AP config with guest network to existing VLAN

RouterOS Beginner Basics
1

Hi all,

I’m new to mikrotik and think I’ve got myself a bit confused over things - I could do with some clarification.

I have an existing VLAN on my wired network for guests, it has a DHCP server.
Similarly untagged traffic on my wired network uses an existing DHCP server.

So far I have been able to set up a cAP ac as an access point for VLAN 1. I have also had it with a vlan port on 591 and accessable from other hosts from wired network. I can’t get my aliased wireless lan (wlan3) with a different SSID to DHCP etc, it connects on the wlan layer but no network connection. I suspect I’m getting just where my vlan interface sits wrong.

I currently have:
bridge1 containing ether1, ether2, wlan1 and wlan2
bridge_guest contains wlan3 and vlan591
The vlan591 interface is hung off the ether1 interface

What’s the correct arrangement here?

Thanks in advance for any pointers.

2

YOur best bet is read through this post…
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

For ex, dont use vlan1 and you only need one bridge in most instances.

3

Multiple bridges is the ‘old way’ of doing things and can cause numerous issues https://help.mikrotik.com/docs/display/ROS/Layer2+misconfiguration

There is nothing wrong with using VLAN 1, especially untagged, however it can catch out even the experienced as it is the default VLAN ID for bridges and ports on Mikrotiks.

As you are integrating the cAP with an existing working setup post the output of /export hide-sensitive in a code block (the icon in the toolbar above the text box when posting in the forum)

4

There may be nothing wrong with using VLAN1 if one is a masochist, but seriously its not recommended by anyone I know…

5

Hi all, thanks for the pointers. I’ve discovered the root cause of my frustrations in that the DHCP server isn’t responding to requests from the wireless guest network for some reason, if I give a client a static IP then it works! DHCP server is on openwrt currently so not something for this group.

I’ve posted my working config for reference - this is only a first step I’m aiming to have a tuned wifi configuration and CAPsMAN eventually.
mikconfig.txt (1.85 KB)

6

There is your mistake, not using MT as your router LOL.

My advice is then not to bother with capsman and further just ensure the capac IP address is on the LAN that is trusted.
This article has a section dealing with just Access Point setup.
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1