Why can't guest WIFi clients get through to the network?

Question

Mikrotik

Good afternoon!
I'm messing with hap ac 2.
Created Virtual ap, created a security policy for it. Virtual ap shoved into a separate Bridge. Configured DHCP for clients.
Clients are connected, receive the address, but in a network cannot leave.
I can't understand what is the reason.
interface

Bridge

Address

dhcp

routes

firewalls

Answer 1

Solved the problem.
What exactly was the error, unfortunately I did not find.
It feels like something was done wrong with the bridge-local settings, maybe I accidentally pressed something.
In general, I recreated the bridge, set up the local network first, made sure that it was working, and only then created a bridge-quest, substituted a virtual ap there, created an address space, separate DHCP and limited access from the local network to the guest network and vice versa .

Answer 2

Out interface correct (wan) specify in NAT