Howdy ya’ll, new to the community and the Mikrotik ecosystem.
Basically just a sanity check to see if I’m on the right course or if I’m in the wrong ballpark.
I have two network devices. RB5009UPr router (named conduit) and cAP Lite wireless access point (named prism)
I have the router in a hybrid router/bridge setup.
- Created a bridge on the RB5009 for ethernet ports 5-8 and that is “acting as my LAN switch”. I have 4 computers throughout the property wired to a patch panel and then plugged into any of those 4 ports.
- The cAP Lite wireless device is connected to ethernet port 2 over PoE.
- Will be using the sfp+ port for the connection to the internet.
- Will be using one other ethernet port as a dedicated service port to the router.
The goal is to have the wireless traffic from the cAP Lite and the ethernet traffic on the 4 bridged ports on the router to be on separate vlans and subnets and not be able see eachother while being served dhcp from the router and all being able to reach the internet.
I drew up a little diagram and attached the configs for both Mikrotik devices. I haven’t touched firewall rules except for the default config as I’m trying to figure out if I’m even in the right ballpark before I start setting up firewall rules. Curently the two networks, wireless and lan, are getting the correct dhcp addresses and are able to access the RB5009 router (conduit)
conduit_config.rsc (9.38 KB)
prism_config.rsc (3.11 KB)
