I have a problem with untagged VLAN (access mode) configuration on CAPsMAN

RouterOS General
1

Hi there!
Currently I have the following equipment and configuration:

  1. CCR1036-12G-4S is used as a main router.
  2. Using switches in the nearing buildings, in total 120 access points (rbcapgi-5acd2nd) connected to the main router through the ether6 interface.
  3. All APs is managed by CAPsMAN (remote forwarding).
  4. ISP fiber cable is connected to the sfp1 interface.
  5. ISP is providing paid hot spot internet through 613 VLAN using access mode.

Here is a problem:
Whenever I’m doing

/interface enable sfp1
/interface enable ether5
/interface bridge
add name=bridge1 fast-forward=no
/interface bridge port
add interface=ether5 bridge=bridge1 pvid=613
add interface=sfp1 bridge=bridge1
/interface bridge vlan
add bridge=bridge1 vlan-ids=613 tagged=sfp1 untagged=ether5
/interface bridge
set bridge1 vlan-filtering=yes

And whenever I’m connect to the ether5 interface using twisted pair cable with my laptop I’ve been successfully redirected to the ISP authorization page when I open any website.

My problem is CAPsMAN use bridge called bridge_ap_wi_fi and I can’t make the command
/interface bridge port
add interface=bridge_ap_wi_fi bridge=bridge1 pvid=613

because essentially I need to bridge the bridge.

Is there any workaround for my problem?
Help me please.

Kind regards.

2

Without the full configurations it is difficult to see exactly what the problem is. You can’t connect bridges together (this isn’t strictly true, there are ways of connecting VLANs between bridges but often breaks things in mysterious ways, see https://wiki.mikrotik.com/wiki/Manual:Layer2_misconfiguration) or have one port in multiple bridges - just use a single VLAN aware bridge.