Difference between revisions of "Manual:VLANs on Wireless"

From MikroTik Wiki
Jump to: navigation, search
(Example 1)
(Example 1)
Line 6: Line 6:
 
abc.
 
abc.
  
===Example 1===
+
====Example 1====
 
+
===Router1 configuration===
* R1
+
* Add necessary VLAN interfaces on ethernet interface to make it as a VLAN trunk port. Add ip addresses on VLAN interfaces.
  
 
<pre>
 
<pre>
 +
[admin@R1] >
 
/interface vlan
 
/interface vlan
 
add interface=ether1 name=vlan110 vlan-id=110
 
add interface=ether1 name=vlan110 vlan-id=110
Line 20: Line 21:
 
</pre>
 
</pre>
  
* R2
+
===Router2 configuration===
 +
* Add VirtualAP under wlan1 interface. ( Also create wireless security-profiles for wlan1 and wlan2)
  
 
<pre>
 
<pre>
 +
[admin@R2] >
 +
/interface wireless
 +
set [ find default-name=wlan1 ] disabled=no mode=ap-bridge security-profile=vlan110 ssid=vlan110 vlan-id=110 wireless-protocol=802.11
 +
add disabled=no keepalive-frames=disabled master-interface=wlan1 multicast-buffering=disabled name=wlan2 \
 +
    security-profile=vlan220 ssid=vlan220 vlan-id=220 wds-cost-range=0 wds-default-cost=0
 +
</pre>
 +
 +
* Add necessary VLAN interfaces on ethernet interface to make it as a VLAN trunk port.
 +
* Add bridges for each VLAN.
 +
* Add VLAN interfaces to their corresponding bridges and wireless interfaces to each bridge.
 +
 +
<pre>
 +
[admin@R2] >
 
/interface vlan
 
/interface vlan
 
add interface=ether1 name=vlan110-ether1 vlan-id=110
 
add interface=ether1 name=vlan110-ether1 vlan-id=110
Line 36: Line 51:
 
add bridge=vlan220-bridge interface=vlan220-ether1
 
add bridge=vlan220-bridge interface=vlan220-ether1
 
add bridge=vlan220-bridge interface=wlan2
 
add bridge=vlan220-bridge interface=wlan2
 
/interface wireless security-profiles
 
set [ find default=yes ] supplicant-identity=MikroTik
 
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=vlan110 supplicant-identity="" wpa2-pre-shared-key=passwordvlan110
 
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=vlan220 supplicant-identity="" wpa2-pre-shared-key=passwordvlan220
 
 
interface wireless
 
set [ find default-name=wlan1 ] disabled=no mode=ap-bridge security-profile=vlan110 ssid=vlan110 vlan-id=110 wireless-protocol=802.11
 
add disabled=no keepalive-frames=disabled mac-address=4E:5E:0C:78:CC:37 master-interface=wlan1 multicast-buffering=disabled name=wlan2 security-profile=vlan220 ssid=vlan220 vlan-id=220 wds-cost-range=0 wds-default-cost=0
 
 
 
</pre>
 
</pre>
  
* R3
+
===Router3 configuration===
 +
* Add ip address on wlan1 interface.
 +
* Create wireless security-profile compatible with R2 wlan1.
 +
<pre>
 +
[admin@R3] >
 +
/ip address
 +
add address=192.168.1.3/24 interface=wlan1 network=192.168.1.0
  
<pre>
 
/interface wireless security-profiles
 
set [ find default=yes ] supplicant-identity=MikroTik
 
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=vlan110 supplicant-identity="" wpa2-pre-shared-key=passwordvlan110
 
 
/interface wireless
 
/interface wireless
 
set [ find default-name=wlan1 ] disabled=no security-profile=vlan110 wireless-protocol=802.11
 
set [ find default-name=wlan1 ] disabled=no security-profile=vlan110 wireless-protocol=802.11
/ip dhcp-client
 
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no interface=wlan1
 
 
</pre>
 
</pre>
  
* R4
+
===Router4 configuration===
 +
* Add ip address on wlan1 interface.
 +
* Create wireless security-profile compatible with R2 wlan2.
 +
<pre>
 +
[admin@R4] >
 +
/ip address
 +
add address=172.168.1.4/24 interface=wlan1 network=192.168.1.0
  
<pre>
 
/interface wireless security-profiles
 
set [ find default=yes ] supplicant-identity=MikroTik
 
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=vlan220 supplicant-identity="" wpa2-pre-shared-key=passwordvlan220
 
 
/interface wireless
 
/interface wireless
 
set [ find default-name=wlan1 ] disabled=no security-profile=vlan220 wireless-protocol=802.11
 
set [ find default-name=wlan1 ] disabled=no security-profile=vlan220 wireless-protocol=802.11
/ip dhcp-client
 
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no interface=wlan1
 
 
</pre>
 
</pre>
  

Revision as of 18:25, 9 January 2017


Summary

abc.

Example 1

Router1 configuration

  • Add necessary VLAN interfaces on ethernet interface to make it as a VLAN trunk port. Add ip addresses on VLAN interfaces.
[admin@R1] >
/interface vlan
add interface=ether1 name=vlan110 vlan-id=110
add interface=ether1 name=vlan220 vlan-id=220

/ip address
add address=192.168.1.1/24 interface=vlan110 network=192.168.1.0
add address=172.168.1.1/24 interface=vlan220 network=172.168.1.0

Router2 configuration

  • Add VirtualAP under wlan1 interface. ( Also create wireless security-profiles for wlan1 and wlan2)
[admin@R2] >
/interface wireless
set [ find default-name=wlan1 ] disabled=no mode=ap-bridge security-profile=vlan110 ssid=vlan110 vlan-id=110 wireless-protocol=802.11
add disabled=no keepalive-frames=disabled master-interface=wlan1 multicast-buffering=disabled name=wlan2 \
    security-profile=vlan220 ssid=vlan220 vlan-id=220 wds-cost-range=0 wds-default-cost=0
  • Add necessary VLAN interfaces on ethernet interface to make it as a VLAN trunk port.
  • Add bridges for each VLAN.
  • Add VLAN interfaces to their corresponding bridges and wireless interfaces to each bridge.
[admin@R2] >
/interface vlan
add interface=ether1 name=vlan110-ether1 vlan-id=110
add interface=ether1 name=vlan220-ether1 vlan-id=220

/interface bridge
add name=bridge-vlan110
add name=vlan220-bridge

/interface bridge port
add bridge=bridge-vlan110 interface=vlan110-ether1
add bridge=bridge-vlan110 interface=wlan1
add bridge=vlan220-bridge interface=vlan220-ether1
add bridge=vlan220-bridge interface=wlan2

Router3 configuration

  • Add ip address on wlan1 interface.
  • Create wireless security-profile compatible with R2 wlan1.
[admin@R3] >
/ip address
add address=192.168.1.3/24 interface=wlan1 network=192.168.1.0

/interface wireless
set [ find default-name=wlan1 ] disabled=no security-profile=vlan110 wireless-protocol=802.11

Router4 configuration

  • Add ip address on wlan1 interface.
  • Create wireless security-profile compatible with R2 wlan2.
[admin@R4] >
/ip address
add address=172.168.1.4/24 interface=wlan1 network=192.168.1.0

/interface wireless
set [ find default-name=wlan1 ] disabled=no security-profile=vlan220 wireless-protocol=802.11

Example 2

[ Top | Back to Content ]