Simple Wifi AP Only with external DHCP/Router

skela · Sun Dec 12, 2021 3:48 pm

Been trying to set up my recently purchased MikroTik map lite, absolutely blown away by the insane amounts of possibilities this product seems to offer.
Will probably purchase more, if I can just figure things out

I have a Google Home WiFi system with 3 Access Points that works as OK for normal devices. But have had lots of issues trying to connect simple iot devices to this network due to them requiring 2.4GHz, and not liking mixed 2.4GHz/5GHz.

So I purchased the map lite, hoping that it could serve as my iot access point.

What I am trying to achieve is the following:

Set up an WiFi network on the map lite, thats meant to serve my iot devices, SSID "Heimnet.iot"

The map lite is connected to my local area network via an ethernet cable.

DHCP server and routing should remain on the Google Home Wifi stuff.

The devices that are connected to the map lite wifi "Heimnet.iot" should belong to the same subnet/ip stuff as the main network (so Google Home should be its DHCP server).

I've managed to set it up the WiFi, and devices connected to the map lite wifi are reachable on my normal network. But the devices dont have any internet.
Have been trying for the past 4 days to get it to work, so hoping somebody has some input or help here.

Here's my `export hide-sensitive`:

# dec/12/2021 14:45:08 by RouterOS 6.49.2
# software id = 876H-8SWZ
#
# model = RBmAPL-2nD
# serial number = E0AA0E88C6E1
/interface bridge
add name=bridge1
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk disable-pmkid=yes eap-methods="" mode=dynamic-keys name=secure supplicant-identity=MikroTik
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=norway disabled=no frequency=auto installation=indoor mode=ap-bridge security-profile=secure ssid=Heimnet.iot \
    wireless-protocol=802.11
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/interface bridge port
add bridge=bridge1 disabled=yes interface=wlan1
add bridge=bridge1 disabled=yes interface=ether1
add bridge=bridge1 interface=all
/interface list member
add interface=ether1 list=WAN
add interface=wlan1 list=LAN
add interface=bridge1 list=LAN
/ip address
add address=10.0.1.199/24 interface=ether1 network=10.0.1.0
add address=10.0.1.199/24 disabled=yes interface=bridge1 network=10.0.1.0
add address=10.0.1.198/24 interface=wlan1 network=10.0.1.0
/ip dhcp-server network
add address=0.0.0.0/24 gateway=0.0.0.0 netmask=24
add address=10.0.1.0/24 gateway=10.0.1.199 netmask=24
/ip dns
set servers=10.0.1.1
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
/ip route
add distance=1 gateway=10.0.1.1
/ip upnp interfaces
add interface=bridge1 type=internal
add interface=ether1 type=external
/system clock
set time-zone-name=Europe/Oslo

pukkita · Thu Dec 16, 2021 5:33 pm

I have a Google Home WiFi system with 3 Access Points that works as OK for normal devices. But have had lots of issues trying to connect simple iot devices to this network due to them requiring 2.4GHz, and not liking mixed 2.4GHz/5GHz

Do you mean "Smart" devices, like Smartplugs, etc and "EZ" Pairing mode (three fast flashes on device to be paired)???

They don't have any "problem" with mixed 2.4/5GHz, other than most supporting only 2.4GHz.

The "problem" is by definition in the "EZ" Pairing mode, and is not a problem per se, but the fact this pairing method relies on an ARP "hack" that won't work on most properly modern secured networks like default config one on Mikrotik hardware, or google's in this case.

Solution: Use AP Pairing mode, no legacy arp "hacks" required; in this mode the device creates an access point (three slow flashes), where phone connects directly, provisioning the device Wireless for the main home network.

Regarding the config with an specific SSID for IoT devices, try doing this:

1.- System > Reset Configuration: enable Keep User Configuration if you want to keep your admin user and password, and enable No Default Configuration, in order to start from a "blank" router configuration.
2.- Log into router using Winbox Neighbors tab (click on its Mac address field)
3.- Open a new terminal and copy & paste this config:

/interface bridge add name=bridge1

/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk disable-pmkid=yes eap-methods="" mode=dynamic-keys name=secure supplicant-identity=MikroTik

/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=norway disabled=no frequency=auto installation=indoor mode=ap-bridge security-profile=secure ssid=Heimnet.iot \
    wireless-protocol=802.11

/interface bridge port add bridge=bridge1 interface=all

/ip dhcp-client add interface=bridge1

/system clock set time-zone-name=Europe/Oslo
/system identity set name=Heimnet.iot.AP

This will turn your mikrotik into a "wired/wireless" switch, that will get an IP (for management, upgrades, etc) from the google server DHCP.

You'll need to set again the SSID password. (Wireless > Security Profiles tab).

That's all required.

skela · Mon Dec 20, 2021 6:37 pm

Thank you Pukkita, that was amazingly helpful!

All set up and working now.

I perhaps should have mentioned what kind of iot devices I was intending to use this on. Mill WiFi heaters. I have the second generation of these devices. 1 particular device kept falling in and out of the WiFi. I have a Google Mesh WiFi setup in the house like I mentioned previously, but no matter how much I tried, the Mill WiFi heaters simply refused to connect. Managed to get them online using old Airport Expresses I had lying around, but only when I created a different name for the 2.4GHz and 5GHz networks. This 1 particular Mill Heater refused to connect to either Google WiFi or Airport Express no matter what I did.

But after your very kind help, I've got my dedicated Heimnet.iot AP working nicely with that 1 problematic heater

I will probably buy another Map Lite for the downstairs for the iot devices there

anav · Mon Dec 20, 2021 6:47 pm

Just to let you know you can assign multiple wLANs per device, but obviously there is a hit on performance if you create a crazy amount.
Not sure what the practical limit is, but I would say 3 WLANs (1 real, 2 virtual) is probably a good marker.

Also, you can use vlans for each WLAN so with three vlans you can serve up three wLANS, home, guest, iot, or home, iot1, iot2
(lets say you wanted to separate video cameras, from media servers etc......)
(also if you wanted to isolate clients from each other, you can put the smart devices that need to talk to each other on one WLAN and the ones you dont (and thus should block from each other) in a different WLAN (simply by deselecting forwarding in the wifi settings for that WLAN or vWLAN)

Mon Dec 20, 2021 7:47 pm

Try 10 or 15 before you see the impact

(not all fully loaded, obviously...)

anav · Mon Dec 20, 2021 9:33 pm

Try 10 or 15 before you see the impact
(not all fully loaded, obviously...)

Seriously? No I mean it, have you done testing?
I may have consult with the oracle on this (alias bpwl).

Mon Dec 20, 2021 9:40 pm

There is a MUM presentation of a guy praising Map (older version) and Maplite and I think he showed at least that number.
Never tried it myself, that I am willing to admit.

EDIT:
here's the link. It's 8 he shows. But can easily be expanded to more.
https://mum.mikrotik.com/presentations/ ... 179397.pdf

Time to test

Mon Dec 20, 2021 11:01 pm

Map Lite connected using PoE to eth2 of Map, Map eth1 to switch, switch to Hex via Powerline adapters (max 100/20) - soon to be changed by separate cable from Hex to office
1 WLAN interface
9 virtual WLAN interfaces.

1 client connected at a time:
wlan1: throughput roughly 50Mb up, about 20Mb down.
wlan 10: about the same (I wasn't expecting otherwise)

2 clients connected and testing in parallel:
wlan 1 : 34.3 up / 10 down
wlan 10: 27 up / 12 down
CPU hovers between 10 and 20% so not really fully stressed.

I guess more clients, will more or less yield the same total result until it becomes unusable.

anav · Mon Dec 20, 2021 11:42 pm

So in hindsight, its not the number of vWLANs that it as all limiting its the total number of clients..............

Simple Wifi AP Only with external DHCP/Router

Simple Wifi AP Only with external DHCP/Router

Re: Simple Wifi AP Only with external DHCP/Router

Re: Simple Wifi AP Only with external DHCP/Router

Re: Simple Wifi AP Only with external DHCP/Router

Re: Simple Wifi AP Only with external DHCP/Router

Re: Simple Wifi AP Only with external DHCP/Router

Re: Simple Wifi AP Only with external DHCP/Router

Re: Simple Wifi AP Only with external DHCP/Router

Re: Simple Wifi AP Only with external DHCP/Router

Who is online