Difference between revisions of "Manual:VLANs on Wireless"

From MikroTik Wiki
Jump to navigation Jump to search
Line 6: Line 6:
abc.
abc.


===Example 1===
====Example 1====
 
===Router1 configuration===
* R1
* Add necessary VLAN interfaces on ethernet interface to make it as a VLAN trunk port. Add ip addresses on VLAN interfaces.


<pre>
<pre>
[admin@R1] >
/interface vlan
/interface vlan
add interface=ether1 name=vlan110 vlan-id=110
add interface=ether1 name=vlan110 vlan-id=110
Line 20: Line 21:
</pre>
</pre>


* R2
===Router2 configuration===
* Add VirtualAP under wlan1 interface. ( Also create wireless security-profiles for wlan1 and wlan2)


<pre>
<pre>
[admin@R2] >
/interface wireless
set [ find default-name=wlan1 ] disabled=no mode=ap-bridge security-profile=vlan110 ssid=vlan110 vlan-id=110 wireless-protocol=802.11
add disabled=no keepalive-frames=disabled master-interface=wlan1 multicast-buffering=disabled name=wlan2 \
    security-profile=vlan220 ssid=vlan220 vlan-id=220 wds-cost-range=0 wds-default-cost=0
</pre>
* Add necessary VLAN interfaces on ethernet interface to make it as a VLAN trunk port.
* Add bridges for each VLAN.
* Add VLAN interfaces to their corresponding bridges and wireless interfaces to each bridge.
<pre>
[admin@R2] >
/interface vlan
/interface vlan
add interface=ether1 name=vlan110-ether1 vlan-id=110
add interface=ether1 name=vlan110-ether1 vlan-id=110
Line 36: Line 51:
add bridge=vlan220-bridge interface=vlan220-ether1
add bridge=vlan220-bridge interface=vlan220-ether1
add bridge=vlan220-bridge interface=wlan2
add bridge=vlan220-bridge interface=wlan2
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=vlan110 supplicant-identity="" wpa2-pre-shared-key=passwordvlan110
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=vlan220 supplicant-identity="" wpa2-pre-shared-key=passwordvlan220
interface wireless
set [ find default-name=wlan1 ] disabled=no mode=ap-bridge security-profile=vlan110 ssid=vlan110 vlan-id=110 wireless-protocol=802.11
add disabled=no keepalive-frames=disabled mac-address=4E:5E:0C:78:CC:37 master-interface=wlan1 multicast-buffering=disabled name=wlan2 security-profile=vlan220 ssid=vlan220 vlan-id=220 wds-cost-range=0 wds-default-cost=0
</pre>
</pre>


* R3
===Router3 configuration===
* Add ip address on wlan1 interface.
* Create wireless security-profile compatible with R2 wlan1.
<pre>
[admin@R3] >
/ip address
add address=192.168.1.3/24 interface=wlan1 network=192.168.1.0


<pre>
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=vlan110 supplicant-identity="" wpa2-pre-shared-key=passwordvlan110
/interface wireless
/interface wireless
set [ find default-name=wlan1 ] disabled=no security-profile=vlan110 wireless-protocol=802.11
set [ find default-name=wlan1 ] disabled=no security-profile=vlan110 wireless-protocol=802.11
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no interface=wlan1
</pre>
</pre>


* R4
===Router4 configuration===
* Add ip address on wlan1 interface.
* Create wireless security-profile compatible with R2 wlan2.
<pre>
[admin@R4] >
/ip address
add address=172.168.1.4/24 interface=wlan1 network=192.168.1.0


<pre>
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=vlan220 supplicant-identity="" wpa2-pre-shared-key=passwordvlan220
/interface wireless
/interface wireless
set [ find default-name=wlan1 ] disabled=no security-profile=vlan220 wireless-protocol=802.11
set [ find default-name=wlan1 ] disabled=no security-profile=vlan220 wireless-protocol=802.11
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no interface=wlan1
</pre>
</pre>



Revision as of 15:25, 9 January 2017


Summary

abc.

Example 1

Router1 configuration

  • Add necessary VLAN interfaces on ethernet interface to make it as a VLAN trunk port. Add ip addresses on VLAN interfaces.
[admin@R1] >
/interface vlan
add interface=ether1 name=vlan110 vlan-id=110
add interface=ether1 name=vlan220 vlan-id=220

/ip address
add address=192.168.1.1/24 interface=vlan110 network=192.168.1.0
add address=172.168.1.1/24 interface=vlan220 network=172.168.1.0

Router2 configuration

  • Add VirtualAP under wlan1 interface. ( Also create wireless security-profiles for wlan1 and wlan2)
[admin@R2] >
/interface wireless
set [ find default-name=wlan1 ] disabled=no mode=ap-bridge security-profile=vlan110 ssid=vlan110 vlan-id=110 wireless-protocol=802.11
add disabled=no keepalive-frames=disabled master-interface=wlan1 multicast-buffering=disabled name=wlan2 \
    security-profile=vlan220 ssid=vlan220 vlan-id=220 wds-cost-range=0 wds-default-cost=0
  • Add necessary VLAN interfaces on ethernet interface to make it as a VLAN trunk port.
  • Add bridges for each VLAN.
  • Add VLAN interfaces to their corresponding bridges and wireless interfaces to each bridge.
[admin@R2] >
/interface vlan
add interface=ether1 name=vlan110-ether1 vlan-id=110
add interface=ether1 name=vlan220-ether1 vlan-id=220

/interface bridge
add name=bridge-vlan110
add name=vlan220-bridge

/interface bridge port
add bridge=bridge-vlan110 interface=vlan110-ether1
add bridge=bridge-vlan110 interface=wlan1
add bridge=vlan220-bridge interface=vlan220-ether1
add bridge=vlan220-bridge interface=wlan2

Router3 configuration

  • Add ip address on wlan1 interface.
  • Create wireless security-profile compatible with R2 wlan1.
[admin@R3] >
/ip address
add address=192.168.1.3/24 interface=wlan1 network=192.168.1.0

/interface wireless
set [ find default-name=wlan1 ] disabled=no security-profile=vlan110 wireless-protocol=802.11

Router4 configuration

  • Add ip address on wlan1 interface.
  • Create wireless security-profile compatible with R2 wlan2.
[admin@R4] >
/ip address
add address=172.168.1.4/24 interface=wlan1 network=192.168.1.0

/interface wireless
set [ find default-name=wlan1 ] disabled=no security-profile=vlan220 wireless-protocol=802.11

Example 2

[ Top | Back to Content ]