Hello, I need help becouse in my company we need a guests Wi-Fi, but I never used WinBox and they assigned this task becouse they also don’t know what happens and I decided to post here becouse I guess it will help.
The problem is that we’ve got our network, all it interfaces are in a bridge, and now we created a new bridge to create a virtual Wi-Fi with a different subnet on it to create there a guests network so they cannot see the IPs on our network and they only can access Internet, but I cannot access Internet from that subnet. The router is configured with CAPsMAN, I configured a new address that I want it to be the gateway (192.168.99.1) in the menu “addresses”, a new route that go to 0.0.0.0 from my gateway, a nat rule for the subnet 192.168.99.0 and the network with CAPsMAN to be a slave from our 2.4Ghz Wi-Fi. With all that configuration cannot access Internet from that subnet and the Wi-Fi point appears but devices doesn’t connect when DHCP is activated.
I don’t know if something is missing or it’s configured in a bad way, I need help on this because I don’t have so much idea of how this software works.
Thank you for your attention and I hope this problem is soon solved.
Sorry not familiar with capsman, and not sure why needed with single device??
otherwise its too easy to setup a vlan ( transparent ) for the current LAN and a new one for guests, attached to the WLAN…
A good security practice is to separate management and user data traffic. Therefore, it is recommended that when you configure VLANs, you use VLAN 1 for management purposes only (VLAN Best Practices and Security Tips for Cisco Business Routers)
So, you have default “VLAN1” - for management purposes only, and you need “VLAN10” for spa and “VLAN20” for guests.
Regardless of whether you need a capsman, you need a vlan first
Should I create another bridge for the datapath or something like that or i have to make it all in a single bridge?
Then should I just create an VLAN, and if it’s like that, how do I assign the virtual WLAN to that VLAN?
Consider that I want to create a guest network in network 99 and not on the same local network, which is 101.
And please if you could explain me how that structure works patiently I would be grateful, cause im new at this and I don’t know how it works at all.
Sorry, of course VLAN 0, thank you.
(MikroTik uses VLAN 0. If you try to create a VLAN 1 scenario with MikroTik, and expecting tagged frames, it will be incompatible with other vendors who default VLAN 1 as untagged)
I meant:
“So, you have default VLAN 0 as untagged - for management purposes only, and you need “VLAN10” for spa and “VLAN20” for guests.”
Concur tangent, I could post a working config for either option in minutes, except he is using capsman which I dont touch with a 10 foot pole. One of these years will have to bite the bullet.
“typical home LAN case, where you have a lone Internet gateway that is also providing this guest WiFi service”
Another way without vlans but with a guest bridge is simply using a bridge filter.
Guest bridge way - it’s a simple and clear settings for guest dhcp server, guest bridge queue etc.
Use same SSID on 2,4 and 5GHz to make handover faster/seamless and both interfaces being in the same bridge.
Usually even a small business has several network devices, in addition to guest wifi, video surveillance, etc.
If today there is a need for one access point, then tomorrow there will be two… and very soon it will be easier to understand vlans once in a lifetime ))
Without diagram all is a bit weird.
Is this acting as a router as well and if so where is the WAN information
( which port, static IP or dynamic IP, from ISP or private IP from ISP router/modem
llamajaja, I use CAPsMAN becouse in my company we’ve got 4 devices to distribute the Wi-Fi and this one is working as a master, but not router. The only things I wanna know is if I have to create another bridge or I have to make it in the same. I tried to do it both and still not connecting when you want to connect to the virtual wlan. I don’t know what more to do and I’m lost. I also tried to use VLANs but I don’t know how to assign it to the virtual guests WLAN and also I don’t know in what interface do I have to add it.
One of the things that CAPsMAN does is create a single virtual bridge among all the WiFi routers under its control. I’ve never used CAPsMAN, but doesn’t that mean the bridge filtering option at the end of that article would apply?
CAPsMAN - CAP VLAN configuration example:
In this example, we will assign VLAN10 to our main SSID, and will add VLAN20 for the guest network, ether5 from CAPsMAN is connected to CAP.
CAPs using “wifi-qcom” package can get “vlan-id” via Datapath from CAPsMAN, CAPs using “wifi-qcom-ac” package will need to use the configuration provided at the end of this example.
