Tunneling within a Network

Greetings All,

So first a few disclosures up front. I'm still relatively new to AREDN (this is my first forum post) and while I consider myself an above average computer user I'm certainly not a networking expert. That said, I have a very particular issue that I'm trying to solve in a particular way but I'm having challenges and am looking for some guidance. 

First, please let me describe my setup and what I'm trying to achieve. I have a probably above average home network that supports my home plus some existing servers and IP phones I already have on the AllStar network. Connected to my network is also a Ubiquiti 5AC-500 that is providing internet connectivity to a repeater site I support on top of Sierra Peak (about a five mile hop). The equipment on Sierra Peak, at present, is basically on my home network but running on it's own set of dedicated IP addresses. In addition to the network, I have a VLAN segmented portion on a HP ProCurve switch that provides LAN and DtD connections between my AREDN dedicated hardware. The segmented portion of the switch and the conventional network are physically bridged using a MikroTik hAP AC device. At no time does my home network and my AREDN dedicated network communicate with each other within the switch itself. Basically I'm using the MikroTik as a physical firewall. I realize this is probably a bit overkill but this is because of the nature of both my wife's and my own work and concerns for cybersecurity. 

Now here's the challenge. I have an existing point-to-point connection to Pleasants Peak from my home, but that is the only AREDN site I can hit from my home via RF. For redundancy, I'd like to add two AREDN nodes at my repeater site at Sierra Peak and basically tunnel them back to my MikroTik hAP at home via the home network and the hAP's WAN port. This would allow me to add redundancy without having to completely re-work my home network for VLAN. However, the issue I'm having is I cannot get tunneling to work across the devices involved. I do have one of the GL-iNet USB Wireless Routers that I've tested tunneling on within my own network and that seems to work fine. I know tunneling traffic must come in/out via the designated WAN VLAN but I have not had much success in playing with those settings to make this work. In a post or two I've seen floating around while researching this I've also found that there is supposedly a switch in the advanced settings that can be thrown to allow tunneling over a non-WAN port, but I've had no luck in finding that setting. 

For reference, the tunnel server is the MikroTik hAP and the device I'm trying to tunnel from, and use as a client at least as a testing device, is a Ubiquiti M5 NanoStation Loco. 

I realize my case and problem are a bit unique but if anyone has any suggestions or perhaps knows what stupid simple thing I'm doing wrong I'd sincerely appreciate the input.

Thank you in advance and 73,
Tom, KI6GOA