Community discussions

MikroTik App
 
remusd
just joined
Topic Author
Posts: 1
Joined: Thu Apr 28, 2022 5:42 pm

IP on trunk port for AP

Thu Apr 28, 2022 6:02 pm

Hello,
I have an hAP lite an I want to set it as an wireless AP for 2 networks. I am pugged in ether port 2 coming from a switch with 3 vlans: 10, 20 & 99. I have managed to make it work (2 wifi interfaces giving the correct ips), but I can't manage to put an management ip on ether2. Here is my configuration:
# mar/08/1970 19:45:02 by RouterOS 6.45.9
# software id = 1GQP-YJB5
#
# model = RB941-2nD
# serial number = D1130DD62216

/interface bridge
add admin-mac=08:55:31:17:2D:21 auto-mac=no comment=defconf name=bridge
add fast-forward=no name=vlan_bridge vlan-filtering=yes

/interface vlan
add interface=vlan_bridge name=VLAN99 vlan-id=99

/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN

/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
    country=no_country_set disabled=no distance=indoors frequency=auto \
    hide-ssid=yes installation=indoor mode=ap-bridge name=multimedia_ap \
    security-profile=multimedia_sec ssid=multimedia vlan-id=10 \
    wireless-protocol=802.11
add disabled=no hide-ssid=yes keepalive-frames=disabled mac-address=\
    0A:55:31:17:2D:25 master-interface=multimedia_ap multicast-buffering=\
    disabled name=bce_ap security-profile=bce_sec ssid=bce vlan-id=20 \
    wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
	
/interface bridge port
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=pwr-line1
add bridge=vlan_bridge ingress-filtering=yes interface=ether2
add bridge=vlan_bridge interface=multimedia_ap pvid=10
add bridge=vlan_bridge interface=bce_ap pvid=20

/interface bridge vlan
add bridge=vlan_bridge tagged=ether2 untagged=multimedia_ap vlan-ids=10
add bridge=vlan_bridge tagged=ether2 untagged=bce_ap vlan-ids=20
add bridge=vlan_bridge tagged=ether2,vlan_bridge vlan-ids=99


/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
    192.168.88.0
add address=10.0.99.6/24 interface=VLAN99 network=10.0.99.0
Any suggestions? I have tried following this tutorial (https://wiki.mikrotik.com/wiki/Manual:Bridge_VLAN_Table), but It's not exactly what I am trying to achieve. I want ether2, my trunk port, to also be the management port.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11982
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: IP on trunk port for AP

Thu Apr 28, 2022 6:30 pm

My suggestion is: never put v7 inside, but update to at least 6.48.6 long-term
before you do anything.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19104
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: IP on trunk port for AP

Thu Apr 28, 2022 7:00 pm

Check out this link........
viewtopic.php?t=182276

You only should have one bridge (only need one bridge).
The hap is only acting as an AP/switch you dont need interface WAN, LAN but you should have Management interface!
Dont assign vlans in wireless configuration, that is for wireless configuration not vlans LOL it can be done, but keep it simple.
Vlans belong on /interface bridge port settings (and only by pvid if required) and /interface bridge vlan settings (which ports are tagged and untagged).

Why do you have a bridge giving out DHCP................. be consistent, its an AP/switch NOT NOT can I repeat NOT a router !!!!!
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19104
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: IP on trunk port for AP

Thu Apr 28, 2022 7:17 pm

Suggest you take ether3 and ether4 FIRST and create an off bridge access to do all the configuring!!
viewtopic.php?t=181718
.............................
/interface bridge
add fast-forward=no name=vlan_bridge vlan-filtering=yes
/interface vlan
add interface=vlan_bridge name=VLAN99 vlan-id=99   { correct only have to identify the management vlan)
/interface list
add name=Manage
/interface list members
add interface=VLAN99 list=Manage
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
    country=no_country_set disabled=no distance=indoors frequency=auto \
    hide-ssid=yes installation=indoor mode=ap-bridge name=multimedia_ap \
    security-profile=multimedia_sec ssid=multimedia 
    wireless-protocol=802.11
add disabled=no hide-ssid=yes keepalive-frames=disabled mac-address=\
    0A:55:31:17:2D:25 master-interface=multimedia_ap multicast-buffering=\
    disabled name=bce_ap security-profile=bce_sec ssid=bce  \
    wds-cost-range=0 wds-default-cost=0 wps-mode=disable
/interface bridge port
add bridge=vlan_bridge interface=ether2   ingress-filtering=yes   frame-types=admit-only-vlan-tagged  { trunk port from switch }   
add bridge=vlan_bridge interface=multimedia_ap pvid=10 ingress-filtering=yes  frame-types=admit-priority-and-untagged  
add bridge=vlan_bridge interface=bce_ap pvid=20  ingress-filtering=yes  frame-types=admit-priority-and-untagged
/interface bridge vlan
add bridge=vlan_bridge tagged=ether2 untagged=multimedia_ap  vlan-ids=10  
add bridge=vlan_bridge tagged=ether2 untagged=bce_ap  vlan-ids=20     
add bridge=vlan_bridge tagged=ether2,vlan_bridge vlan-ids=99
/ip address
add address=10.0.99.6/24 interface=VLAN99 network=10.0.99.0
/ip dns
set allow-remote-requests=yes servers=10.0.99.1
/ip neighbor discovery-settings
set discover-interface-list=Manage
/tool mac-server mac-winbox
set allowed-interface-list=Manage
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=10.0.99.1

Who is online

Users browsing this forum: 0xAA55, mvz71, TheCat12 and 48 guests