hAP ax3 Wifi VLAN oddity

Hi all,

I’ve just put a couple of C53UiG+5HPaxD2HPaxD (hAP ax3) routers onto an existing system, however I’m having issues but only with the master Wifi Config in terms of routing to VLANs. All of the slave setups work as expected, however whichever SSID is associated initially to the interface doesn’t work. All the other SSIDs which are assigned as slaves work no problem, and if I swap them around, the Guest SSID on VLAN20 works if setup as a slave.

Am I missing something here on the Wifi config? I’ve looked over it again and again, and can’t see what’s different.



Many thanks for any input.



Andy

# 2025-05-01 09:36:42 by RouterOS 7.15.2
# software id = 8JNM-U8EM
#
# model = C53UiG+5HPaxD2HPaxD
# serial number = ******
/interface bridge
add name=bridgeLocal pvid=10 vlan-filtering=yes
/interface ethernet
set [ find default-name=ether2 ] mac-address=F4:1E:57:4E:9F:65
set [ find default-name=ether3 ] mac-address=F4:1E:57:4E:9F:66
set [ find default-name=ether4 ] mac-address=F4:1E:57:4E:9F:67
set [ find default-name=ether5 ] mac-address=F4:1E:57:4E:9F:68
/interface wifi
set [ find default-name=wifi1 ] configuration.country="United Kingdom" .mode=\
    ap .ssid=OldMill_GuestWiFi datapath.bridge=bridgeLocal .client-isolation=\
    yes .vlan-id=20 disabled=no mac-address=F4:1E:57:4E:9F:69 name=Guest1 \
    security.authentication-types=wpa2-psk
set [ find default-name=wifi2 ] configuration.country="United Kingdom" .mode=\
    ap .ssid=OldMill_GuestWiFi datapath.bridge=bridgeLocal .client-isolation=\
    yes .vlan-id=20 disabled=no mac-address=F4:1E:57:4E:9F:6A name=Guest2 \
    security.authentication-types=wpa2-psk
add configuration.mode=ap .ssid=OMHP datapath.bridge=bridgeLocal .vlan-id=30 \
    disabled=no mac-address=F6:1E:57:4E:9F:6D master-interface=Guest1 name=\
    OMHP_1 security.authentication-types=wpa2-psk
add configuration.mode=ap .ssid=OMHP datapath.bridge=bridgeLocal .vlan-id=30 \
    disabled=no mac-address=F6:1E:57:4E:9F:6E master-interface=Guest2 name=\
    OMHP_2 security.authentication-types=wpa2-psk
add configuration.hide-ssid=yes .mode=ap .ssid=OldMill_MGMT datapath.bridge=\
    bridgeLocal .vlan-id=10 disabled=no mac-address=F6:1E:57:4E:9F:69 \
    master-interface=Guest1 name=OldMill_MGMT security.authentication-types=\
    wpa2-psk
add configuration.hide-ssid=yes .mode=ap .ssid=OldMill_MGMT datapath.bridge=\
    bridgeLocal .vlan-id=10 disabled=no mac-address=F6:1E:57:4E:9F:6A \
    master-interface=Guest2 name=OldMill_MGMT2 security.authentication-types=\
    wpa2-psk
add configuration.mode=ap .ssid=OldMill_Staff datapath.bridge=bridgeLocal \
    .vlan-id=30 disabled=no mac-address=F6:1E:57:4E:9F:6B master-interface=\
    Guest1 name=OldMill_Staff1 security.authentication-types=wpa2-psk
add configuration.mode=ap .ssid=OldMill_Staff datapath.bridge=bridgeLocal \
    .vlan-id=30 disabled=no mac-address=F6:1E:57:4E:9F:6C master-interface=\
    Guest2 name=OldMill_Staff2 security.authentication-types=wpa2-psk
/interface vlan
add interface=bridgeLocal name=vlan10_MGMT vlan-id=10
add interface=bridgeLocal name=vlan20_Guest vlan-id=20
add interface=bridgeLocal name=vlan30_VOIP vlan-id=30
add interface=bridgeLocal name=vlan40_CCTV vlan-id=40
add interface=bridgeLocal name=vlan90_WAN3 vlan-id=90
/interface bridge port
add bridge=bridgeLocal interface=ether1 pvid=10
add bridge=bridgeLocal interface=ether2 pvid=20
add bridge=bridgeLocal interface=ether3 pvid=20
add bridge=bridgeLocal interface=ether4 pvid=20
add bridge=bridgeLocal interface=ether5 pvid=20
add bridge=bridgeLocal interface=Guest1 pvid=10
add bridge=bridgeLocal interface=Guest2 pvid=10
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface bridge vlan
add bridge=bridgeLocal tagged=ether1,bridgeLocal untagged=Guest1,Guest2 \
    vlan-ids=20
add bridge=bridgeLocal tagged=bridgeLocal,ether1 vlan-ids=10
add bridge=bridgeLocal tagged=bridgeLocal,ether1 vlan-ids=30
add bridge=bridgeLocal tagged=bridgeLocal,ether1 vlan-ids=40
/ip dhcp-client
add interface=vlan10_MGMT
/system clock
set time-zone-name=Europe/London
/system identity
set name=HAP-HUGH
/system note
set show-at-login=no