Hi,
I have been using an RB951 as my primary router for a couple of years now and have it setup to provide a private Access Point and a Guest Access Point, with the Guest AP blocked from the main LAN through Filter rules on the firewall.
I recently purchased a CCR-1009 and am setting it up to be the primary router. The RB951 and the CCR-1009 are not connected directly, but through a TP-Link managed switch.Based on other forum threads here, I have setup two VLAN’s - one for the private LAN and another for the Guest network. Both VLAN’s are configured using the port on the CCR-1009 that the switch will connect to. There are two bridges configured as well, with a DHCP server attached to each bridge.
At this point, I’m getting confused on what to do next to ensure that when a client connects to the private AP, it gets an IP address from the CCR-1009 that is in the private LAN and if connected to the guest AP, the client gets an IP from the guest LAN. I’m trying to avoid using CAPsMAN at the moment, as I have a mix of Mikrotik and non-Mikrotik AP’s.
Should I be trying to setup two VLAN’s on the RB951 as well? Or is sufficient if I just change the “mode” from Router to Bridge and remove the firewall settings? It’s possible I have missed a forum thread that does discuss this - so any useful links or suggestions on what to do next would be very welcome!