Bridging VLANs with VAPs

Please disregard. It took my post too long to make it through moderation and I figured it out. I was making it a lot more difficult than it should have been. I reset the radios to default and setup a simple ptp bridge between them and the VLANs worked fine.

Chase


Hi everyone,

I think I must just be dense because what I’m trying to do seems very simple. I’ve been reading posts for hours and just can’t seem to figure out what’s got me tripped up. I’m trying to create a simple ptp link using two Groove A52HPN units between two of my locations that are, literally right across the street from each other. I need to pass traffic on the default VLAN1 for data and VLAN120 for voice. I have Cisco switches on both ends with the MikroTik ports configured as trunk ports with VLANs 1 and 120 allowed. Here are my Mikrotik configs:

CH Site

# jan/02/1970 12:41:49 by RouterOS 6.6
# software id = FFRN-RSHM
#
/interface bridge
add l2mtu=1596 name=vlan1.bridge protocol-mode=stp
add l2mtu=1596 name=vlan120.bridge protocol-mode=stp
/interface wireless
set [ find default-name=wlan1 ] country="united states" disabled=no l2mtu=\
    2290 mode=ap-bridge ssid=""
/interface vlan
add interface=ether1 l2mtu=1596 name=vlan1 vlan-id=1
add interface=ether1 l2mtu=1596 name=vlan120 vlan-id=120
/interface wireless
add disabled=no hide-ssid=yes l2mtu=2290 mac-address=02:80:48:60:6B:90 \
    master-interface=wlan1 name=vap1.wlan ssid=CH-SC.vlan1 wds-cost-range=0 \
    wds-default-bridge=vlan1.bridge wds-default-cost=0 wds-mode=dynamic
add disabled=no hide-ssid=yes l2mtu=2290 mac-address=02:80:48:60:6B:91 \
    master-interface=wlan1 name=vap120.wlan ssid=CH-SC.vlan120 \
    wds-cost-range=0 wds-default-bridge=vlan120.bridge wds-default-cost=0 \
    wds-mode=dynamic
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
    group-ciphers=tkip,aes-ccm mode=dynamic-keys supplicant-identity=MikroTik \
    unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=StranglethornVale \
    wpa2-pre-shared-key=StranglethornVale
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m \
    mac-cookie-timeout=3d
/interface bridge port
add bridge=vlan1.bridge interface=vap1.wlan
add bridge=vlan1.bridge interface=vlan1
add bridge=vlan120.bridge interface=vap120.wlan
add bridge=vlan120.bridge interface=vlan120
add interface=ether1
/ip address
add address=192.168.20.238/24 interface=ether1 network=192.168.20.0
/system clock
set time-zone-name=America/Chicago
/system identity
set name=CH-SC
/system leds
set 0 interface=wlan1
set 1 interface=ether1
/system routerboard settings
set cpu-frequency=600MHz

SC Site

# jan/01/1970 19:03:55 by RouterOS 6.6
# software id = GH2S-AXTS
#
/interface bridge
add l2mtu=1596 name=vlan1.bridge protocol-mode=stp
add l2mtu=1596 name=vlan120.bridge protocol-mode=stp
/interface wireless
set [ find default-name=wlan1 ] country="united states" disabled=no l2mtu=\
    2290 mode=ap-bridge ssid=""
/interface vlan
add interface=ether1 l2mtu=1596 mtu=1518 name=vlan1 vlan-id=1
add interface=ether1 l2mtu=1596 mtu=1518 name=vlan120 vlan-id=120
/interface wireless
add disabled=no hide-ssid=yes l2mtu=2290 mac-address=02:80:48:60:6B:92 \
    master-interface=wlan1 name=vap1.wlan ssid=CH-SC.vlan1 wds-cost-range=0 \
    wds-default-bridge=vlan1.bridge wds-default-cost=0 wds-mode=dynamic
add disabled=no hide-ssid=yes l2mtu=2290 mac-address=02:80:48:60:6B:93 \
    master-interface=wlan1 name=vap120.wlan ssid=CH-SC.vlan120 \
    wds-cost-range=0 wds-default-bridge=vlan120.bridge wds-default-cost=0 \
    wds-mode=dynamic
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
    group-ciphers=tkip,aes-ccm mode=dynamic-keys supplicant-identity=MikroTik \
    unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=StranglethornVale \
    wpa2-pre-shared-key=StranglethornVale
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m \
    mac-cookie-timeout=3d
/interface bridge port
add
add bridge=vlan1.bridge interface=vlan1
add bridge=vlan1.bridge interface=vap1.wlan
add bridge=vlan120.bridge interface=vap120.wlan
add bridge=vlan120.bridge interface=vlan120
/ip address
add address=192.168.20.239/24 interface=ether1 network=192.168.20.0
/system clock
set time-zone-name=America/Chicago
/system identity
set name=SC-CH
/system leds
set 0 interface=wlan1
set 1 interface=ether1
/system routerboard settings
set cpu-frequency=600MHz

I cannot ping from one side of the link to the other on either VLAN. Any help would be greatly appreciated!

Chase