How to set up Mikrotik on a second virtual WiFi network with l2tp?

Question

Mikrotik

Good afternoon!
There is a Mikrotik. In the WAN, DCHP gives him an address from other equipment.
It distributes the SSID_4G network.
How to make an additional WiFi mesh from it (the second AP) inside which there will be l2tp or pptp to the remote VPN?
That is, SSID_4G gives WAN and everything that is. and the other WiFi - connected l2tp / pp2p and all this important works simultaneously on one mikrotik?
Thank you!

Answer 1

I think logically you need to put VPN and Wi-Fi in Bridge and set up routes.

Answer 2

If I'm not mistaken, in addition to routes, it will also be necessary to set up masquerading.

Answer 3

Point by point:
1) Mikrotik raises VPN to some remote host, gets an address from there
2) an additional local network is created, which is distributed via Wifi
3) is there a way out of this wifi access only through vpn?