New to Mikrotik though not to networking. Just got my AC3 with couple of cAP ax.
I want to replace my unifi USG with HAP AC3 with the following configuration. Image attached for vitual reference.
These are all working on my current unifi setup but trying to recreate the same on AC3 got me all worked up. Combed thru wiki, vids, forum and helps and got it working but without configuring vlan.
This got me worried.
Here is my requirement
ISP ↔ HAP AC3 ↔ CISCO SW ↔ cAP ax
I want to create the following
SSID
Apt1 / 10.10.10.0/24 - vLan10
Apt2 / 10.10.20.0/24 - vLan20
Apt3 / 10.10.30.0/24 - vLan130
Guest / 10.10.40.0/24 - vLan40
IoT / 10.10.50.0/24 - vLan50
House / 192.168.10.0/24 - default
I want to configure the ports and wifi on the AC3 as hybrid.
The ports on the cisco where the AP connects are all trunked already.
Questions
*** PLS NOTE: I am using wifi2 v7.11.2, and would be adding couple of cAP ax once I get the built-in wifi working
*** RouterOS v7.11.2
*** All cap ax would be updated to same version
1- Do I create a bridge for WLAN and LAN separately or just one
2- Where is the best place to create vlan for these? Without vlan they all seem to work but once I create vlan, everything seems to break
3- Do I need to create a vlan for each bridge
4- When I tried to assign 10.10.50.0/24 to my wifi1 (the 2.4ghz card), I get error saying that "cannot run on slave interface). But this is the built-in wifi interface. I thought the built-in is master and virtual are slave?
Lastly, I want all ports and wlan ports to support all vlan IDs but I will be limiting connection btw them later once I get it working.
Okay the good news is that the hapac3 can run wifiwave2 package.
So best bet is to download 7.12 stable, should be out soon for all of your devices and the wifiwave2 package.
The hapac3 will be your capsman device, and with this combo, roaming between devices is apparently enhanced!
Hi Anav
I have gone tru these vids. One thing with most of these vids is that the examples are mostly on virgin setup not one with other settings.
My issues is that wifi works with the various address pools but without vlan.
When I implement vlan, every thing breaks thereby leading to my questions:
1- Do I create a bridge for WLAN and LAN separately or just one
2- Where is the best place to create vlan for these? Without vlan they all seem to work but once I create vlan, everything seems to break
3- Do I need to create a vlan for each bridge
4- When I tried to assign 10.10.50.0/24 to my wifi1 (the 2.4ghz card), I get error saying that "cannot run on slave interface). But this is the built-in wifi interface. I thought the built-in is master and virtual are slave?
Lastly, I want all ports and wlan ports to support all vlan IDs but I will be limiting connection btw them later once I get it working.
************************/
Sorry, I only have created vlans on basic wifi not with wifiwave2 in conjunction with VLANs.
I think you only setup vlans the way I know on the device running capsman, the AC3 in this case and on the other devices you setup the vlans via some datapath commands.
I think its absolutely horrible that the documentation and videos dont help but even worse are the so called capsman lovers here who trumpet its benefits but have FAILED to provide a user article on how to setup wifiwave2 with capsman for the very case you present. A very normal case, an expected case, one that should be relatively easy to produce a decent user article…
As far as I can see there is no mention of capsman here and every AP is on separate subnet, so why you don’t just untag them and leave trunks between AC3, CISCO and USW ?
On AC3 you need only one bridge, there is no need for more bridges and you add all ports as a bridge member expect port you are using for connection to your ISP, probably ether1.
Best practice is to create VLANs on the bridge. There is a great tutorial by @anav on how to create those.
No multiple bridges.
That’s normal, as wifi1 is probably member of a bridge and by default bridge have already assigned subnet to it.
It would be best thing to provide us your current configuration.
Hi
Here is my configuration. Everything works without without VLAN filtering on the bridge and no tagging on the bridge vlan.
I want to ensure all settings are correct before proceeding to adding cAP ax and configuring firewall between the AP.
Thanks for your assistance
(FYI: I reached out to someone on another thread. I will try and combine them here so as not to end up with 2 threads on the same issue).
