Community discussions

MikroTik App
 
User avatar
bramwittendorp
Member Candidate
Member Candidate
Topic Author
Posts: 101
Joined: Thu Jun 16, 2016 3:48 pm
Location: The Netherlands
Contact:

wifiwave2 dynamic VLAN support

Sat Nov 19, 2022 2:26 pm

I think that this feature is not (yet) implemented, but before asking it to the MikroTik support team. Has anyone been able to get dynamic VLAN assignement working on the wifiwave2 package?

I have configured a FreeRADIUS server to be able to send VLAN's based on mac-address in order to segment several device types without broadcasting multiple SSID's, because I don't want to disrupt an already crowded airspace anymore.

On RouterOS 7.5 en 7.6 the wifiwave2 package seems just to ignore the Radius response with a tagged VLAN. (In the MikroTik-Wireless-VLAN-ID radius attribute), on version 7.7beta6 the logs show the following:
xx:xx:xx:xx:xx:xx@wifi4 disconnected, can not assign vlan, signal strength -79
The wireless interface shows an additional comment that "client was disconnected because could not assign vlan"
/interface bridge
add admin-mac=C4:AD:34:2D:FD:D8 auto-mac=no comment=defconf ingress-filtering=no name=bridge vlan-filtering=yes
/interface bridge port
add bridge=bridge interface=ether1
add bridge=bridge interface=wifi1-24
add bridge=bridge interface=wifi2-5
add bridge=bridge interface=ether2
add bridge=bridge interface=wifi4
/interface bridge vlan
add bridge=bridge tagged=bridge,ether1 vlan-ids=70
add bridge=bridge tagged=ether1,bridge,wifi4 vlan-ids=40

/interface ethernet
set [ find default-name=ether1 ] mtu=1508

/interface vlan
add interface=bridge name=70-MGMT vlan-id=70

/interface wifiwave2 channel
add band=2ghz-n frequency=2412,2437,2462 name=24-Ghz width=20mhz
add frequency=5180,5260,5500,5580 name=5Ghz skip-dfs-channels=10min-cac width=20/40/80mhz

/interface wifiwave2 security
add authentication-types=wpa2-psk dh-groups=19,20,21 encryption=ccmp group-encryption=ccmp group-key-update=5m management-encryption=cmac management-protection=allowed name=Home-Wireless-Security wps=disable

/interface wifiwave2
# client was disconnected because could not assign vlan
add channel=5Ghz channel.frequency=5180 configuration.country=Netherlands .mode=ap .ssid="Test Me Up" disabled=no mac-address=C6:AD:34:2D:FD:DA master-interface=wifi2-5 name=wifi4 security=Home-Wireless-Security

/interface wifiwave2 access-list
add action=query-radius disabled=no interface=wifi4 radius-accounting=no
 
User avatar
bpwl
Forum Guru
Forum Guru
Posts: 2983
Joined: Mon Apr 08, 2019 1:16 am

Re: wifiwave2 dynamic VLAN support

Sun Nov 20, 2022 11:39 pm

In release notes of ROS v7.7beta (3,4 and 6) , dynamic VLAN support mentioned as added for 802.11ax interface.
If it can be done in access-list , maybe it will also work for RADIUS
*) wifiwave2 - added option to set per-client vlan-id in access list (only supported on 802.11ax interfaces) (CLI only);
 
User avatar
bpwl
Forum Guru
Forum Guru
Posts: 2983
Joined: Mon Apr 08, 2019 1:16 am

Re: wifiwave2 dynamic VLAN support

Sun Mar 12, 2023 12:01 am

Who is online

Users browsing this forum: Nullcaller and 23 guests