Beginner: Local + Guest network (VLAN)

RouterOS Beginner Basics
1

Hello,

Could you please help me with guest network VLAN configuration?

I have 3 devices:

Core router RB3011 (for example 192.168.1.1), Switch CRS326 (192.168.1.10) and Acess point hAP (192.168.1.15).
I’ve configured hAP as access point and have a local WiFi network in use.
Now I wan’t to configure one more wireless network for guests, with isolation to local network.
What I have done:
Created VLAN on wireless router - on ether1 (vlan-guest, ID=20) , Virtual wlan on wlan1 (wlan-guest, ID=20, VLAN Mode= use tag).
Created bridge on wireless router (guest-bridge) connected vlan-guest and wlan-guest to it.
Created VLAN on switch master port ether1 (vlan-guest, ID=20).
Created VLAN on core router at ether2 (switch master port) (vlan-guest, ID=20).
Created Address on guest-vlan interface (10.1.1.1/24 for example)
Configured DHCP pool for guest-vlan interface.

At this moment guest Wifi network is visible but client didn’t receiving any IP address, configuring static ip adress (10.1.1.20/24 with gw: 10.1.1.1 dns: 8.8.8.8 ) doesn’t provide connection as well.

Thanks in advance.

2

Hi

As I understand it (https://wiki.mikrotik.com/wiki/Manual:Interface/Wireless#VLAN_tagging) you don’t need vlan definition on wAP or CRS: they will just pass through (so without vlan filtering).
You DO have to define a vlan interface on router (3011) assign IP and forward/masq traffic as you wish.

3

Hi,

The wiki documentation does not indicate how the VLAN tag relates to the bridge and how configure with version 6.41 bridge VLAN implementation. An example may be useful

Tranks

4

Hi,

Yeah, if some one could post example configuration will be good.

I’ve disabled VLAN definitions on CRS, and leave only VLAN on wireless interface.
I was trying to make configuration from this post - http://forum.mikrotik.com/t/office-wifi-guest-and-internal-networks/73519/1