RB750G - RB411AR and VLAN

RouterOS Beginner Basics
1

I have a router (RB750G 5 port router/switch). And i have a RB411AR based AP.

If i create Virtual AP-s what would be the easiest way to isolate each VirtualAP (VAP) and forward all trafic to RB750G PPPeE connection?

So, ROUTER (RB750G) is connected to ADSL modem on ether1.

On ether3 via cat5 cable is connected RB411AR card and is broadcasting VirtualAP-s.

I need:

  1. to connect each VAP from AP to established PPPeE connection on router.
    or
  2. to connect each VAP from AP to established PPTP connection on the same AP.

PLEASE HELP.

2

VAPs are simple interfaces, so you can just route and firewall filter the traffic as if they were separate wireless or wired interfaces.

3

Sorry, but i did not understand your advice.

This would be the network diagram of such setup? I tryed this but i dont know how to establish VLAN trunk between RB750G switch and RB411AR AP.
24.8.2011.png

4

Ah. That’s very different from your original question. Are you sure you actually need VLANs? If you only want to separate users behind the WLAN1 interface and the VAP1 interface from each other there’s no need for VLANs at all.

That said, just create VLAN interfaces on the physical interfaces and bridge, just like you indicated.

750:

/interface vlan
add name=vlan10 interface=ether3 vlan-id=10 disabled=no
add name=vlan20 interface=ether3 vlan-id=20 disabled=no
/ip address
add address=192.168.10.1/24 interface=vlan10
add address=192.168.10.1/24 interface=vlan20

411:

/interface vlan
add name=vlan10 interface=ether1 vlan-id=10 disabled=no
add name=vlan20 interface=ether1 vlan-id=20 disabled=no
/interface bridge
add name=vlan10-bridge
add name=vlan20-bridge
/interface bridge port
add bridge=vlan10-bridge interface=vlan10
add bridge=vlan10-bridge interface=wlan1
add bridge=vlan20-bridge interface=vlan20
add bridge=vlan20-bridge interface=vap1

You’d still have to implement firewall filter rules on the 750 to prevent traffic from being routed between VLANs 10 and 20, of course.

RB2011UaS-2HnD -> RB260GsP -> Rb411AR+R52Hn VLAN
5

hello

I used the above example and worked quietly.
But I need to use a RB260GSP to energize RB411AR via PoE. eliminating the passive PoE power

Please, I would like some help with the following scenario.

I do not have much knowledge about vlan with mikrotik.
I tried to follow the SWOS manual, but it works for 15 minutes and soon after for all traffic.
I would create a vlan 100 as internal network in all RB260GsP ports. and only two doors mount the trunk of vlan 10 and vlan 100. that would be my second network. my internal networks is 192.168.141.0/24
my secound network is 130.155.0.0/16
layout.jpg
RB260GsP
rb260gspvlan.jpg
rb260gspvlanacl.jpg

6

(Continuing)

RB2011UAS-2HnD
rb2011.jpg
RB411AR + R52Hn
rb411ar.jpg
All vlans 100 an 10 is untagged
My internal network not use vlanID on nic cards.

7

(continuing 2 )
working correct after all reboot.

RB2011UAS-2HnD
rb2011correct.jpg
RB260GsP
rb260gsphosts.jpg