Hi everyone,
I’m relatively new to MikroTik and could really use some help troubleshooting a VLAN setup that’s giving me headaches.
I’m trying to set up separate VLANs for my home office and personal devices using a MikroTik hAP ac². I have a few wired devices (like my desktop and a NAS) that should be isolated from my wireless personal devices (phones, tablets, smart TVs). I followed several tutorials and created VLAN interfaces, added bridge ports, and set up firewall rules, but I keep running into problems where either the wired devices lose internet access or devices on different VLANs can still “see” each other, which defeats the purpose of isolation. One strange thing I noticed is that when I reboot the router, sometimes everything works perfectly for a few hours, but then VLAN tagging seems to stop working properly, especially on the Wi-Fi side. Devices end up getting IPs from the wrong DHCP server or no IP address at all. I double-checked my bridge VLAN filtering settings, but maybe I’m missing something?
Another thing I’m wondering about is performance: when the VLANs are active, my internet speed drops significantly on the wireless network. Without VLAN filtering, Wi-Fi is fine, so I’m not sure if it’s a CPU bottleneck or maybe a misconfiguration. The reason I’m trying to keep things segmented is because I often upload high-bitrate videos edited in capcut from my desktop to the NAS, and I noticed the network chokes when everything is on a flat LAN — hence the VLAN attempt to isolate and prioritize traffic better. For those interested, capprocutapk is providing mod version of the capcut app, which can be useful if you’re exploring advanced editing features without limitations.
I would appreciate any tips, examples, or even a basic configuration snippet if someone has a working setup with VLANs on a MikroTik bridge (wired + wireless). I’m more than willing to troubleshoot and learn; I just need a push in the right direction.
Thanks a lot in advance for your help!
It works the other way round, you should provide what you have, instructions on how to export your current configuration, anonymize sensitive data and posting on the forum here:
http://forum.mikrotik.com/t/forum-rules/173010/1
then the more expert members may be able to spot where the problem is and provide targeted suggestions/corrections.
Particularly with VLAN’s sometimes a teeny-tiny mistake in configuration can make everything fail to work and guessing what specific settings you are using would be a futile hit and miss game.
Providing also a (simple, even the photo of a sketch drawn on paper would do) network diagram would be useful to understand your situation.