Hi,

I have a RB3011 and a wAP AC at home. I have created a virtual AP where I'm going to have all my IoT devices connect to, naming the SSID IoT.
I want to separate this traffic from everything else so I can restrict it to access internet and the rest of my network so I thought that I could use VLAN for this.

When creating a virtual AP on my wAP AC there are options for VLAN ID and VLAN Mode. I'm guessing I have to set this to use tag and then I set VLAN ID to 10.

So now everything that connects to the IoT SSID will get tagged with the VLAN ID 10 if I'm correct?

Now, what do I have to do to get my RB3011 to accept these tagged packages?
I'm pulling my hair trying to figure out the right way to do this. I have read lots of info on the wiki about VLAN and the different switching chips etc. and what got me more confused was that my router has two switching chips. Reading the wiki it says that it's not possible to route vlans between two switch chips or something like that. I don't quite understand that VLAN Filtering etc. is so it might just be me who doesn't understand it.

I have a bridge on my router where all the ports (except ehter1) are added. Do I just have to enable VLAN Filtering on this and under /interface vlan add the VLAN 10 to the bridge, add an IP and DHCP server on the VLAN interface and that's it?
Because that's pretty much what I have done but I can't get the DHCP to serve anything when connecting to SSID IoT.

This post got a little more complex than I planned but I hope you understand what I'm saying.

You'll have to set up VLANs on both devices properly. Setting vlan-id and use-tag on wAP is not enough.

I suggest you to go through this tutorial, it'll help you to see what has to be done in ROS. Hopefully you already undersrand basic concepts of VLANs ...

You'll have to set up VLANs on both devices properly. Setting vlan-id and use-tag on wAP is not enough.

I suggest you to go through this tutorial, it'll help you to see what has to be done in ROS. Hopefully you already undersrand basic concepts of VLANs ...

Wow thanks, I missed that post. It look really informative and I will post my results here when I'm done.