Hello there,

we currently have the below equipment on the network.

Router: CCR1009-7G-1S+ with ROS 7.11.3
↓
Switch: Cisco 3850G-48P
↓
AP: Cisco 2702i-B-K9 Autonomous

We want to create vlan based SSID(s) in the cisco ap wihch will allow users to connect different DHCP server in mikrotik.

Any idea would be highly appreciated.

Configure port on router as trunk with all VLANs needed ... here's how to do VLANs in ROS: viewtopic.php?f=23&t=143620 ... Tutorial may be geared towards switch-like configs, but is usable also for routers (even router-on-a-stick variety).

And a suggestion: upgrade your router to latest stable, which is 7.16.2 ATM.

Just to add to that, the managment or trusted vlan is where all attached smart devices should get their LANIP from. So in addition to the data vlans ensure the management vlan also goes through the trunk to the CISCO.

Surprized you dont use vlans already by the way.
If this is the first time, then ensure the bridge does no dhcp, and just configure another vlan for that traffic.
Also FIRST thing is to take one port off the bridge give it its own IP address and use this port do any config changes ( change ipv4 settings on laptop )

Configure port on router as trunk with all VLANs needed ... here's how to do VLANs in ROS: viewtopic.php?f=23&t=143620 ... Tutorial may be geared towards switch-like configs, but is usable also for routers (even router-on-a-stick variety).

And a suggestion: upgrade your router to latest stable, which is 7.16.2 ATM.

Bro,

Thanks a lot.

I am using a mikrotik router for hotspot and pppoe service. The Mikrotik is connected to cisco 3850G switch and Cisco autonomous APs are connected to the switch.

Is it possible to keep the switch in default Vlan = 1 mode and configure the vlan(10, 20, 30) only to build the network between the cisco ap and mikrotik router.

Is it possible to keep the switch in default Vlan = 1 mode and configure the vlan(10, 20, 30) only to build the network between the cisco ap and mikrotik router.

It is possible. If you configure MT with "native VLAN", then VID=1 is used as native VLAN by default. So just don't configure VID=1 anywhere explicitly. Being used by default it means that it's not shown in textual exports of config ... unless you try (at exporting) real hard.

vlan 1 is the default pvid on EVERY port on EVERY managed switch.
It is removed for all access ports and hybrid ports but remains in the background as an untagged default vlan on trunk ports.
For management of all smart devices use a separate management vlan or a trusted vlan