Community discussions

MikroTik App
 
User avatar
rilliam
newbie
Topic Author
Posts: 48
Joined: Thu Mar 12, 2009 7:34 pm

WAP guest vlan

Sun Jun 05, 2022 11:06 pm

I am trying to create a guest VLAN on a WAP, and have the DHCP server and routing to the internet happen on a main router. I am getting very confused by the examples and tutorials I am reading.

Internet<---> ether1--R1--ether5 <----> ether1--WAP-R2--wlan1_guest

Wireless client connects to wireless interface SSID_vlan10
Wireless client received DHCP lease from R1 DHCP server server-vlan10
R2 can ping R1 192.168.10.1 on interface bridge_VLAN10

Problem:
R2 cannot ping 4.2.2.2 on interface bridge_VLAN10

Router 1 (R1):
/interface vlan
add interface=ether5 name=vlan10 vlan-id=10
/ip pool
add name=pool-vlan10 ranges=192.168.10.101-192.168.10.199
/ip dhcp-server
add address-pool=pool-vlan10 disabled=no interface=vlan10 name=server-vlan10
/ip address
add address=192.168.10.1/24 interface=vlan10 network=192.168.10.0
/ip dhcp-server network 
add address=192.168.10.0/24 dns-server=8.8.8.8 gateway=192.168.10.1
Router 2 (WAP-R2):
/interface bridge
add name=bridge1
add name=bridge_VLAN10
/interface vlan
add interface=ether1 name=vlan10 vlan-id=10
/interface wireless
add disabled name=wlan1_vlan10 security-profile=profile_vlan10 ssid=SSID_vlan10 wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/ip pool
add name=vlan10-pool ranges=192.168.10.101-192.168.10.199
/ip dhcp-server
add address-pool=vlan10-pool interface=vlan10 name=vlan10-server
/interface bridge port
add bridge=bridge1 interface=Corporate-wlan1
add bridge=bridge1 interface=ether1
add bridge=bridge_VLAN10 interface=wlan1_vlan10 pvid=10
add bridge=bridge_VLAN10 interface=vlan10 pvid=10
/ip address
add address=192.168.10.2/24 interface=vlan10 network=192.168.10.0
 
erlinden
Forum Guru
Forum Guru
Posts: 1920
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: WAP guest vlan

Sun Jun 05, 2022 11:43 pm

I prefer to filter VLAN on the bridge, instead of creating multiple bridges.
Please have a look at this great topic, that should answer all your questions!

viewtopic.php?t=143620
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19099
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: WAP guest vlan

Mon Jun 06, 2022 12:26 am

Assuming you want the AP to be nothing more than an AP/switch for your vlans.
Read this one....... viewtopic.php?t=182276 (but ensure you understand the vlans link erlinden gave you first)
As simple as it gets.
You only need to identify on the AP, the vlan on the trusted subnet, the subnet which the AP gets its IP address from (usually statically set via lease on the main router).

Who is online

Users browsing this forum: CodeAlpha, Semrush [Bot], shadarim, tjanas94 and 52 guests