IoT/guest network on hAP ax lite

Hi folks!
If I understand correctly, does AX Lite have the opportunity to configure a secure “guest network” for devices like sockets, electric kettles, smart vacuum cleaners, etc.? Correct me if I’m wrong

Yes.
It is not because it only has 1 radio, it can not do that.

Thanks a lot!
I tried to discover this answer within a week!
Now I run to buy the AX Lite and configure the “primary” + “guest” networks for my house

Obviously you did not look good enough then :smiley:

Have a read in this thread (excellent series from user anav).
https://forum.mikrotik.com/viewtopic.php?t=182276

Recommendation:
Set up Ax Lite with multiple Wifi SSIDs and using VLAN so your network stays completely segregated from that IoT stuff.

But that will depend on how you plan on integrating that device in your existing network (and what can be done there).

Yeah, you can imagine my state :smiley:
My plans are very clear, I want to migrate from TP-Link and Keenetic Wi-Fi to Mikrotik-only (starting with AX Lite or maybe AC2, but I’m not sure about AC2)

I appreciate your time and willingness to guide me in the world of Mikrotik devices

Previously, I have experience flashing custom ROMs on my phones, configuring kernel frequencies, hibernation features, etc, but Wi-Fi devices seem like a whole new universe

p.s. thanks for the link! I’ll check it today

If you go for AX Lite, don’t bother with AC2 IMHO.
Those wifi environments are “slightly” incompatible.
I mean, it will work together as separate access points but you’ll be better of using AX2 since that one also use wifiwave2 package for wifi (like AX Lite does).

If you are hesitating between AX Lite or AX2, if price permits, I’d go with AX2.
1 ether port more (can make a difference), beefier processor and 5GHz radio as well.

I use AX Lite more for road warrior conditions (I even got the LTE version in my backpack) or to fill a temp gap somewhere.
Make no mistake, it’s a very nice little router for it’s price but AX2 is better.

Glad to hear about the experience you have with Mikrotik devices, it’s really impressive! And thanks for the advice :smiley:

When we consider my conditions, I have a 900 square foot house with three rooms

I need to cover this area with a stable Wi-Fi signal

I’m not an advanced network user, I have only used the “guest network” feature with speed limits, AdGuard DNS (but not now) and a single Ethernet channel (optical, up to 100 Mbps), without any extra channels (like LTE or Starlink)

Previously, I had a Keenetic Air KN-1611 with beamforming, 5GHz Wi-Fi, MU-MIMO
Is the AX Lite sufficient or would it be better to go for the AX2 for home usage?

Depends on your requirements, if you can supply them first?

Based on this message, the requirements are not particularly unique

  • covering a 900-square-foot house with a stable Wi-Fi signal (even with a maximum of 2 walls as obstacles)
  • providing an isolated guest mode
  • offering the opportunity to configure the DNS (to block ads)
  • power supply the router with the powerbank (because “blackouts” can happen again in Ukraine)

Ukraine is not using the metric system ? :open_mouth: :laughing:

900 sq ft = ± 84 sqm

One ap might be just not enough, also given the fact there are walls in between.
Unless you can really place it in a central location ?

Isolated guest mode: no issue. Define one virtual wifi interface with own SSID and security. Then either separate DHCP server on virtual wifi interface (off bridge) or vlan (recommended) and segregation is in effect.
If you have 2 radios, you can dedicate on radio for guest, one radio for own use (personal opinion, use the radio with least troubles for yourself :sunglasses: ).

DNS config, that’s something else. If you have your own PiHole server or ADGuard or so, then it can be done. If not, you’d need a device able to run containers (which neither AX Lite nor AX2 can do since they have no USB port for external storage).

Powerbank: no sweat on AX Lite. I did a test once using 10.000 mAh powerbank and got over 10 hours working over that device (wifi, remote desktop connection to Azure), battery was not close to empty yet.
BUT … if power goes down, doesn’t network from ISP go down as well ?

You are correct, we use the metric system in Ukraine
Thank you for the detailed feedback!

Yes, houses aren’t necessarily quadrants and placing the Wi-Fi device in the center or near the center can help cover the entire house area without any issues

I have decided not to use AdGuard (based on the roots on the product history), but I have plans to try NextDNS or LibreDNS (though I’m not sure if it’s the best solution, as I haven’t delved deeper into it)

Since last year, all optical providers have been working on strengthening the network by installing accumulators inside switches and generators for provider equipment. When a blackout happens, we have up to 10 hours of Ethernet, but after that we need to charge all batteries

Regarding range, I have a hap ax lite serving my IoT. To reach the most distant devices the signal passes from high in an upstairs central room to the front and other side of the house through 2-3 walls and timber floor. House footprint is well over 84 sq m. Although connectivity is fine, I am replacing the lite with an ax2 and moving the former to testing roles. On the ax2 I have separated the wireless bands for management and operations but a virtual Wlan would also serve.

I am new to all this, spending the last few days learning by [re]configuring ax2 & mAP so mainly commenting on observed range.

Great review, thanks for sharing your experience! I will take a closer look at ax2

I wish to add a caveat to my earlier comment. While the setup performed as I said, I did not allow that different end devices also have different wireless performance.
I have since installed a new Thing in one of the locations, the workshop. While it connects, performance is marginal. Ideally Thing should be closer to the sensors from which it collects data but then would be too for from the ax2. I have decided to add a WDS extender so I can move Thing closer to its sensors.