Community discussions

MikroTik App
  4. RouterOS
  5. Beginner Basics

WAP guest vlan

Post Reply
 
User avatar
rilliam
newbie
Topic Author
Posts: 48
Joined: Thu Mar 12, 2009 7:34 pm

WAP guest vlan

Sun Jun 05, 2022 11:06 pm

I am trying to create a guest VLAN on a WAP, and have the DHCP server and routing to the internet happen on a main router. I am getting very confused by the examples and tutorials I am reading.

Internet<---> ether1--R1--ether5 <----> ether1--WAP-R2--wlan1_guest

Wireless client connects to wireless interface SSID_vlan10
Wireless client received DHCP lease from R1 DHCP server server-vlan10
R2 can ping R1 192.168.10.1 on interface bridge_VLAN10

Problem:
R2 cannot ping 4.2.2.2 on interface bridge_VLAN10

Router 1 (R1):
Code: Select all
/interface vlan
add interface=ether5 name=vlan10 vlan-id=10
/ip pool
add name=pool-vlan10 ranges=192.168.10.101-192.168.10.199
/ip dhcp-server
add address-pool=pool-vlan10 disabled=no interface=vlan10 name=server-vlan10
/ip address
add address=192.168.10.1/24 interface=vlan10 network=192.168.10.0
/ip dhcp-server network 
add address=192.168.10.0/24 dns-server=8.8.8.8 gateway=192.168.10.1
Router 2 (WAP-R2):
Code: Select all
/interface bridge
add name=bridge1
add name=bridge_VLAN10
/interface vlan
add interface=ether1 name=vlan10 vlan-id=10
/interface wireless
add disabled name=wlan1_vlan10 security-profile=profile_vlan10 ssid=SSID_vlan10 wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/ip pool
add name=vlan10-pool ranges=192.168.10.101-192.168.10.199
/ip dhcp-server
add address-pool=vlan10-pool interface=vlan10 name=vlan10-server
/interface bridge port
add bridge=bridge1 interface=Corporate-wlan1
add bridge=bridge1 interface=ether1
add bridge=bridge_VLAN10 interface=wlan1_vlan10 pvid=10
add bridge=bridge_VLAN10 interface=vlan10 pvid=10
/ip address
add address=192.168.10.2/24 interface=vlan10 network=192.168.10.0
Top
 
erlinden
Forum Guru
Forum Guru
Posts: 2748
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: WAP guest vlan

Sun Jun 05, 2022 11:43 pm

I prefer to filter VLAN on the bridge, instead of creating multiple bridges.
Please have a look at this great topic, that should answer all your questions!

viewtopic.php?t=143620
Top
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 22241
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:
Contact anav

Re: WAP guest vlan

Mon Jun 06, 2022 12:26 am

Assuming you want the AP to be nothing more than an AP/switch for your vlans.
Read this one....... viewtopic.php?t=182276 (but ensure you understand the vlans link erlinden gave you first)
As simple as it gets.
You only need to identify on the AP, the vlan on the trusted subnet, the subnet which the AP gets its IP address from (usually statically set via lease on the main router).
Top
Post Reply
  4. RouterOS
  5. Beginner Basics