WHAT I HAVE:
I have a direct Ethernet bridge (cable modem) with DHCP to the internet. I get one public IPv4 address and a typical IPv6 (/64?) home connection. Ethernet cables go between the office closet and all rooms in the house. There are switches in some rooms that have multiple devices. There are four WiFi access points in various rooms to yield full coverage of the house and backyard.

WHAT I NEED:

• Firewall / Router that supports the network. I have an 8 port "SG135" Sophos appliance, but do not mind wiping it and installing other software on that same hardware.
• Four WiFi access points that support multiple SSIDs. I want to isolate home appliances and devices from the primary LAN that personal computers use. That requires multiple SSIDs. A "guest network" is not sufficient. I assume it would use a separate VLAN for each SSID.
• Small VLAN-capable switches in a few of the rooms.
• A VLAN-capable switch in the office closet.
• The access points and VLAN switches must be reasonably easy to manage and configure. I understand that it is complex, but some models of access points and VLAN switches make the problem much harder.

I bought some very cheap TP-Link switches. Not only are they not secure, but they are nearly impossible to configure. It becomes a real "bootstrap" nightmare trying to configure access points with SSIDs on VLANs, then the TP-Link cheap switches, and then the office closet equipment without cutting something off accidentally. It is a nightmarish bootstrap process. The TP-Link switches run HTTP with open passwords on the network. No more of that, please.

This is a home network, not a business. I do not want to spend excessive amounts, nor do I want any license "subscriptions" or "renewals".

-> What would you recommend? I need access points, smart switches, and a good firewall/router to put it all together.

So I have been using an MikroTik router for a while and it's been the best router that I have personally used in years since the TP-LINK 300 Mbps days.

Pretty much all other routers I have used had died, bricked and WAN port stopped working on me, not to mention the stability issues that doesn't gets fixed until I reboot the router.

Now MikroTik aside, which router I can buy for $200-$300 to use in an office environment that's gonna be always stable like MikroTik, but faster and will last me at least 5 years?

Additional requirements: WiFi 6+1 Gigabit minimum, Few years of warranty and software updates.

Must have full+high speed coverage for 2 floors and the parking lot. Check photos.

Please make me some specific recommendations.

What I want to reach is to make IPv6 work in my home network and I tried several ways to make the tunnel working, but both do not work.

First approach: using NAT IP (192.168.88.1)
[admin@MikroTik] > /interface 6to4 add comment="Route48.org Tunnel Broker (DE)" disabled=no local-address=192.168.88.1 mtu=1280 name=sit1 remote-address=194.50.X.X [admin@MikroTik] > /ipv6 route add comment="" disabled=no distance=1 dst-address=::/0 gateway=2a06:a003:XXXX::1 scope=30 target-scope=10 [admin@MikroTik] > /ipv6 address add address=2a06:a003:XXXX::2/48 advertise=no disabled=no eui-64=no interface=sit1

Second approach: using carrier router IP (192.168.1.6):
[admin@MikroTik] > /interface 6to4 add comment="Route48.org Tunnel Broker (DE)" disabled=no local-address=192.168.1.6 mtu=1280 name=sit1 remote-address=194.50.X.X [admin@MikroTik] > /ipv6 route add comment="" disabled=no distance=1 dst-address=::/0 gateway=2a06:a003:XXXX::1 scope=30 target-scope=10 [admin@MikroTik] > /ipv6 address add address=2a06:a003:XXXX::2/48 advertise=no disabled=no eui-64=no interface=sit1

I also tried to forward all ports to Mikrotik and use my public IPv4, but it didn't work neither...

After any try, I tried to ping Cloudflare IPv6 DNS, but there are timeouts...
[admin@MikroTik] > ping 2606:4700:4700::1111 SEQ HOST SIZE TTL TIME STATUS 0 2606:4700:4700::1111 timeout 1 2606:4700:4700::1111 timeout 2 2606:4700:4700::1111 timeout 3 2001:470:71:74b:: 104 64 95ms158us address unreachable

What am I doing wrong in my config? Tunnel does not work neither with Route48 nor HE.