Virtual AP setup RB2011UAS-2HnD-IN

RouterOS Beginner Basics
1

I followed this guide for setting up a virtualAP (page 13)
http://mum.mikrotik.com/presentations/ID08/nicholaus_ufoakses.pdf
and I do have the virtualAP transmitting, however, I cannot connect to the virtual AP - devices attempting to connect do not seem to be receiving any network assignments.

In other readings I came across this comment
Did you set the master-interface=wlan1 (or whatever interface)?
Did you enable the VAP interface?
Did you put a DHCP server on it?
http://forum.mikrotik.com/t/viratual-ap-manual/20749/1

I did the first two points, but I do not know how to do the third - how is this done?

I would also like the virtual AP to use the same network range as the WLAN.

2

please pase the output of command “/export compact” so we can check your config.

3

Looks like I’m missing some aspects of setting up the interface
(Then set it up like any other interface, with its own ip/subnet and dhcp server.)
http://forum.mikrotik.com/t/2-ssids-on-751u/53876/1


here is the config

# dec/17/2012 10:40:20 by RouterOS 5.22
# software id = F34F-6D0J
#
/interface bridge
add admin-mac=D4:CA:6D:4F:D0:1E auto-mac=no l2mtu=1598 name=bridge-local \
    protocol-mode=rstp
/interface wireless
set 0 band=2ghz-b/g/n channel-width=20/40mhz-ht-above disabled=no distance=\
    indoors frequency=2422 ht-rxchains=0,1 ht-txchains=0,1 l2mtu=2290 mode=\
    ap-bridge ssid=SSID1 wireless-protocol=802.11
/interface ethernet
set 0 mac-address=00:2C:42:5A:31:48 name=sfp1-gateway
set 1 name=ether1-gateway
set 6 name=ether6-master-local
set 7 master-port=ether6-master-local name=ether7-slave-local
set 8 master-port=ether6-master-local name=ether8-slave-local
set 9 master-port=ether6-master-local name=ether9-slave-local
set 10 master-port=ether6-master-local name=ether10-slave-local
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys \
    wpa-pre-shared-key=password1 wpa2-pre-shared-key=password1
add authentication-types=wpa2-psk management-protection=allowed name=virtualAP1 \
    wpa2-pre-shared-key=password2
/interface wireless
add area="" arp=enabled bridge-mode=enabled default-ap-tx-limit=0 \
    default-authentication=yes default-client-tx-limit=0 default-forwarding=yes \
    disable-running-check=no disabled=no hide-ssid=no l2mtu=2290 mac-address=\
    D4:CA:6D:4F:D0:1E master-interface=wlan1 max-station-count=2007 mtu=1500 \
    multicast-helper=default name=virtualAP1 proprietary-extensions=post-2.9.25 \
    security-profile=virtualAP1 ssid=SSID2 update-stats-interval=disabled \
    wds-cost-range=0 wds-default-bridge=none wds-default-cost=0 \
    wds-ignore-ssid=no wds-mode=disabled wmm-support=disabled
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge-local name=default
/queue simple
add burst-limit=768k/5M burst-threshold=768k/5M burst-time=1s/1s max-limit=\
    768k/5M name="Kid01 Day" target-addresses=192.168.88.240/32
add burst-limit=768k/5M burst-threshold=768k/5M burst-time=1s/1s max-limit=\
    768k/5M name="Kid0000000002 Day" target-addresses=192.168.88.242/32
add burst-limit=1k/1k burst-threshold=1k/1k burst-time=1s/1s disabled=yes \
    max-limit=1k/1k name="Kid01 Night" target-addresses=192.168.88.240/32
add burst-limit=1k/1k burst-threshold=1k/1k burst-time=1s/1s disabled=yes \
    max-limit=1k/1k name="Kid0000000002 Night" target-addresses=\
    192.168.88.242/32
/interface bridge port
add bridge=bridge-local interface=ether2
add bridge=bridge-local interface=ether3
add bridge=bridge-local interface=ether4
add bridge=bridge-local interface=ether5
add bridge=bridge-local interface=ether6-master-local
add bridge=bridge-local interface=wlan1
/ip address
add address=192.168.88.1/24 comment="default configuration" interface=wlan1
/ip dhcp-client
add comment="default configuration" disabled=no interface=sfp1-gateway
add comment="default configuration" disabled=no interface=ether1-gateway
/ip dhcp-server lease
add address=192.168.88.240 client-id=1:e8:39:df:f3:45:d0 mac-address=\
    E8:39:DF:F3:45:D0 server=default
add address=192.168.88.242 client-id=1:e8:39:df:f3:31:80 mac-address=\
    E8:39:DF:F3:31:80 server=default
add address=192.168.88.243 client-id=1:0:26:6c:86:92:49 mac-address=\
    00:26:6C:86:92:49 rate-limit=1k server=default
add address=192.168.88.241 client-id=1:0:26:6c:86:91:b9 mac-address=\
    00:26:6C:86:91:B9 rate-limit=1k server=default
/ip dhcp-server network
add address=192.168.88.0/24 comment="default configuration" dns-server=\
    192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=established
add chain=input comment="default configuration" connection-state=related
add action=drop chain=input comment="default configuration" in-interface=\
    sfp1-gateway
add action=drop chain=input comment="default configuration" in-interface=\
    ether1-gateway
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" \
    out-interface=sfp1-gateway
add action=masquerade chain=srcnat comment="default configuration" \
    out-interface=ether1-gateway to-addresses=0.0.0.0
add action=dst-nat chain=dstnat dst-port=53 protocol=tcp src-address=\
    192.168.88.240 to-addresses=208.67.222.123 to-ports=53
add action=dst-nat chain=dstnat dst-port=53 protocol=udp src-address=\
    192.168.88.240 to-addresses=208.67.222.123 to-ports=53
add action=dst-nat chain=dstnat dst-port=53 protocol=tcp src-address=\
    192.168.88.242 to-addresses=208.67.222.123 to-ports=53
add action=dst-nat chain=dstnat dst-port=53 protocol=udp src-address=\
    192.168.88.242 to-addresses=208.67.222.123 to-ports=53
/ip neighbor discovery
set sfp1-gateway disabled=yes
set ether1-gateway disabled=yes
set wlan1 disabled=yes
set virtualAP1 disabled=yes
/system clock
set time-zone-name=America/Edmonton
/system ntp client
set enabled=yes mode=unicast primary-ntp=132.246.11.229
/system scheduler
add interval=1d name="Kids Day" on-event=Day policy=read,write start-date=\
    dec/16/2012 start-time=05:30:00
add interval=1d name="Kids Night" on-event=Night policy=read,write start-date=\
    dec/16/2012 start-time=21:05:00
/system script
add name=Day policy=read,write source="/queue simple enable \"Kid0000000002 Day\
    \"; /queue simple disable \"Kid0000000002 Night\"; /queue simple enable \"Ki\
    d01 Day\"; /queue simple disable \"Kid01 Night\""
add name=Night policy=read,write source="/queue simple enable \"Kid0000000002 Ni\
    ght\"; /queue simple disable \"Kid0000000002 Day\"; /queue simple enable \"K\
    id01 Night\"; /queue simple disable \"Kid01 Day\""
/tool mac-server
add disabled=no interface=ether2
add disabled=no interface=ether3
add disabled=no interface=ether4
add disabled=no interface=ether5
add disabled=no interface=ether6-master-local
add disabled=no interface=ether7-slave-local
add disabled=no interface=ether8-slave-local
add disabled=no interface=ether9-slave-local
add disabled=no interface=wlan1
add disabled=no interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2
add interface=ether3
add interface=ether4
add interface=ether5
add interface=ether6-master-local
add interface=ether7-slave-local
add interface=ether8-slave-local
add interface=ether9-slave-local
add interface=wlan1
add interface=bridge-local
4

if you want that virtual AP to be in the same network where other wireless interface and ethernet then you need to add virtual APs interface virtualAP1 into the bridge ports.

5

thank you for the solution

6

NB! Bridge community