I have a non Mikrotik Router/Modem->Switch (CRS328-24P-4S+, ROS)->3 cAPs ac constellation.
The Switch is running cAPsMAN everything works fine.
Now I’d like to add a separate Guest Wifi, but all tutorials I can find rely on a “wireless” (master) interface that I can’t create. (because the switch has noch actual wifi?)
So far, I have no VLAN set up, I have a bridge, 2x3 CAP Interfaces and 24 ethnet interfaces.
Could you set me on the right track, who to set it up properly, please.
Thank you.
Your CRS act as an CAPsMAN controller and you can add virtual wireless interface under master interface you want.
For example, you have 3 cAP ac, so each one have 2 master interfaces, 2.4 and 5 GHz radio and as you have 3 of them you should have 6 wireless interfaces in Wireless menu on your controller.
You can create virtual wireless interface, you just need to select which interface will be master interface.
So you want your living room AP to have guest wifi, and let’s assume your ap interfaces are called cap-wifi3 and cap-wifi4.
You create new virtual interface and you have an option called Master where you can select what interface will be master interface for newly created virtual interface, for example you select cap-wifi3.
Are you saying, I have to create the new interfaces on every cAP I want to contribute to guest wifi and hand them over to cAPsMAN later on?
On my switch I can’t create virtual interfaces, because it is mandatory to chose a master interface in the process and none is offered in the drop down menu there…
If you running CAPsMAN they are automatically handed over.
So under Wireless menu you should have something like this:
And when you press “+” you should get this:
Here you should be able to choose what interface is master.
Interfaces 5 and 6 are virtual in my case and cap-wifi4 is selected as master interface in my case
If using capsman, setting master and slave should be done in your configuration.
Much cleaner.
For each new interface I created configuration that I applied after interface was created if that is what you mean ?
SSID, datapath and everything is defined there.
If in configuration a slave interface is defined, it will be added automatically when that config is applied to master interface.
Honestly I didn’t know that is possible… Learned something new.
My mistake.
It’s in provisioning you do that. Just checked to be sure.
And for slave, apply a config without radio settings since it will take the ones from master interface.
Do I keep all guest devices in the usual network adress range? If yes, how are the networks separated, if no, how does routing work?
For guest network i would suggest you to create separate VLAN just for them, VLAN will separate them by default on layer 2 and to block communication on layer 3 you can implement firewall rules on your router.