Code: Select all
Internet <-> RB5009 Router <-> Unifi Switch <-> Ruckus WiFi AP <-> (((Radio Waves))) <-> mAP lite <-> Mixergy
The mAP lite is setup in station-pseudobridge-clone mode, which works, but has regular glitches -- I'm not sure exactly what is wrong, but I get the impression different MAC addresses (one from the mAP lite and one from the Mixergy) are both trying to get the same DHCP IP (and that IP seems to change), even though the mAP lite itself has a static IP on wlan1 which works consistently, and the Mixergy never appears to be offline whenever I check the app (the Mixergy connects to the cloud, and the app connects to the cloud, the app doesn't talk directly to the Mixergy).
Now... what I would like (the goal is to have the Mixergy on the IoT VLAN and off my main network):
1) Not have the mAP lite configured in station-pseudobridge-clone (see the above minor annoyances with unstable MAC and IP addresses)
2) Have the mAP lite continue to connect to my normal (non-IoT) WiFi network so I can ssh to it and manage it from inside my network
3) Tunnel IoT VLAN 99 from my RB5009 router to the ether1 port of the mAP lite so that the Mixergy gets an IoT IP and is therefore completely isolated from my network
I could join the mAP lite to my IoT WiFi and that solves point 3) but does not solve 1) and breaks 2).
It seems like I should be able to solve this with VxLAN or EOIP (or something else!), but am unsure of how to go about it.
Thanks for any help!!
mAP lite config:
Code: Select all
# 2024-10-29 11:54:52 by RouterOS 7.16.1
# software id = XXXX-XXXX
#
# model = RBmAPL-2nD
# serial number = XXXXXXXXXXX
/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyn country="united kingdom" disabled=no frequency=auto installation=indoor mode=\
station-pseudobridge-clone ssid=<Normal WiFi SSID> station-bridge-clone-mac=<Mixergy MAC Address> station-roaming=enabled wmm-support=enabled
/interface list
add name=WLAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik
/ip smb users
set [ find default=yes ] disabled=yes
/interface bridge port
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=ether1
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=all
/interface detect-internet
set detect-interface-list=WLAN
/interface list member
add interface=wlan1 list=WLAN
add interface=ether1 list=LAN
/ip address
add address=192.168.88.70/24 interface=bridge1 network=192.168.88.0
/ip dns
set servers=192.168.88.1
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip route
add gateway=192.168.88.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip smb shares
set [ find default=yes ] directory=/flash/pub
/ip ssh
set always-allow-password-login=yes strong-crypto=yes
/system clock
set time-zone-name=Europe/London
/system identity
set name=map-mixergy
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address=192.168.88.1
/system routerboard settings
set auto-upgrade=yes
/tool bandwidth-server
set enabled=no