Community discussions

MikroTik App
 
nevolex
Member Candidate
Member Candidate
Topic Author
Posts: 167
Joined: Mon Apr 20, 2020 1:09 pm

WifiWave2 confusion about default authenticate option

Mon Sep 20, 2021 2:40 pm

Hi everyone I upgraded the driver to WifiWave2 on my Audience, wireless is indeed much faster now, but I cannot find the option that I really need - "default-authenticate"

Previously my 2.4GHZ wlan had "default-authenticate" unticked, so only allowed clients from the access lists were able to connect to it, as I want as many device as possible to be on the 5GHZ, otherwise they just like to comeback to 2.4GHZ.

It looks like this is no longer supported or how do I set it up, please ?

thank you
 
gotsprings
Forum Guru
Forum Guru
Posts: 2087
Joined: Mon May 14, 2012 9:30 pm

Re: WifiWave2 confusion about default authenticate option

Mon Sep 20, 2021 2:53 pm

I can't find VLAN tags.

I have my radios get stuck on selecting channel.

It's a BETA AT THIS POINT.
 
nevolex
Member Candidate
Member Candidate
Topic Author
Posts: 167
Joined: Mon Apr 20, 2020 1:09 pm

Re: WifiWave2 confusion about default authenticate option

Mon Sep 20, 2021 2:56 pm

I can't find VLAN tags.

I have my radios get stuck on selecting channel.

It's a BETA AT THIS POINT.
yeah seems like vlan tags cannot to assigned directly under the wireless interfaces now, use bridge config for them
 
gotsprings
Forum Guru
Forum Guru
Posts: 2087
Joined: Mon May 14, 2012 9:30 pm

Re: WifiWave2 confusion about default authenticate option

Mon Sep 20, 2021 4:22 pm

If the audience is "just a WAP" in my config...

So make a bridge and put the VLAN and wireless interface in it?

I think I will just put the Audience back in it's box for now.
 
nevolex
Member Candidate
Member Candidate
Topic Author
Posts: 167
Joined: Mon Apr 20, 2020 1:09 pm

Re: WifiWave2 confusion about default authenticate option

Mon Sep 20, 2021 11:06 pm

If the audience is "just a WAP" in my config...

So make a bridge and put the VLAN and wireless interface in it?

I think I will just put the Audience back in it's box for now.
Here is how you can do it, don't use vlan tags under wireless interfaces, i did not use them even with the old driver, instead do like so:

create one bridge, only one is needed, add wireless and physical ports to it, notice the tags I am using (10 and 20 for access ports)

/interface bridge port
add bridge=bridge ingress-filtering=no interface=ether1-trunk
add bridge=bridge ingress-filtering=no interface=ether2 pvid=10
add bridge=bridge interface=wlan10_main_2.4GHz pvid=10
add bridge=bridge interface=wlan10_main_5.0GHz pvid=10
add bridge=bridge interface=wlan10_main_5.0GHz+ pvid=10
add bridge=bridge interface=wlan20_guest_2.4GHz pvid=20
add bridge=bridge interface=wlan20_guest_5.0GHz+ pvid=20

then enable vlan filtering in the bridge section:
am basically splitting the interfaces on access and trunk, all wlans are access (I got 6: 3 phisical + 3 virtual wlans) and I tell the interfaces: some belong to vlan 10, the other to vlan 20

/interface bridge vlan
add bridge=bridge tagged=ether1-trunk,bridge untagged=ether2,wlan10_main_2.4GHz,wlan10_main_5.0GHz,wlan10_main_5.0GHz+ vlan-ids=10
add bridge=bridge tagged=ether1-trunk,bridge untagged=wlan20_guest_2.4GHz,wlan20_guest_5.0GHz+ vlan-ids=20
 
dimko
just joined
Posts: 5
Joined: Thu Jun 01, 2023 5:44 pm

Re: WifiWave2 confusion about default authenticate option

Tue Dec 19, 2023 1:21 am

Hi everyone I upgraded the driver to WifiWave2 on my Audience, wireless is indeed much faster now, but I cannot find the option that I really need - "default-authenticate"

Previously my 2.4GHZ wlan had "default-authenticate" unticked, so only allowed clients from the access lists were able to connect to it, as I want as many device as possible to be on the 5GHZ, otherwise they just like to comeback to 2.4GHZ.

It looks like this is no longer supported or how do I set it up, please ?
I think you can achieve the same in WifiWave2. In access list create one last empty entry with Interface= your 2.4GHZ network and Action=reject being set. It must be the last entry in your access list .. meaning it kicks in after all other accept list entries with your allowed clients/MAC addresses get processed.

Who is online

Users browsing this forum: Ahrefs [Bot] and 27 guests