Hi,

I am the happy owner of an RB2011UiAS-2HnD and an RB SXT G-2HnD.

The way i have them configured now is like this:

RB2011UiAS-2HnD is the main router, with the internet uplink. It runs the DHCP as well. SID WIFI-1

The RB SXT G-2HnD is configured as bridge AP. SID WIFI-2.

Network 192.168.10.0/24

What i want to achieve with you help:

I would like to have same SID for both of them and in the same time to create an Guest-AP on both of them.

I would like that:

- WIFI-AP SID (on both devices)have the same network 192.168.10.0/24 and also have access to the RB2011UiAS-2HnD eth ports and use ACL.
- Guest-AP SID (on both devices) to have 192.168.13.0/24 network and NOT have access to RB2011UiAS-2HnD ports don't use ACL
- Different passwords on them.
- Clients on both wifi APs to have access ONLY if they received the IPs from the RB2011UiAS-2HnD / RB SXT G-2HnD (IPs assigned manually will not have access to the network/internet.)
- Force wifi clients to use opendns servers.

Can you please point me in the right direction?

Thanks in advance,

For this purposes my advice - use fp-wireless package and CAPsMAN feature.
Main router 2011 use as CAPsMAN manager - create 2 profiles for WIFI-AP and GUEST-AP, after that wireless interface use as CAP.
SXT use as CAP, enable CAP create the bridge and select IP of CAPsMAN manager (2011).

You can read about this:
http://wiki.mikrotik.com/wiki/Manual:CAPsMAN
and
http://blog.gowifi.co.nz/2014/03/introd ... rotik.html

For this purposes my advice - use fp-wireless package and CAPsMAN feature.
Main router 2011 use as CAPsMAN manager - create 2 profiles for WIFI-AP and GUEST-AP, after that wireless interface use as CAP.
SXT use as CAP, enable CAP create the bridge and select IP of CAPsMAN manager (2011).

You can read about this:
http://wiki.mikrotik.com/wiki/Manual:CAPsMAN
and
http://blog.gowifi.co.nz/2014/03/introd ... rotik.html

Thanks,

I followed another guide found on internet and now i can manage both APs from the router.
http://sysmagazine.com/posts/217657/

I have few questions about CAPsMAN :

1. if the APs are close, to have 2 AP on 2 different channels do i need 2 separate configs?
2. how do i add the virtual AP in CAPsMAN ?
3. if i have 2 RB2011UiAS-2HnD on 2 geographical location connected via vpn, is advised to use only one CAPsMAN ? (if the AP will lose connectivity with CAPsMAN will the configuration remain the same until will connect again?)


Thanks in advance,

1. Use "auto" in configuration of channel and each AP select better channel for using.
2. CAPsMAN -> + -> Master Interface (choose your existing wlan interface)
3. If I right uderstood your question - remote CAP save his configuration.

1. Use "auto" in configuration of channel and each AP select better channel for using.
2. CAPsMAN -> + -> Master Interface (choose your existing wlan interface)
3. If I right uderstood your question - remote CAP save his configuration.

1. can't find auto on Frequency or channel.

2. CAPsMAN -> Interface -> Add new
using an capX as master, won't let me. cannot use a dinamic config as master


Thanks

1. Not filling frequency field
2. Add master interface

Hi,

I managed to use the CAPsMAN and create 2 SSIDs on both devices.

How can i use ACLs only for one SSID?

For example:
WIFI-Corp to work only on MACs in ACL.
WIFI-Guest to work only based on password.

MACs from WIFI-Corp to be able to connect on Guest as well if they want.

...and what about that Use ACLs from the quick setting menu? does it have value over all APs on the router?

Thanks in advance,

1. WIFI-Corp to work only on MACs in ACL. - default autheficate - off
2. WIFI-Guest to work only based on password. - default autheficate - on (and setup security profile)
3. MACs from WIFI-Corp to be able to connect on Guest as well if they want. - Use in ACL list interfaces - ALL