Community discussions

MikroTik App
 
rotor
just joined
Topic Author
Posts: 4
Joined: Mon Jan 23, 2023 10:56 pm

mAP lite - how can I tunnel a VLAN over WiFi?

Tue Oct 29, 2024 2:05 pm

I am using a mAP lite as a WiFi-to-Ethernet converter for a Mixergy hot water cylinder that uses a Raspberry Pi as a controller:
Internet <-> RB5009 Router <-> Unifi Switch <-> Ruckus WiFi AP <-> (((Radio Waves))) <-> mAP lite <-> Mixergy

The mAP lite is setup in station-pseudobridge-clone mode, which works, but has regular glitches -- I'm not sure exactly what is wrong, but I get the impression different MAC addresses (one from the mAP lite and one from the Mixergy) are both trying to get the same DHCP IP (and that IP seems to change), even though the mAP lite itself has a static IP on wlan1 which works consistently, and the Mixergy never appears to be offline whenever I check the app (the Mixergy connects to the cloud, and the app connects to the cloud, the app doesn't talk directly to the Mixergy).

Now... what I would like (the goal is to have the Mixergy on the IoT VLAN and off my main network):

1) Not have the mAP lite configured in station-pseudobridge-clone (see the above minor annoyances with unstable MAC and IP addresses)
2) Have the mAP lite continue to connect to my normal (non-IoT) WiFi network so I can ssh to it and manage it from inside my network
3) Tunnel IoT VLAN 99 from my RB5009 router to the ether1 port of the mAP lite so that the Mixergy gets an IoT IP and is therefore completely isolated from my network

I could join the mAP lite to my IoT WiFi and that solves point 3) but does not solve 1) and breaks 2).

It seems like I should be able to solve this with VxLAN or EOIP (or something else!), but am unsure of how to go about it.

Thanks for any help!!

mAP lite config:
# 2024-10-29 11:54:52 by RouterOS 7.16.1
# software id = XXXX-XXXX
#
# model = RBmAPL-2nD
# serial number = XXXXXXXXXXX
/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyn country="united kingdom" disabled=no frequency=auto installation=indoor mode=\
    station-pseudobridge-clone ssid=<Normal WiFi SSID> station-bridge-clone-mac=<Mixergy MAC Address> station-roaming=enabled wmm-support=enabled
/interface list
add name=WLAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik
/ip smb users
set [ find default=yes ] disabled=yes
/interface bridge port
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=ether1
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=all
/interface detect-internet
set detect-interface-list=WLAN
/interface list member
add interface=wlan1 list=WLAN
add interface=ether1 list=LAN
/ip address
add address=192.168.88.70/24 interface=bridge1 network=192.168.88.0
/ip dns
set servers=192.168.88.1
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip route
add gateway=192.168.88.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip smb shares
set [ find default=yes ] directory=/flash/pub
/ip ssh
set always-allow-password-login=yes strong-crypto=yes
/system clock
set time-zone-name=Europe/London
/system identity
set name=map-mixergy
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address=192.168.88.1
/system routerboard settings
set auto-upgrade=yes
/tool bandwidth-server
set enabled=no
 
User avatar
Amm0
Forum Guru
Forum Guru
Posts: 4445
Joined: Sun May 01, 2016 7:12 pm
Location: California
Contact:

Re: mAP lite - how can I tunnel a VLAN over WiFi?  [SOLVED]

Tue Oct 29, 2024 2:29 pm

Both VXLAN and EoIP approaches are covered here:
viewtopic.php?t=180369&hilit=wifiwave2
 
rotor
just joined
Topic Author
Posts: 4
Joined: Mon Jan 23, 2023 10:56 pm

Re: mAP lite - how can I tunnel a VLAN over WiFi?

Wed Oct 30, 2024 1:18 am

Both VXLAN and EoIP approaches are covered here:
viewtopic.php?t=180369&hilit=wifiwave2

Thanks for the pointer! I tried the EoIP option first, but kept getting loops ("shutting down the interface for 60 seconds"), so I bailed out and tried the VxLAN approach and it was pretty flawless! I spent *way* too much time figuring out I was missing the pvid=99 parameter here:
add bridge=bridge1 interface=ether1 pvid=99

...but I eventually got there!

Thanks again!