Simple VAP setup

RouterOS Beginner Basics
1

First post, just got a new RB751G-2HnD and trying to a very simple guest VAP. I’ve done many before but not on routerOS. By simple, all I’m trying to do is give out a different password for guests. My guests do not have the expertise/desire to even discover my other lan resources, much less try to access them.

The guest VAP would use the same DHCP range, attach to the same network, and have same access capabilities as master wlan…just a different password. In a typical consumer router, it would be “guest wireless access” with no restriction to lan.

I’ve read just about everything I can find on this site (and manual) on VAP’s, most dealing with segmenting, separating, and vlans.

I’ve set up the VAP and enabled, but cannot connect. I can see the traffic hitting the interface but cannot make the connection.

I would greatly appreciate any tips.

2

How are you planning on doing the authentication for both the users and guests? Are you using different radius servers for each?

3

Nothing that elaborate.

If this were Engenius, it would be 2nd ssid with different password than ssid1 and use wpa2-psk with aes. In fact I have this setup running on a couple of other waps. I just haven’t figured out the 751 implementation yet.

Just want to give nephews or visitors different pwd than ssid1. If the need arises for separation, I will address it then.

Also android ics will not ssid roam. It is faster for me to select ssid on 751 than to stop wifi on android, select 751 main ssid, turn on wifi…

Thanks

4

You want different WPA passphrases on each ap? If so, then that is ok.

If you use wlan1 as the master interface, and it has 192.168.0.1/24 assigned, then I would use this

/interface wireless
add name=vap1 master-interface=wlan1 ssid=NewAp
enable vap1

/ip address
add address=192.168.1.1/24 interface=vap1

/ip dhcp-server
setup

When that last asks for the interface, select vap1.

At this point I insure I can connect with no WPA security.

Now it is like any other interface as far as security. Add another security profile and assign it to your new vap. I tried it with WPA-PSK and it works fine.

They are not the same dhcp range, but you should be able to access one network from the other. I can.

5

Got it. Thanks for the help. While I can ping across subnets, most of the apps won’t work. Great for true guests. I may play with having guest on same address space as main, but with different pools.