I am using the new VLAN method when configuring an wAP ac. Setup is essentially same as the MikroTik router (which is working). I have mikrotik router with interface ports acting as trunk ports (vlan10 is untagged), and to downstream switches. Those switches are working. Also have older Ubiquiti Unifi AP’s attached to those downstream switches with the same SSID’s and vlans tagged and those are working… but the MikroTik wAP Ac is NOT. sad.
issue I’m having with the WAP, is the ether1 is untagged for vlan 10 (data), vlan-all-bridge is tagged. The primary vlan 10 (data), is working fine and clients connecting to this SSID are receiving IP address.
However, on the other SSID’s I have - no DHCP address is coming through to the WAP. I have the PVID set on the wlan interface that is within /bridge ports
I will post config when I’m back onsite.. forgot to pull it down locally. But perhaps someone can make a suggestion as to why the tagged SSID interfaces are not being untagged within the bridge interface for DHCP to work?
Here is example of the config.. this is 100% off my memory of what I can remember:
/bridge name=all-vlan-bridge
Read through the appropriate examples in this excellent reference.
Then adjust your config accordingly.
If you are still having issue then post your config for review
/export hide-sensitive file=yourconfig
@anav. - help me before like you did before with suggestions? I’m 100% baffled here…
MikrotTik core router is working fine with bridge vlan filtering and the tagged/untagged. Unifi AP’s with SSID vlan tag assignment is working fine as well for the various SSID’s. But on the MikroTik WAP AC - is NOT. only SSID that is working is the private SSID that is the primary untagged vlan (vlan10-data).
below is config. I changed the clients name in SSID to “Private SSID”
I was exhausted other night when I connected this WAP. The switchport it was connected to was WRONG. config was correct, but port on switch was also correct, but i had it in wrong port. as the switch numbering was not (1up, 2up) etc. normally 1-24 are top, 25-48 below.
The only thing I didnt understand in your config was this line…
add bridge=all-vlan-bridge tagged=all-vlan-bridge untagged=
ether1_sw2.p15,wlan2-PrivateSSID-5G,wlan1-PrivateSSID vlan-ids=10
why is ether1 untagged here??
I’m assuming of course that ether 1 is the trunk port from the router or managed switch to the wap AND IS CARRYING the vlans (vlan 10 should not be untagged on the router side either if on a trunk port!)
(10 being home vlan, 20 being guest vlan, 40 being control vlan).
Here is what I think your bridge ports and interface vlans should look like…
/interface bridge port
add bridge=all-vlan-bridge interface=wlan1-PrivateSSID pvid=10 ingress filtering=yes frames-allowed-untagged and high priority
add bridge=all-vlan-bridge interface=wlan2-PrivateSSID-5G pvid=10 ingress filtering=yes frames-allowed-untagged and high priority
add bridge=all-vlan-bridge interface=ether1_sw2.p15 pvid=1 (keep this default setting and as well the bridge itself keeps its default pvid=1)
add bridge=all-vlan-bridge interface=wlan3-GuestWifi pvid=20 ingress filtering=yes frames-allowed-untagged and high priority
add bridge=all-vlan-bridge interface=wlan4-Control4 pvid=40 ingress filtering=yes frames-allowed-untagged and high priority
add bridge=all-vlan-bridge interface=wlan6-GuestWifi-5g pvid=20 ingress filtering=yes frames-allowed-untagged and high priority
add bridge=all-vlan-bridge interface=wlan5-Control4-5g pvid=40 ingress filtering=yes frames-allowed-untagged and high priority
vlan10 on trunk port is set as native. switchport trunk native, rest are tagged.
yes, switches, core are all on vlan10 subnet - no mgmt (yet). Its relatively small network here in contrast. Didnt feel need to further complicate it by adding mgmt vlan
Thats fine, I have the same with my vlan 11…
Look at my rules…
I dont untag my core vlan, because all the etherports on my router that are access ports!
If I had one etherport that served a PC on the core lan that that bridge port would be untagged on a bridge interface vlan rule.
The only thing that is untagged by default is the bridge which retains its default pvid=1
Add the dynamic rule added by the router which you wont see in a config download (which bugs the heck out of me)
add bridge=Homebridge vlan-ids=1 {current untagged=Homebridge,eth2,eth3}
sad.