Community discussions

MikroTik App
 
efaden
Forum Guru
Forum Guru
Topic Author
Posts: 1708
Joined: Sat Mar 30, 2013 1:55 am
Location: New York, USA

RB2011 + RB951 for Home WIFI With Public/Private VLAN

Fri Jun 14, 2013 10:17 pm

Hey,

So I am looking for a little configurational advice/guidance. Basically I have a RB2011 w/ WIFI and an RB951. I currently have both of the devices configured to the same SSID + WPA2 settings, one is on Chan 1 and the other on Chan 12. The RB2011 has my cable modem connected to eth1 and is setup with NAT. RB2011 eth2 connects to RB951 eth1 (all ports + WIFI are bridged). My printers, etc connect to RB951 eth2-5. All of this works correctly so far....

My first question is in order to have devices (phone, laptop, etc) roam correctly should the APs be on the same or different channels?


On to the second part. I want to setup another WIFI network with a new SSID ("MyHomePublic"). I want to setup a VLAN with its own DHCP server and all. My goal is to have all the devices and everything in my house on the VLAN1 ("Private") with the SSID ("MyHome") and a separate network VLAN2 ("Public") with the SSID("MyHomePublic"). I need to setup a VLAN trunk between RB2011 eth2 and RB951 eth1....

Can anyone give me some guidance as to how to set that up? Thanks.

-Eric
 
TonyJr
Member Candidate
Member Candidate
Posts: 208
Joined: Sat Nov 12, 2011 1:30 am
Location: UK
Contact:

RB2011 + RB951 for Home WIFI With Public/Private VLAN

Sat Jun 15, 2013 12:06 am

Example: Vlan 8 public wifi.

Main rb:
Create bridge. Add no ports to it yet. Maybe called br-publicwifi. Assign IP.
On interface connected to other ap - add Vlan 8 and add to br-publicwifi
Create open VirtualAP called e.g. Publicwifi and add to br-publicwifi
Run hotspot setup, but use br-publicwifi as the interface in the wizard.

Other rb:
Create bridge br-publicwifi. Do NOT assign IP.
On interface connected to main rb - add vlan 8 and add to br-publicwifi.
Create virtualap publicwifi and add to br-publicwifi.

Done! (Hope I haven't missed anything)

Tony

Sent from my BlackBerry 9900 using Tapatalk
 
TonyJr
Member Candidate
Member Candidate
Posts: 208
Joined: Sat Nov 12, 2011 1:30 am
Location: UK
Contact:

RB2011 + RB951 for Home WIFI With Public/Private VLAN

Sat Jun 15, 2013 12:08 am

Also wireless channels should be different, possibly opposite ends of available channel list. E.g. 1 and 11 on 2.4Ghz

Sent from my BlackBerry 9900 using Tapatalk
 
efaden
Forum Guru
Forum Guru
Topic Author
Posts: 1708
Joined: Sat Mar 30, 2013 1:55 am
Location: New York, USA

Re: RB2011 + RB951 for Home WIFI With Public/Private VLAN

Sat Jun 15, 2013 12:31 am

Example: Vlan 8 public wifi.

Main rb:
Create bridge. Add no ports to it yet. Maybe called br-publicwifi. Assign IP.
On interface connected to other ap - add Vlan 8 and add to br-publicwifi
Create open VirtualAP called e.g. Publicwifi and add to br-publicwifi
Run hotspot setup, but use br-publicwifi as the interface in the wizard.

Other rb:
Create bridge br-publicwifi. Do NOT assign IP.
On interface connected to main rb - add vlan 8 and add to br-publicwifi.
Create virtualap publicwifi and add to br-publicwifi.

Done! (Hope I haven't missed anything)

Tony

Sent from my BlackBerry 9900 using Tapatalk

Pretty sure I get it. Do I have to assign the general traffic to a VLAN? ... or is basically anything not tagged with VLAN 8 going to be my private network? I am going to give it a try later.
 
TonyJr
Member Candidate
Member Candidate
Posts: 208
Joined: Sat Nov 12, 2011 1:30 am
Location: UK
Contact:

RB2011 + RB951 for Home WIFI With Public/Private VLAN

Sat Jun 15, 2013 12:39 am

You can do that at a later time if you want - I first started with just the public wifi on it's own vlan, then moved the private wifi and private lan to their own vlans. But I found it a bit more fidlly, because I had to modify all the firewall rules/NAT that I'd previously setup to use the bridge for that vlan rather than just the physical port originally used.

I'd try doing the public wifi on a vlan first and see how it goes, just to keep things easy :-).

Sent from my BlackBerry 9900 using Tapatalk
 
TonyJr
Member Candidate
Member Candidate
Posts: 208
Joined: Sat Nov 12, 2011 1:30 am
Location: UK
Contact:

RB2011 + RB951 for Home WIFI With Public/Private VLAN

Sat Jun 15, 2013 12:40 am

Sorry, yes - vlan 8 = public wifi only. Everything else is untagged/no vlan.

Sent from my BlackBerry 9900 using Tapatalk
 
efaden
Forum Guru
Forum Guru
Topic Author
Posts: 1708
Joined: Sat Mar 30, 2013 1:55 am
Location: New York, USA

Re: RB2011 + RB951 for Home WIFI With Public/Private VLAN

Sat Jun 15, 2013 2:49 am

Sorry, yes - vlan 8 = public wifi only. Everything else is untagged/no vlan.

Sent from my BlackBerry 9900 using Tapatalk
Awesome. Thanks for your help. I am going to give it a shot tonight. On last question... suppose I wanted to setup a switch in between the two ... suppose I had a GS260.

RB2011 eth2 <-> eth1 GS260 eth2 <-> RB951G eth1

What settings would I have to set on the switch to make sure that the VLAN makes it through the switch but the rest of the traffic stays untagged? Would that also work for a Netgear or other smart switch? Thanks.