test2-ax
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=dhcp_pool0 ranges=10.10.1.2-10.10.1.254
/caps-man manager interface
set [ find default=yes ] forbid=yes
add disabled=no interface=bridge1-int
/interface bridge port
add bridge=bridge1-int interface=ether1
/interface wifi access-list
add action=accept client-isolation=yes disabled=no interface=any
/interface wifi capsman
set enabled=yes interfaces=bridge1-int package-path="" require-peer-certificate=no upgrade-policy=none
/interface wifi provisioning
add action=create-dynamic-enabled disabled=no master-configuration=cfg1-2ghz-g-20mhz name-format=%I-2ghz-ax-g-n slave-configurations=cfg3-2ghz-ax-20mhz supported-bands=2ghz-ax,2ghz-g,2ghz-n
add action=create-dynamic-enabled disabled=no master-configuration=cfg2-5ghz-a-20mhz name-format=%I-5ghz-a-an-ac-ax supported-bands=5ghz-a,5ghz-n,5ghz-ac,5ghz-ax
/ip address
add address=10.10.1.1/24 interface=*8 network=10.10.1.0
/ip dhcp-server
add address-pool=dhcp_pool0 interface=*8 name=dhcp1
/ip dhcp-server network
add address=10.10.1.0/24 gateway=10.10.1.1
/system note
set show-at-login=no

/interface bridge
add admin-mac=48:A9:8A:39:1B:BB auto-mac=no comment=defconf name=bridgeLocal protocol-mode=none
/interface wifi
# managed by CAPsMAN
# mode: AP, SSID: test5-a, channel: 5500/a
set [ find default-name=wifi1 ] configuration.manager=capsman .mode=ap disabled=no
# managed by CAPsMAN
# mode: AP, SSID: test2-g, channel: 2432/g
set [ find default-name=wifi2 ] configuration.manager=capsman .mode=ap disabled=no
/interface bridge port
add bridge=bridgeLocal comment=defconf interface=ether1
add bridge=bridgeLocal comment=defconf interface=ether2
add bridge=bridgeLocal comment=defconf interface=ether3
add bridge=bridgeLocal comment=defconf interface=ether4
/interface wifi cap
set discovery-interfaces=bridgeLocal enabled=yes
/ip dhcp-client
add comment=defconf interface=bridgeLocal
/system identity
set name=TEST-CAP1
/system note
set show-at-login=no

There are the following datapath settings:

    local-forwarding -- controls forwarding mode
    openflow-switch -- OpenFlow switch to add interface to, as port when enabled
    vlan-mode -- VLAN tagging mode specifies if VLAN tag should be assigned to interface (causes all received data to get tagged with VLAN tag and allows interface to only send out data tagged with given tag)

set [ find default-name=wifi1 ] configuration.manager=capsman .mode=ap datapath.bridge=bridge1 disabled=no
set [ find default-name=wifi2 ] configuration.manager=capsman .mode=ap datapath.bridge=bridge1 disabled=no

/interface wifi datapath
add disabled=no name=datapath111 vlan-id=111
add disabled=no name=datapath222 vlan-id=222

:local brName  "bridgeLocal";

:if ($usingWifiPack) do={
:local addDatapath [:parse "/interface $wirelessMenu datapath
add comment=\"defconf\" name=capdp disabled=no bridge=$brName"]
[$addDatapath]
}

if ($usingWifiPack) do={
:set setCap [:parse ":foreach i in=[/interface $wirelessMenu find] do={
/interface $wirelessMenu set \$i configuration.manager=capsman datapath=capdp
}
/interface $wirelessMenu cap
set enabled=yes discovery-interfaces=$brName slaves-datapath=capdp"]
}