How do I VLAN tag wireless client packets?

RouterOS Wireless Networking
1

I am setting up a wireless system at my work and I am attempting to get all packets that come on a wireless interface from a connected client computer to be automatically tagged with a VLAN id.

The hardware and software that I have are a RouterBOARD 433AH with one R52H card that has RouterOS 3.13 installed.

My ultimate goal is to have two wireless SSIDs: one wireless that is used for public access (ie. internet only) and another (via a Virtual AP) that will give access to the internet and internal network. Currently I have two VLANs (one for the internal network and one for the internet only network) and would like for all packets on the public SSID to be tagged with the internet only VLAN id and all packets on the internal SSID to be tagged with the internal VLAN id.

I would greatly appreciate some help in understanding how to do this.

Thank you!
Joel

2 
/interface vlan
add arp=enabled comment="" disabled=no interface=ether1 mtu=1500 name=ether1-vlan50 vlan-id=50

/interface bridge
add name=bridge-public disabled=no

/interface bridge port
add bridge=bridge-public disabled=no interface=ether1-vlan50
add bridge=bridge-public disabled=no interface=wlan1

All of the traffic on wlan1 will be bridged with the tagged vlan50 on ether1. Do the same for your virtual access point making another bridge and vlan.

Edit: Make sure that the port the routerboard is plugged into on the switch is configured as a trunk or at least will pass the tagged vlans you have configured.

3

Thank you so much for your help netrat! That works very well for what I asked!

The problem I’m facing is that I want to be able to run a HotSpot on the internal wireless that will authenticate with username and password against our RADIUS server to be sure that only our employees are the ones that get on the internal network. When the wireless adapter is bridged to our internal VLAN adapter, I don’t think I can run a HotSpot on just the wireless clients and not also on the local network clients. Is there a way I can do that? In the future I want to run the HotSpot on the internet-only users as well, but our company is not to that point yet.

Thanks!

4

this setup acept the trafic of package with vlan_id diferent of the vlan on the interface eth1 ???

tag only untagged package??

Sorry by my Inglish!!!

5

Thanks netrat, this trick help me too…

my configuration is a bit complicated:

RB750 as a gateway, in eth1 I have WAN (public ip) with masquerade and firewall,
in eth2 I have the vlan 2 (camera) and 3 (voip) and is attached to switch that is configured in trunk mode.

Now I want to attach to another port of the switch one RB751U-2HnD in this configuration:

2 wireless lan, each one with it’s own vlan,
eth1 configured in trunk mode in order to communicate with the other RB (that shares internet address)
eth2 configured in tagged mode, so the packet that come inside eth2 become tagged with vlan id 2

Anyone can help me?

Thanks Andrea

6

I send you my example with two SSID in two VLAN:
http://forum.mikrotik.com/t/vlan-configurations/52064/1

With ethernet interface the same that with wifi interface.

I hote this helps.