Community discussions

MikroTik App
 
mishaKMS
just joined
Topic Author
Posts: 3
Joined: Sun Apr 25, 2021 3:46 pm

Guest wifi without internet | Bridge mode | CAP AC

Sun Apr 25, 2021 4:26 pm

Hi there, can anyone tell me why there is no internet in guest wifi network? AP works in bridge mode, cable from router RB751U-2HnD connected to ether1. There is internet in main WLAN 2.4 GHz and 5 GHz, on ether2). When I created guest wifi with virtual interfaces - no internet on those SSID. My steps:
1) created virtual wifi interfaces in 2.4 GHz and 5 GHz (wlan2G , wlan5G)
2) created bridge "bridge-guest" for guest wifi
3) added two ports (interfaces wlan2G , wlan5G ) to bridge-guest
4) assigned ip adress to bridge-guest 10.1.1.1/24
5) configured DHCP-server for guest network
As a result clients gets ip-adresses from DHCP-server but without internet connection.
I tried with quick set WISP AP, bridge mode, the same problem.

# jan/02/1970 02:21:45 by RouterOS 6.48.2
# software id = LDRA-7EJI
#
# model = RBcAPGi-5acD2nD
# serial number = DD340D558BE4
/interface bridge
add name=bridge-guest
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyn country=ukraine disabled=no \
    distance=indoors installation=indoor mode=ap-bridge name=wlan2G \
    preamble-mode=long ssid=miska_rada_2G station-roaming=enabled \
    wireless-protocol=802.11 wps-mode=disabled
add disabled=no keepalive-frames=disabled mac-address=hide \
    master-interface=wlan2G multicast-buffering=disabled name=wlan2g-guest \
    ssid=miska_rada_2G_free station-roaming=enabled wds-cost-range=0 \
    wds-default-cost=0 wps-mode=disabled
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=\
    20/40/80mhz-eeeC country=ukraine disabled=no frequency=auto installation=\
    indoor mode=ap-bridge name=wlan5G ssid=miska_rada_5G station-roaming=\
    enabled wireless-protocol=802.11 wps-mode=disabled
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=\
    dynamic-keys supplicant-identity=MikroTik wpa2-pre-shared-key=hide
add eap-methods="" name=profile-guest supplicant-identity=""
/interface wireless
add disabled=no keepalive-frames=disabled mac-address=hide \
    master-interface=wlan5G multicast-buffering=disabled name=wlan5G-guest \
    security-profile=profile-guest ssid=miska_rada_5G_free station-roaming=\
    enabled wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/ip pool
add name=dhcp_pool0 ranges=10.1.1.2-10.1.1.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=bridge-guest name=dhcp1
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,pas\
    sword,web,sniff,sensitive,api,romon,dude,tikapp"
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=wlan2G
add bridge=bridge1 interface=wlan5G
add bridge=bridge-guest interface=wlan2g-guest
add bridge=bridge-guest interface=wlan5G-guest
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip address
add address=10.1.1.1/24 interface=bridge-guest network=10.1.1.0
/ip dhcp-server network
add address=10.1.1.0/24 dns-none=yes gateway=10.1.1.1
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19323
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Guest wifi without internet | Bridge mode | CAP AC

Mon Apr 26, 2021 7:48 pm

Suggest read this article for a fuller understanding of the setup!!
viewtopic.php?f=23&t=143620

The quick answer is that there is no need to create a second bridge,
simply put all WLAN bridge ports on the same bridge.
They are separated by access based on SSID and firewall rules on the router the capac is connected to!

OH OKAY,............... this may not be just an access point???
However, what is confusing is that you seem to be creating a DHCP server on the capac?
Is this also acting as a router??

Do you have a network diagram you can post??
 
mishaKMS
just joined
Topic Author
Posts: 3
Joined: Sun Apr 25, 2021 3:46 pm

Re: Guest wifi without internet | Bridge mode | CAP AC

Thu Apr 29, 2021 2:29 pm

I used this https://www.youtube.com/watch?v=gcwbhncwPugon youtube to create guest wi-fi, but it doesn't work on CAP AC (bridge mode). By creating second bridge for guest wifi and DHCP-server on that bridge (firewall rulls as well) I want to separate guest network from work network.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 12001
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Guest wifi without internet | Bridge mode | CAP AC

Thu Apr 29, 2021 2:54 pm

Assuming the config is still what you have post:

Just for make wifi work, but for you is better to study VLAN for security, as anav say...

paste this on terminal:
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api,romon,!dude,tikapp"
/ip dhcp-server network
set [find] address=10.1.1.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=10.1.1.1 netmask=24
/ip dhcp-client
add disabled=no interface=bridge1
/ip firewall nat
add action=masquerade chain=srcnat comment="(double) NAT Guest" out-interface=bridge1 src-address=10.1.1.0/24
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19323
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Guest wifi without internet | Bridge mode | CAP AC

Thu Apr 29, 2021 4:32 pm

I cannot help further until I know the network setup!
Is this attached to a router via etherport1 and the router provides DHCP services etc??
OR
is this attached to an ISP modem for example??
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 12001
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Guest wifi without internet | Bridge mode | CAP AC

Thu Apr 29, 2021 4:39 pm

AP (cAP ac [RBcAPGi-5acD2nD]) works in bridge mode,
cable from (another) router RB751U-2HnD (DHCP and Internet provider) connected to ether1 (of cAP ac, from ether1 of RB751U-2HnD).
There is internet in main WLAN 2.4 GHz and 5 GHz (and also) on ethe2 (of cAP ac)
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19323
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Guest wifi without internet | Bridge mode | CAP AC

Thu Apr 29, 2021 6:34 pm

grazie amico mio

In that case, then we need to see the config on the RB751U-2HnD as well before moving forward.
With that, it will be fixed up in minutes.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 12001
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Guest wifi without internet | Bridge mode | CAP AC

Thu Apr 29, 2021 6:38 pm

grazie amico mio

In that case, then we need to see the config on the RB751U-2HnD as well before moving forward.
With that, it will be fixed up in minutes.
I like you suggest to use VLAN!!! ;)
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19323
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Guest wifi without internet | Bridge mode | CAP AC

Thu Apr 29, 2021 8:15 pm

grazie amico mio

In that case, then we need to see the config on the RB751U-2HnD as well before moving forward.
With that, it will be fixed up in minutes.
I like you suggest to use VLAN!!! ;)
Me recommend vlans, never!!!
Well, it depends if the user has only one subnet per interface and thus enough interfaces or few subnets.
Although I recommend for practice everyone uses vlans.

Who is online

Users browsing this forum: dioeyandika, jaclaz, munimleo, tlamik and 110 guests