I have 2 other CRS switches i am able to connect fineToo little information.
Since you seem to struggle configuring the whole lot (CCR, Audience, VLANs, ...), it's really hard to pin the exact point of failure in your case.
That is another issue i have, the wifi SSID is on and i can see it but when i try to connect, i get "no internet connection"Are you able to connect to Winbox via devices that are directly connected to Audience via WiFi or downlink ports (meaning, by not traversing the uplink to the CCR/CRS/etc)?
I did not use default ocnfig, i wiped all of and started from scratchI know on my cap ac, using it as a pure Access Point was a bit frustrating at first, since the device tries to operate in a "router" mode, and the quick webfigs didn't make things any better.
The default settings (or whatever I clicked around with in webfig/quickWebfig) almost always made it difficult to access the AP's management interface (either via web or WinBox) from the "uplink" side, so I always had to access the management interface from the "WiFi" or "downlink" side of things. I eventually resolved the issue, but I don't recall how (something to do with the default bridge not including the uplink port, iirc).
If your setup has similar symptoms, perhaps we had similar configuration issues. If not, then I am not really sure.
@uberwebguru stop to be tedious and post all needed info [...]
Please post your config - if you want assistance
/export hide-sensitive file=anynameyouwish
[...]
I asked how to post config and no one answeredI Dont have time or patience to read some non-standard format.
Why cannot you simply post your config ???
This guru is getting uber annoyed and I just might leave this web.
viewtopic.php?p=923235#p923141Does RouterOS have option to have config file and be able to edit the file as another option to CLI or winbox or webfig?
How do i post the config?Please post your config - if you want assistance
Didn't realize you posted this commandPlease post your config - if you want assistance
/export hide-sensitive file=anynameyouwish
In terms of the basics some ideas here......
viewtopic.php?t=182276
# RouterOS 7.2rc3
# model = CCR2004
/interface bridge
add name=bridge
/interface ethernet
set [ find default-name=sfp-sfpplus1 ] comment=AUDIENCE
set [ find default-name=sfp-sfpplus2 ] comment=CRS326
set [ find default-name=sfp-sfpplus12 ] comment=ISPROUTER
/interface vlan
add interface=bridge name=vlan10 vlan-id=10
add interface=bridge name=vlan11 vlan-id=11
add interface=bridge name=vlan20 vlan-id=20
add interface=bridge name=vlan30 vlan-id=30
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.10.2-192.168.10.254
add name=dhcp_pool1 ranges=192.168.20.2-192.168.20.254
add name=dhcp_pool2 ranges=192.168.30.2-192.168.30.254
add name=dhcp_pool3 ranges=192.168.11.2-192.168.11.254
/ip dhcp-server
add address-pool=dhcp_pool0 interface=vlan10 name=dhcp1
add address-pool=dhcp_pool1 interface=vlan20 name=dhcp2
add address-pool=dhcp_pool2 interface=vlan30 name=dhcp3
add address-pool=dhcp_pool3 interface=vlan11 name=dhcp4
/port
set 0 name=serial0
set 1 name=serial1
/interface bridge port
add bridge=bridge comment=CRS326 interface=sfp-sfpplus2
add bridge=bridge comment=AUDIENCE interface=sfp-sfpplus1
add bridge=bridge comment=ISPROUTER interface=sfp-sfpplus12
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip address
add address=188.88.88.85/27 interface=sfp-sfpplus12 network=188.88.88.0
add address=192.168.20.1/24 interface=vlan20 network=192.168.20.0
add address=192.168.30.1/24 interface=vlan30 network=192.168.30.0
add address=192.168.10.1/24 interface=vlan10 network=192.168.10.0
add address=192.168.11.1/24 interface=vlan11 network=192.168.11.0
/ip dhcp-server network
add address=192.168.20.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=192.168.20.1
add address=192.168.30.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=192.168.30.1
add address=192.168.10.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=192.168.10.1
add address=192.168.11.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=192.168.11.1
/ip dns
set servers=1.1.1.1,8.8.8.8
/ip firewall nat
add action=masquerade chain=srcnat out-interface=bridge
add action=accept chain=srcnat disabled=yes dst-address=188.88.88.85 \
out-interface=bridge src-address=192.168.20.0/24
/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=188.88.88.86 \
pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
target-scope=10
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=redacted
/tool romon
set enabled=yes
# RouterOS 7.1.5
# model = AUDIENCE
/interface bridge
add fast-forward=no ingress-filtering=no name=bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] comment=CCR2004
/interface vlan
add interface=bridge name=vlan10 vlan-id=10
add interface=bridge name=vlan11 vlan-id=11
add interface=bridge name=vlan20 vlan-id=20
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" mode=dynamic-keys \
name=wifi_ssid_10 supplicant-identity=""
add authentication-types=wpa-psk,wpa2-psk eap-methods="" mode=dynamic-keys \
name=wifi_ssid_11 supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no mode=ap-bridge \
security-profile=wifi_ssid_10 ssid=wifi_ssid_10
set [ find default-name=wlan2 ] band=5ghz-a/n/ac disabled=no mode=ap-bridge \
security-profile=wifi_ssid_10 ssid=wifi_ssid_10
set [ find default-name=wlan3 ] band=5ghz-a/n/ac disabled=no mode=ap-bridge \
security-profile=wifi_ssid_10 ssid=wifi_ssid_10
/interface bridge port
add bridge=bridge ingress-filtering=no interface=ether1 pvid=20
add bridge=bridge interface=wlan1
add bridge=bridge interface=wlan2
add bridge=bridge interface=wlan3
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface bridge vlan
add bridge=bridge tagged=ether1,bridge vlan-ids=20
add bridge=bridge tagged=ether1,wlan1,wlan2,wlan3 vlan-ids=10
add bridge=bridge tagged=ether1 vlan-ids=11
/ip address
add address=192.168.20.2/24 interface=vlan20 network=192.168.20.0
add address=192.168.10.2/24 interface=vlan10 network=192.168.10.0
add address=192.168.11.2/24 interface=vlan11 network=192.168.11.0
/ip dns
set servers=1.1.1.1,8.8.8.8
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.20.1
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.10.1 routing-table=\
main suppress-hw-offload=no
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.11.1 routing-table=\
main suppress-hw-offload=no
/system clock
set time-zone-name=redacted
/system package update
set channel=development
/system routerboard settings
set cpu-frequency=auto
VLAN20 is management VLANHave no clue what you are trying to accomplish with the Audience,
Which vlan is the trusted or management vlan??
There should only be one route........to the gateway IP of the trusted vlan.
/interface bridge
add fast-forward=no ingress-filtering=no name=bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] comment=CCR2004
/interface vlan
add interface=bridge name=vlan20 vlan-id=20
/interface list
add name=Trusted
/interface list member
add interface=vlan20 list=Trusted
/interface bridge port
add bridge=bridge interface=ether1 ingress-filtering=yes frame-types=admit-only-tagged
add bridge=bridge interface=wlan1 pvid=10 ingress-filtering=yes frame-types=admit-only-priority-and-untagged
add bridge=bridge interface=wlan2 pvid=10 ingress-filtering=yes frame-types=admit-only-priority-and-untagged
add bridge=bridge interface=wlan3 pvid=10 ingress-filtering=yes frame-types=admit-only-priority-and-untagged
/ip neighbor discovery-settings
set discover-interface-list=Trusted
/interface bridge vlan
add bridge=bridge tagged=ether1,bridge vlan-ids=20
add bridge=bridge tagged=ether1, untagged=wlan1,wlan2,wlan3 vlan-ids=10
/ip address
add address=192.168.20.2/24 interface=vlan20 network=192.168.20.0
/ip dns
set servers=1.1.1.1,8.8.8.8
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.20.1
/tool mac-server mac-winbox
set allowed-interface-list=Trusted
Not including my makes it difficult to know what to add and remove(1) Okay so there is no wifi for vlan20! Good to know.
(2) Why do you have have same SSID names for all WLANS?/
(3) Only need to identify management vlan and only need address for management vlan
(4) I didnt include all of your config, just the important parts that need to be followed.
because i thought that is how you enable the wireless bands to the wifi network(2) Why do you have have same SSID names for all WLANS?/
Ok i removed the VLAN10, VLAN11 from the interface list nowPlease repost your config with your changes so i can see where you are at.
As noted you DONT need to identify vlans11 and 10 as belonging to the bridge only vlan20.
Not sure if its greyed out, or just not simply active at the moment, no traffic flowing through
/interface bridge port
add bridge=bridge interface=ether1 ingress-filtering=yes frame-types=admit-only-tagged
add bridge=bridge interface=wlan1 pvid=10 ingress-filtering=yes frame-types=admit-only-priority-and-untagged
add bridge=bridge interface=wlan2 pvid=10 ingress-filtering=yes frame-types=admit-only-priority-and-untagged
add bridge=bridge interface=wlan3 pvid=10 ingress-filtering=yes frame-types=admit-only-priority-and-untagged
...
/interface bridge vlan
add bridge=bridge tagged=ether1,bridge vlan-ids=20
add bridge=bridge tagged=ether1, untagged=wlan1,wlan2,wlan3 vlan-ids=10
...
What do you mean you used hex as switch and can run many VLANs over it?Super glad you got it running!!
Yes, for example I have a hex used as a switch and can run many vlans over it (from my main switch) and then go into the config at any time to select what is going over the hex ports.
Oh got itNo I meant that RoS is very flexible, you could run 50 vlans into the audience and then through one of the ethernet ports run those 50 to another device (like a smart switch).
Yes, if using vlans you can has as many WLANS as you can create but most devices its not recommended to create more than 6 (2 per chain plus the master ). SOmething like that anyway.
Most APs are not capable of more practically speaking
Yes, if using vlans you can has as many WLANS as you can create but most devices its not recommended to create more than 6 (2 per chain plus the master ).
Can you please share how to create virtual WLAN?
Which means that practical limit is indeed around 6 WLANs per radio (physical one plus 5 virtual) but that's true for both single chain devices (such as hAP ac lite on 5GHz) and quad chain devices (e.g. audience on the upper 5GHz radio or the wireless version of RB4011).