Things that are working, the camera plugged into ether2 on VLAN_103 works fine. The wireless controller can see the AP and communicate with it on VLAN_100. I can communicate and manage the switch through the Trunk on VLAN_10 fine. The only thing that's not working is the two SSID's on which are on VLAN_666 and VLAN_667, when trying to connect to those networks I cannot pull an IP address from the remote DHCP server.
I have over 50 APs running through other switches (mainly Cisco) without issue, so I know the setup beyond the Mikrotik switch is setup correctly and working fine. This is just my first rodeo with RouterOS and it's throwing me for a loop.
Attached is a basic diagram layout of what I'm trying to do and a copy of the config is below.
Thanks
Code: Select all
# 2023-08-15 17:20:59 by RouterOS 7.10.2
# software id = **ELIDED**
#
# model = CRS318-16P-2S+
# serial number = **ELIDED**
/interface bridge
add admin-mac=**ELIDED** auto-mac=no name=bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=ether5 ] disabled=yes
set [ find default-name=ether6 ] disabled=yes
set [ find default-name=ether7 ] disabled=yes
set [ find default-name=ether8 ] disabled=yes
set [ find default-name=ether9 ] disabled=yes
set [ find default-name=ether10 ] disabled=yes
set [ find default-name=ether11 ] disabled=yes
set [ find default-name=ether12 ] disabled=yes
set [ find default-name=ether13 ] disabled=yes
set [ find default-name=ether14 ] disabled=yes
set [ find default-name=ether15 ] disabled=yes
set [ find default-name=ether16 ] disabled=yes
/interface vlan
add interface=bridge name=network vlan-id=10
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge comment=AP interface=ether1 pvid=100
add bridge=bridge comment=Camera frame-types=admit-only-untagged-and-priority-tagged interface=ether2 pvid=103
add bridge=bridge comment=Camera frame-types=admit-only-untagged-and-priority-tagged interface=ether3 pvid=103
add bridge=bridge comment=Camera frame-types=admit-only-untagged-and-priority-tagged interface=ether4 pvid=103
add bridge=bridge comment=defconf disabled=yes interface=ether5
add bridge=bridge comment=defconf disabled=yes interface=ether6
add bridge=bridge comment=defconf disabled=yes interface=ether7
add bridge=bridge comment=defconf disabled=yes interface=ether8
add bridge=bridge comment=defconf disabled=yes interface=ether9
add bridge=bridge comment=defconf disabled=yes interface=ether10
add bridge=bridge comment=defconf disabled=yes interface=ether11
add bridge=bridge comment=defconf disabled=yes interface=ether12
add bridge=bridge comment=defconf disabled=yes interface=ether13
add bridge=bridge comment=defconf disabled=yes interface=ether14
add bridge=bridge comment=defconf disabled=yes interface=ether15
add bridge=bridge comment=defconf disabled=yes interface=ether16
add bridge=bridge comment=Trunk-1 frame-types=admit-only-vlan-tagged interface=sfp-sfpplus1
add bridge=bridge comment=Trunk-2 frame-types=admit-only-vlan-tagged interface=sfp-sfpplus2
/interface bridge vlan
add bridge=bridge tagged=bridge,sfp-sfpplus1,sfp-sfpplus2 vlan-ids=10
add bridge=bridge tagged=sfp-sfpplus1,sfp-sfpplus2 untagged=ether1 vlan-ids=100
add bridge=bridge tagged=sfp-sfpplus1,sfp-sfpplus2 untagged=ether2,ether3,ether4 vlan-ids=103
add bridge=bridge tagged=sfp-sfpplus1,sfp-sfpplus2,ether1 vlan-ids=666
add bridge=bridge tagged=sfp-sfpplus1,sfp-sfpplus2,ether1 vlan-ids=667
/interface list member
add interface=ether1 list=LAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=ether9 list=LAN
add interface=ether10 list=LAN
add interface=ether11 list=LAN
add interface=ether12 list=LAN
add interface=ether13 list=LAN
add interface=ether14 list=LAN
add interface=ether15 list=LAN
add interface=ether16 list=LAN
add interface=sfp-sfpplus1 list=LAN
add interface=sfp-sfpplus2 list=LAN
/ip address
add address=10.**ELIDED**/24 interface=network network=10.**ELIDED**
/ip route
add gateway=10.**ELIDED**
/ip service
set telnet disabled=yes
set ftp disabled=yes
set winbox disabled=yes
/system clock
set time-zone-name=America/New_York
/system identity
set name=**ELIDED**
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address=129.6.15.28
add address=132.163.96.5
/system routerboard settings
set boot-os=router-os