Community discussions

MikroTik App
 
mrmustachesir
just joined
Topic Author
Posts: 6
Joined: Thu Sep 22, 2022 5:42 pm

VLANs on the RB951G-2HnD for network separation.

Thu Sep 22, 2022 6:09 pm

Hi all, I have a guest house I’m planning to use for short term rentals, I’d like to share my internet but prevent my devices from being accessed while still allowing them to cast to tvs and such.

After much researching I’ve come to the conclusion I need to setup VLANs, my ISP provided router is essentially cheap junk and does not have this capability. I found the Mikrotik Routerboard RB951G-2HnD for cheap locally but before I purchase I’d like to confirm it will work for my intended configuration.

The Mikrotik will be connected to my ISPs router (they won’t let me change it unfortunately), from here I’ll assign one of the Mikrotiks ports to a VLAN and connect this to a AP in the guest house, the built in AP and remaining ports will be put on a second VLAN and this will be used as my home network.

Would this work in theory or am I missing something? I’ve been struggling to wrap my head around this so any guidance is appreciated.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19099
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: VLANs on the RB951G-2HnD for network separation.

Thu Sep 22, 2022 7:06 pm

Does the ISP router give you a public or private IP? Can it be put into bridge mode?
If not then you will have double nat, which is not the end of the world.
Assuming you still can reach the ISP router interface and forward ports?
 
mrmustachesir
just joined
Topic Author
Posts: 6
Joined: Thu Sep 22, 2022 5:42 pm

Re: VLANs on the RB951G-2HnD for network separation.

Thu Sep 22, 2022 7:12 pm

Does the ISP router give you a public or private IP? Can it be put into bridge mode?
If not then you will have double nat, which is not the end of the world.
Assuming you still can reach the ISP router interface and forward ports?
Unfortunately I cannot access the ISP router beyond basic settings, I’m going to call them tomorrow and see if they can set it to bridge mode from their side.

I should also mention I have zero experience with routerOS but I’m trying to learn. At the moment I just want to confirm I’m getting the right hardware!
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19099
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: VLANs on the RB951G-2HnD for network separation.

Thu Sep 22, 2022 7:17 pm

What is the throughput of your ISP (speeds) and how complex is your network and how many users?
Don't recommend, old MT wifi.
You would be far better off getting Hex router and get an Ap device separetly ( eap 245 wifi 5) or 620 wifi 6).

If you can wait five years MT just came out with the hapax3 (their first wifi 6 router) and that would a worthwile combo of wifi and routerOS.
 
mrmustachesir
just joined
Topic Author
Posts: 6
Joined: Thu Sep 22, 2022 5:42 pm

Re: VLANs on the RB951G-2HnD for network separation.

Thu Sep 22, 2022 7:28 pm

What is the throughput of your ISP (speeds) and how complex is your network and how many users?
Don't recommend, old MT wifi.
You would be far better off getting Hex router and get an Ap device separetly ( eap 245 wifi 5) or 620 wifi 6).

If you can wait five years MT just came out with the hapax3 (their first wifi 6 router) and that would a worthwile combo of wifi and routerOS.
Get about 550mbps down and 200mbps up.

I know it’s older tech but in my home it’s just me and the wifi speeds the Routerboard will realistically do is good enough for me.

In the guest house there could be up to 4 users, the AP I plan to use for them is wifi 5 and it’ll be connected to mine with CAT 7 which I think will be more than sufficient.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19099
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: VLANs on the RB951G-2HnD for network separation.

Thu Sep 22, 2022 7:44 pm

Here is what I would do. TWO OPTIONS. (cost of RB951G $59 - throwing money at old clunky technology is a waste of your $$)

1. Router - Hex ($59)
AP1 - TPLink eap245 ($79)
AP2 - TPLink eap245 ($79)

2. Router HAPAC2 (Wifi 5 - mediocre) ($79)
AP1 - TPlink Eap245 (wifi 5 - very good) ($79)
 
mrmustachesir
just joined
Topic Author
Posts: 6
Joined: Thu Sep 22, 2022 5:42 pm

Re: VLANs on the RB951G-2HnD for network separation.

Thu Sep 22, 2022 8:26 pm

Here is what I would do. TWO OPTIONS. (cost of RB951G $59 - throwing money at old clunky technology is a waste of your $$)

1. Router - Hex ($59)
AP1 - TPLink eap245 ($79)
AP2 - TPLink eap245 ($79)

2. Router HAPAC2 (Wifi 5 - mediocre) ($79)
AP1 - TPlink Eap245 (wifi 5 - very good) ($79)
Okay, I see your thinking, the RB951G I’m looking at is only $25 so I could use it for now and if I want better wifi down the line I could always just connect a better AP to it, at least that’s my thinking.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19099
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: VLANs on the RB951G-2HnD for network separation.

Thu Sep 22, 2022 8:39 pm

Up to you, your budget rules..........but to me its $21 thrown away...........
 
mrmustachesir
just joined
Topic Author
Posts: 6
Joined: Thu Sep 22, 2022 5:42 pm

Re: VLANs on the RB951G-2HnD for network separation.

Thu Sep 22, 2022 8:45 pm

Up to you, your budget rules..........but to me its $21 thrown away...........
I am trying to keep costs down but I don’t mind spending a little more if it’ll be better long term, my thinking was If just used as a router would it not function the same as the hex?
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19099
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: VLANs on the RB951G-2HnD for network separation.

Thu Sep 22, 2022 9:07 pm

Two different fish, the hex is old now but at least it has a decent amount of RAM 256 and 2 cores and 4 thread CPU.
THe other one is a single core with 128mb of RAM.

Your best bet is the hapac2 with 4 core and arm32 cpu architecture.
 
mrmustachesir
just joined
Topic Author
Posts: 6
Joined: Thu Sep 22, 2022 5:42 pm

Re: VLANs on the RB951G-2HnD for network separation.

Thu Sep 22, 2022 9:08 pm

Two different fish, the hex is old now but at least it has a decent amount of RAM 256 and 2 cores and 4 thread CPU.
THe other one is a single core with 128mb of RAM.

Your best bet is the hapac2 with 4 core and arm32 cpu architecture.
Okay I’ll look into it, thanks for the advice.
 
User avatar
Buckeye
Forum Veteran
Forum Veteran
Posts: 886
Joined: Tue Sep 11, 2018 2:03 am
Location: Ohio, USA

Re: VLANs on the RB951G-2HnD for network separation.

Sat Sep 24, 2022 7:44 am

Two different fish, the hex is old now but at least it has a decent amount of RAM 256 and 2 cores and 4 thread CPU.
THe other one is a single core with 128mb of RAM.

Your best bet is the hapac2 with 4 core and arm32 cpu architecture.
The hapac2 has 128mb of RAM. It's main advantage over the hex is the 2Gb link between the CPU and the ethernet switch and 4 full (slightly slower) cores vs 2 on the hex. And being ARM it might support zerotier (I don't have one, I only have the hex S). But both the hex and hapac2 are 16MB flash, which is a shame. Even the RB951G-2HnD has 128MB flash (8 times what either the hex or hapac2 have), but it has single core 600Mhz, so the RB951 should be better than my old retired Asus RT-N16 (480Mz single core with 128MB ram and 32MB flash and with Shibby Tomato firmware was a nice router in its time).

If you plan to use vlans and the hex ports as switch ports, I would chose the hex over the hapac2, because in v7 the MT7621A SOC with integrated MT7530 switch ASIC (see Linux mt7530.c switch driver) used in the hex (RB750Gr3) has better vlan support than the hapac2 (at least that's my understanding, I don't own a hapac2, but I do have the hex S (RB760iGS). But see Switch Chip Features

Who is online

Users browsing this forum: No registered users and 36 guests