Question : how to let Access Point run on Bridge mode? (vlan ID :100)?
p/s : SSID 1 (TestBridgeV100) SSID 3(TestNat) , Wireless connect to ssid 3 can get ip (192.168.23.x) can ping internet (8.8.8.8 ) can ping to acs url (x.x.x.x).
Try to connect to SSID 1 which is bridge mode but can’t get any ip , tried with few phone , some phone sometime can go thru , sometime cant , most of the time fail.
MicrotikRouterBOARD 1100AH X2 AH (WINBOX Setup)
Router 0
Interface > ether1 > Name : from_modem> apply > ok
Interface > ether6 > Name : to_switch> apply > ok
Interface > VLAN >New interface > name : vlan10 > VLAN ID : 10 > Interface : to_switch>apply > ok (remark : tried use service tag but cant work)
Interface > VLAN > New interface > name : vlan100 > VLAN ID : 100 > Interface : to_switch>apply> ok (remark : tried use service tag but cant work)
IP > Add > Address : 172.17.221.238/24 > Interface : from_modem> apply > ok **remark (source from cable modem ip)
IP > Add > Address : 192.168.10.1/24 > Interface : to_switch> apply > ok
IP > IP Pool > Add > Name : dhcp_pool2 > Address : 192.168.10.20-192.168.10.254> apply > ok
IP > DHCP Server > Add > Name : dhcp1 > Interface : to_switch> Lease Time : 3d 00:00:00 > Address Pool > dhcp_pool2 > apply > ok
IP > DHCP Server > Options > Name : AP > Code : 43 > Value : ‘http://******/service/tr069servlet’ > apply > ok
IP > DHCP Server > Network > Add > Address : 192.168.10.0/24 > Gateway : 192.168.10.1 > DNS Servers : 8.8.8.8 > DHCP Option : AP > apply > ok
IP > Route > Add >Dst. Address : 0.0.0.0/0 > Gateway : 172.17.221.10 > apply > ok
IP > Firewall > NAT > Add >Src. Address : 192.168.10.0/24 >Action > Action : masquerade > apply > ok
IP > DNS > DNS Server : 8.8.8.8
Switch 0 RG-S2928G-24P
Int gi0/1
switchport mode trunk
switchport trunk native vlan 10
interface vlan 10 mgt AP
no shutdown
ip address 192.168.10.2 255.255.255.0
interface vlan 100 user ip
no shutdown
ip address 192.168.23.2 255.255.255.
Interface giga0/24
switchport mode trunk
switchport trunk native vlan 10
AP(auto config by acs url)
!
ip access-list standard 2
20 permit 192.168.23.0 0.0.0.255
!
ip dhcp snooping
sntp interval 60
sntp server cn.pool.ntp.org
sntp enable
!
web-auth acct-update-interval 1
web-auth sta-preemption enable
!
spectral
!
cwmp
acs url http://******/service/tr069servlet
cpe inform interval 90
!
service dhcp
!
ip dhcp pool macc_sta_pool
network 192.168.23.0 255.255.255.0
dns-server 1.9.1.9
default-router 192.168.23.1
!
ip name-server 8.8.8.8
!
enable service web-server http
enable service web-server https
webmaster level 0 username admin password *****
macc wis enable
log_mng set up HTTP
log_mng set uu http://*******/log/upload
log_mng set upd 300
no service password-encryption
!
clock timezone CST +8 0
!
dot11 wlan 1
ssid TestBridgeV100
!
dot11 wlan 3
ssid TestNat
!
link-check disable
!
nfpp
!
wids
!
wlocation
!
vlan 1
name ap#outsideNetwork
!
vlan 100
!
vlan 233
!
interface GigabitEthernet 0/1
encapsulation dot1Q 1
ip dhcp snooping trust
!
interface GigabitEthernet 0/1.1
encapsulation dot1Q 100
ip dhcp snooping trust
!
interface GigabitEthernet 0/1.100
encapsulation dot1Q 100
ip dhcp snooping trust
!
interface Dot11radio 1/0
no ampdu-rts
rate-set 11b mandatory 1 2 5 11
rate-set 11g mandatory 1 2 5 11
rate-set 11g support 6 9 12 18 24 36 48 54
rate-set 11n mcs-support 15
country-code CN
radio-type 802.11b
channel 1
antenna receive 3
antenna transmit 3
chan-width 20
!
interface Dot11radio 1/0.1
encapsulation dot1Q 100
wlan-id 1
!
interface Dot11radio 1/0.3
encapsulation dot1Q 233
wlan-id 3
!
interface Dot11radio 2/0
no ampdu-rts
rate-set 11a mandatory 6 12 24
rate-set 11a support 9 18 36 48 54
rate-set 11n mcs-support 15
rate-set 11ac mcs-support 19
country-code CN
no short-preamble
radio-type 802.11a
channel 149
antenna receive 3
antenna transmit 3
11acsupport enable
chan-width 20
!
interface BVI 1
ip address dhcp
ip nat outside
!
interface BVI 233
ip address 192.168.23.1 255.255.255.0
ip nat inside
!
wlansec 1
!
wlansec 3
!
ip nat inside source list 2 interface BVI 1
!
no offline-detect
!
line console 0
login
password admin
line vty 0 4
privilege level 15
login
password admin
!
end
