Apartment Complex Installation

RouterOS Wireless Networking
1

Hi All,

I’ve been reading and reading but this should be my first post… I’m new to Mikrotik hardware - but so far, I’m very pleased with how much control we have with them - better than many I’ve paid a lot more money for. I’ve worked a lot with Netgear SOHO, and Cisco and HP enterprise equipment over the years.

That said, I’m trying to use one for an install at an apartment complex - it’s an RB450G; It’ll be connected to 8 Ubiquiti UAP-LR Unifi Access points. Since it only has 5 ports, I’ll have to add a switch - most likely it’ll be a netgear 8-port smart switch (not fully managed but supports VLANs) - because I have one handy and can’t get any ordered parts here in time.

I just have some general questions while I wrap my head around how Mikrotik works… I have no problem searching - I’ll do it all day long; I just need some pointers to help me know what I’m searching for and what concepts to get my head around.

  1. I want to support VLANS - 1 for management; 1 for normal tennant traffic, and one for guests
  2. I want the tenants devices to not be able to see each other (I’d love user-based VLANS but Ubnt/Unifi doesn’t support that yet.
  3. Guest mode has to go through a TOS agreement captive portal first then has limited bandwidth.
  4. Not every AP will be on a port of the RB - some (or all can be) will be on the netgear vlan-aware switch.

Unifi can do some of this - I can do a guest portal and some client isolation, but some of the settings conflict with other, so I either need to ditch the captive portal for guests, or do client isolation elsewhere.

I have read a little about disabling default forward and i’m trying to understand that better… but I wondered if I could get any pointers from you guys.

Any specific solutions or terms I should search for, or posts I should read?
Is that netgear in the middle going to screw up my plans?

Thanks guys! Any help is appreciated; I have to have this figured out this weekend.

2

I don’t now very much about ubnt, but for wireless clients isolation, there should be something like default forward, or client isolation.

You can add vlans for each AP on the RouterBoard, add them to a bridge and set split horizon, this way your sure that they will not exchange traffic.

For the captive portal, you just need to add a hotspot to the guest vlan.

I hope this helps a little.

Good weekend,

3

Thx - that gave me more to search for and read up on - sounds like that’ll ultimately be the best solution.