Hello.
First off I’m not a mikrotik guru or a mediocre at that. I’m more of a on and off when it comes to configuration. I know how to set it up so that it works but that’s it.
So I was given a hAP ac lite, and had to configure 3 different Wireless Virtual APs (vap1, vap2, and vap3). The ip ranges for each are vap1 (10.200.101.0/24), vap2 (10.200.102.0/24) and vap3 (10.200.103/24). Also I set up firewall rules so that the Wireless Virtual AP networks cannot communicate between each other.
Then I had to make an interface OVPN client so that the Mikrotik hAP acts as a OpenVPN client. The OpenVPN server also has 3 subnetworks. 172.16.1.0/24, 172.16.2.0/24 and 172.16.3.0/24. So I set up mangle rules for each Wireless Virtual APs to go to each subnetwork on the OpenVPN:
Src: 10.200.101.0/24 | Dst: 172.16.1.0/24 | Out. Interface: openvpn-interface
Src: 10.200.102.0/24 | Dst: 172.16.2.0/24 | Out. Interface: openvpn-interface
Src: 10.200.103.0/24 | Dst: 172.16.3.0/24 | Out. Interface: openvpn-interface
Then what I had to do was allow internet connection as well. So what I did was if the destination was anything else than 172.16.X.0 the data would go to bridgeLocal which is connected to another router, that I don’t have access to and frankly I don’t think I need access to it, that is connected to the ISP provider.
So with everything set, I’m sorry if I forgot anything but there’s a lot of configuration that I did for it to work, I could successfully ping google.com when I was connected to one of the three AP and depending on which AP I was connected to I could access the subnetwork on the OpenVPN remote server. Tested everything and it works on Mikrotik hAP.
Now comes the tougher part, at least for me. I have to use a Mikrotik mAP to have the three Wireless Virtual APs and then send all the data to the Mikrotik hAP over ethernet. The Mikrotik mAP and Mikrotik hAP are connected over ethernet cable because the Mikrotik mAP on ethernet port 1 gets power over POE from the Mikrotik hAP ethernet port 5.
I’ve been searching for 2 days and if I had anymore knowledge I would know what to search for but I don’t.
If I forgot something I apologise writing to forums is, for me, the last thing I want to do.
Thank you for any help.