HapAC2 as simple access point

RouterOS Beginner Basics
1

Due to various reasons, I want to setup my HApac2 as a second access point, connected by ethernet to a Netgear R7800.

Got it working using the homeAP setting and works fine, however it puts devices connected to it on a second subnet which means I cant access my sonos system when a device is connected to the HAp.

Now, i though it would be a simple matter of turning of DHCP and assigning it a static address but it doesnt seem to work. Tried several setups and did get it to work for a while but hadnt setup any wifi security and couldnt log back on to change it :slight_smile:

Must be missing something simple. I do need a good few hours to fiddle.

Any tips ?

I have tried to search but cant find anything

Slow speed with hAP ac2 as AP
2

If you want to use hAP ac2 only as access point you should:

  1. Reset the board with option No default configuration
  2. Login with WinBox with MAC address
  3. Create new bridge interface
  4. Put in created bridge all of the Ethernet and wireless interfaces
  5. Set IP address on bridge for management purposes, for example if your main router LAN IP is 192.168.1.1 for MikroTik use 192.168.1.10
  6. Now you have Ethernet switch and access point. If you want to manage hAP ac2 from outside of your LAN, you need to create default route under IP->Routes with destination 0.0.0.0/0 and gateway LAN IP of your main router. In my example this will be 192.168.1.1 Of course you need to forward port(s) for remote management in your main router.
3

Disable DHCP server, put all ports to bridge, add DHCP client on bridge, modify firewall and nat.
It should work then.

4

Thanks pea,

will have another fiddle :slight_smile:

5

It might have some value to read through this thread as well!
Good luck, we got a play5 for xmas so I may have to join the mikrotik sonos fun

http://forum.mikrotik.com/t/sonos-across-vlans/92075/14

6

Now working,

Selected bridge AP and off it went :slight_smile:

Cant access the setup page anymore though

7

Connect via MAC winbox and set IP address(or check what address did DHCP client obtain).

8

I am assuming the hapac2 as an AP only is very similar to my capAC device.
I started with the default setup and was able to access and program the unit with relative ease.
I basically added the necessary wifi settings.
The VLAN settings to match what was coming in on eth1 (the trunk port)
Setup the bridge and bridge ports and rules and presto, done!

I kept the default setup which was in AP-WISP Mode.

# dec/07/2018 16:10:13 by RouterOS 6.43
#
# model = RouterBOARD cAP Gi-5acD2nD

/interface bridge
add admin-mac auto-mac=no comment=defconf name=\
    bridgeHallway vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] disabled=yes speed=100Mbps
/interface vlan
add interface=bridgeHallway name=Guests_WIFI-v200 vlan-id=200
add interface=bridgeHallway name=Wifi_SDevices_cap2 vlan-id=45
/interface list  (dont need to add this but I did to be consistent with all my setups)
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk disable-pmkid=yes eap-methods="" mode=\
    dynamic-keys name=Hallway_wifi supplicant-identity="" wpa-pre-shared-key=\
    ............. wpa2-pre-shared-key=..........
add authentication-types=wpa2-psk disable-pmkid=yes eap-methods="" mode=\
    dynamic-keys name=devices_only supplicant-identity="" \
    wpa2-pre-shared-key=....................
add authentication-types=wpa2-psk disable-pmkid=yes eap-methods="" mode=\
    dynamic-keys name=HouseGuestsSecurity supplicant-identity="" \
    wpa2-pre-shared-key=.....................
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=canada disabled=no \
    distance=indoors frequency=2442 mode=ap-bridge name=DevicesHallway \
    security-profile=devices_only ssid=???? vlan-id=45 vlan-mode=use-tag \
    wireless-protocol=802.11 wps-mode=disabled
set [ find default-name=wlan2 ] band=5ghz-n/ac channel-width=20/40/80mhz-Ceee \
    country=canada disabled=no mode=ap-bridge name=Hallway5G\
    security-profile=Hallway_wifi ssid=????????? wireless-protocol=\
    802.11 wps-mode=disabled
add disabled=no keepalive-frames=disabled mac-address= \
    master-interface=Hallway5G multicast-buffering=disabled name=VisitorWIFI \
    security-profile=HouseGuestsSecurity ssid=Guest_Wifi vlan-id=200 \
    vlan-mode=use-tag wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/interface bridge port
add bridge=bridgeHallway comment=defconf interface=ether1
add bridge=bridgeHallway comment=defconf interface=DevicesHallway  (my 2.6ghz WLAN1)
add bridge=bridgeHallway comment=defconf interface=Hallway5G  (my 5Ghz WLAN2)
add bridge=bridgeHallway interface=VisitorWIFI trusted=yes  (my 5Ghz VWLAN)
/interface bridge vlan
add bridge=bridgeHallway tagged=DevicesHallway,ether1 vlan-ids=45
add bridge=bridgeHallway tagged=VisitorWIFI,ether1, vlan-ids=200
/interface list member  (again not required but I did this to be consistent across all my devices)
add interface=ether1 list=WAN
add interface=ether2 list=LAN
add interface=Hallway5G list=LAN
add interface=DevicesHallway list=LAN
add interface=Wifi_SDevices_cap2 list=LAN
add interface=Guests_WIFI-v200 list=LAN

Rest pretty much default.