Please Help - multiple bridges 2 VLAN 1 AccessPoint

Hi guys,

routerboard = RB951ui 2HnD

the goal:: 2 bridged networks that also have their own VLAN. Meaning I can plug an AP with VLAN tagging 802.11q into port 5 of the routerboard and traffic gets forwarded from AP to appropriate bridge depending on VLAN tag. As AccessPoint I am using a CISCO WAP-121 w VLAN tagging on IDs 50 + 60

the problem:: I plug AP into port 5 but whenever I try to connect to either SSID i receive "authentication error occured" on my mobile device. When I connect to WLAN of RB everything works, which tells me the bridges are setup properly. When I configure AP with just 1 SSID pointing to either bridge network (being plugged into ether port of that bridge network) it works just fine.

i have the following diagram.

eth1 = WAN

br-hspot

  • eth2
  • eth3
  • wlan-hspot
  • vlan-br-hspot

br-open

  • eth4
  • wlan-open
  • vlan-br-open

eth5

  • vlan-br-open -- ID 50 (service tag not ticked)
  • vlan-br-hspot -- ID 60 (service tag not ticked)

So as you can see I have 2 bridges that have networks attached to them, each having a pool | addr | dhcp-server attached to it. As follows:

br-open
192.168.50.1/24
br-hspot
192.168.60.1/24

I have also added an addr entry of

192.168.1.1/24 for eth5 under ip address just to be sure, as the config for the AP on its LAN is static set to 192.168.1.245 / GW .1

Now I read that I should attach VLAN to a seperate port which I did (now eth5) and then add those VLANs to the bridges as I need them. So eth5 is where the AP is plugged into right now but when I try and connect to an SSID i am getting "Authentication Error occured". I can see traffic going through both VLANs on the interface window.

I am just not sure what I have done wrong right now... so I would appreciate any help I can get :smiley: also a screenshot of config attached (ignore 10.9 (ovpn) & 192.168.100 (WAN))


Thanks

I would really really appreciate the help if anyone has any ideas… I am completely stuck right now with this. Heck I even pay you if you can fix it!

At first I suggest to remove the IP on ether5. That is not needed.

It looks like the Cisco AP is not operating properly when vlans are configured.
I do not know the Cisco AP but are you authenticating against that AP or are you trying to use the MikroTik as authentication point?