Hi everybody!
I just bought a nice hAP ax S to replace my aging Unifi AC AP PRO. So far, just connecting and leaving it with the default configuration i can reach speeds really close to gbit, so i am quite happy and looking forward to configuring it properly.
However, my idea was to turn it into a “dumb” ap+switch, creating a VLAN interface to take a management IP from a OOB router (VLAN 31), and then bridging all the ports so i can have a “free” managed 5-port switch on the wall.
This is my current configuration (i am connected through ether2 for now):
# 2026-02-06 10:43:24 by RouterOS 7.21.2
# software id = JTZ1-S7JV
#
# model = E62iUGS-2axD5axT
/interface bridge
add admin-mac=04:F4:1C:CD:9A:3F auto-mac=no comment=defconf name=bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] name=e_wan
/interface vlan
add interface=bridge name=vlan_mgmt vlan-id=31
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wifi datapath
add bridge=bridge disabled=no name=datapath_iot vlan-id=93
add bridge=bridge disabled=no name=datapath_def vlan-id=70
/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk disabled=no name=sec_iot
add authentication-types=wpa2-psk,wpa3-psk disabled=no name=sec_def
/interface wifi configuration
add country=Italy datapath=datapath_iot disabled=no name=cfg_iot security=sec_iot ssid="internet of trash"
add datapath=datapath_def disabled=no name=cfg_def security=sec_def ssid="home sweet home"
/interface bridge port
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=*2
add bridge=bridge comment=defconf interface=*3
add bridge=bridge interface=e_wan
/interface bridge vlan
add bridge=bridge tagged=bridge,e_wan vlan-ids=31
add bridge=bridge tagged=bridge,e_wan vlan-ids=93
add bridge=bridge tagged=bridge,e_wan vlan-ids=70
/interface wifi provisioning
add action=create-dynamic-enabled disabled=no master-configuration=cfg_def slave-configurations=cfg_iot
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether2 network=192.168.88.0
[missing firewall and other unrelated configs]
And it works! However, every client is stubbornly using 2.4ghz only, and checking the wireless spectrum i can see that my access point is being a very bad neighbor and using too much spectrum:
For this reason, i wanted to add some limiting settings to the AP. I created two rules:
/interface wifi channel
add band=2ghz-ax disabled=no frequency=2437,2412,2462 name=channel1 width=20mhz
add band=5ghz-ax disabled=no frequency=5490-5730 name=channel2 width=20/40/80+80mhz
And added them to the networks:
/interface wifi configuration
add country=Italy datapath=datapath_iot disabled=no name=cfg_iot security=sec_iot ssid="internet of trash" channel=channel1
add datapath=datapath_def disabled=no name=cfg_def security=sec_def ssid="home sweet home" channel=channel2
However, with these settings after provisioning the network i get “no channels available” on the wireless interfaces.
My goal is to have the main network on both 2.4 and 5.0 ghz (with steering), and the IoT network on 2.4ghz only.
I’ve tried every combination of channel and provisioning rules, and so far i was able to make it work once, but only for one single band and ssid. Adding anything else to the rules made it break. I am actually not 100% sure going to “radio” and selecting “provision” manually via webfig is the best idea (as some settings seem to be randomly flattened in some cases).
Additionally, i cannot seem to be able to make te AP accept RAs from the router, so it can get an IPv6 using slaac and i can manage it through v6.
What am i doing wrong?
Thanks
: