Hey all, i would like to achieve this on my home network:
Below is a list of both my hardware and desired configuration. i would like to know if i can have the chateau manage the configurations of the other devices automatically. quite new to this. the chateau is here for quite some time, but the switches and ap are recently added. large switch is configured partially, and so is the chateau partially. how do i go about achieving this?
Chateau 5G ax: S53UG+M-5HaxD2HaxD : ROS 7.24
local ip: 10.4.0.1
main wireguard, dns, dhcp, firewall.
vlans:
trusted subnet 10.4.x.x vlans:
management lan 4: pool: 10.4.0.5-10.4.0.25
mobile wifi 10: pool: 10.4.10.5-10.4.10.95
services lan 20: pool: 10.4.20.5-10.4.20.95
media iot (2.4+lan) 30: pool: 10.4.30.5-10.4.30.55
wireguard remote 40: pool: 10.4.40.5-10.4.40.55
guest subnet 10.9.11.x vlan:
mobile wifi 99: pool: 10.9.11.5-10.9.11.250
dmz subnet 10.5.11.x vlan:
eth6 SW L & macvlan 5: pool: 10.5.11.11-10.5.11.22
eth1:
isp fiber modem
uplink pppoe
eth2:
switch L eth1 downlink
vlans below: 4, 10, 20, 30 + 5
eth3:
cAP ac eth1 downlink
eth4:
switch S eth1 downlink
vlans below: 20, 30
eth5:
main-workstation 2.5
vlans: 20 (admin port)
cAP ac : RBcAPGi-5acD2nD : ROS 6.49.18
local ip: 10.4.0.5
vlan 10, 30 extender
Switch L : CSS610-8P-2S+ : SwOS 2.21
local ip: 10.4.0.10
vlan 20, 30 + 5 (eth6 + macvlan)
Switch S : CSS106-5G-1Sr2 : SwOS 1.19
local ip: 10.4.0.15
vlan 20, 30
Looked into capsman a bit and i think i've spent time in the worng area as the difference in version made me mess up several resets of the cap.
I even had it reset as a cap and somehow broke my network.
What approach should i research to have that level of configuration done as much as possible centrally? Often, when i do manage to progress enough, i stop having visibility or connectivity to ap and switch any more. I know it's "silence is security" but it sure as hell is sending me into all the wrong rabbit holes of research...
So, what approach should i consider to properly understand and manage the whole network segmentation and access points? I think the wireguard will remain straightforward and seems to already work.
First things first: are you sure that you have described planned configuration to us properly? Eg. Switch S has different VLAN assigned than the main device wants to send.
Please draw a planned network structure as your post is quite unreadable.
Secundo: Try to configdure all wthout VLANS but with one BRIDGE with differnet IPs/subnetworks assigned and then move to VLAN step by step.
The router was alone with the vlans. I added the switch L and it seemed to work, things started getting complicated whrn i started trying to add the second switch and the ap.
My concern now is that i might patch and test the wrong directions. Like capsman, which i tried following at least 7 distinct tutorials and always ended up breaking something. (Detailed old tutorials for cap ac got lost to newer versions and new tutorials rarely capture old caps, or... Are AI slop).
I can share the main routers .rsc if needed. For now i am just trying to identify how to set up and configure that network as centralized as possible, especially since all resets place the gear outside my ip ranges.
What order of configuration should i follow? Doing them via winbox also is flaky as i don't always see them any more for some reason.
Maybe my expectation is wrong, but was expecting a mikrotik main device to be able to treat much of my 4 devices as slaves.
For the small switch config: that is the least relevant now, needs to have acccess to vlans, but the clients on that side are behind. That is why i only placed 2. Also, on eth2, i did indeed get it wrong. Corrected above, that's the large switch. Not the small one. Should be corrected now. And added the vlan 5 also.
I do however still think my problems stem from methodology applied or task sequence, rather than code, at this point. My impression, starting out, was that can both configure and restore the network easily once i get the right configuration from a central point, and am now starting to realise i actually might need 4 distinct configurations, which kind of defeats my initial plans.
Hope it's clearer i am stuck (at least in my brain) one step before the actual scripting.
