Separate WLAN and LAN users using VLANs on MikroTik RouterOS v7

mynetworktrain... - In this video, I will show you how you can separate WLAN and LAN users using VLANs on MikroTik RouterOS v7
#MikroTik #vlan #routeros

[@sethsusavage1676]

Thank you for taking the time to make this video. Really helped me get running as someone who moderately knows networking as a programmer. Really was shocked how non intuitive vlans are in router os

[@matthewmurray4830]

I used this video to help me configure a vlan for iot devices, using a combination of eth ports and a wireless ap. Thanks!

[@peterst.8473]

Maher is the best Mikrotik trainer

[@MAICT]

Thank you Peter for this compliment!

[@jareklotz]

Sir, I grew up on Cisco and this whole Router Os mess is new to me. Fortunately, there is a person like you who can share many interesting things. Thank you.

[@DTsinaf]

@MAICT Thanks for this video. I am rookie, but this senario can be done only with bridges without vlans i think. Why need to use vlans? I expected that with the vlans you would cut off the access between the two networks, but that's not the case with these settings either!!

[@krzychaczu]

Thanks! Although a more realistic scenario would be to have two wireless SSIDs on the same access point, but Guests on a separate VLAN, without access to home/office network.

[@jefftee448]

Yes, a FAR more common config.

[@duranopaulo]

Watching in the Philippines. Thank you.

[@ukaszl5733]

Great tutorial, you helped me set up a secure home network :)

[@0views372]

Thanks for providing this! I'm very new to networking and looking to upgrade my home setup. Would this tutorial work the same if I use a separate router and ap? I'm looking at getting the Hex S and a AP currently I have . Thanks

[@jedmar27]

is it possible to create multiple vlan on 1 interface and all of vlan has internet on it? thanks in advance

[@lfr307]

Valeu!

[@MAICT]

@@lfr307 thx

[@sygys]

I followed a few of your video's and i love the way you explain everything its very nice and clear. I also followed this tutorial because i would like to create vlans on my network. What i do experience is that with these settings the devices in both vlans can ping and reach eachother. how do i block this?

[@MAICT]

firewall rules

[@QNAP-StephandenDekker]

there is also a better way to do this nowadays. bridge -> vlan

[@Perokoulos]

​@@QNAP-StephandenDekkercan you explain better?

[@bobns509]

what is needed to allow users from different VLANs to have internet access but not to be able to see/communicate/scan each other?

[@robersonsoliveira]

Amazing lesson

[@MarekMarek-lx1lz]

I have a question about addressing. Why do you assign the IP address to the interfaces, e.g. VLAN10, and not to the bridge-WLAN? The second question is about PVID. You set, for example, 10 everywhere, and in the case of bridge-wlan in the general tab is 1?

[@avihskshetrii]

I have a question if you know please explain it to me, Maher configured vlan filtering in Bridge LAN but not in Bridge Wlan. still, it works fine. Does not both bridge configurations need to be the same here?

[@scottb721]

Did you miss enabling VLAN Filtering for the WLAN ? I could still ping my phone to my PC until I turned on WLAN VLAN Filtering.

[@scottb721]

If my main router downstream, an Asus, is the dhcp server for my network do I still need to set a dhcp server for each VLAN on my Mikrotik that I'm using as a AP for my IoT devices ?

[@michaelfladenhofer4931]

Dear Mr. ... at first, your Videos are superb, but this one is ... find the fault ;-) V-LAN on Ports 2,4,5 and on bridge untagged 2,3,4 ;-) greetings from Austria

[@mwalidaryab3302]

Good work sir!

[@ak_akash_]

I think New Bridge Vlans, untagged Eth2, 4,5 right?

[@dysophea8963]

Hello, MAICT Could I would like to ask you? I was update MikroTik to V7.15.3 (Stable) but I saw on Interface is Loopback then I don't see WiFi or wlan? so what happen on it? thanks

[@sergmarinero3879]

Hello everyone! please advise - How to keep consumption of Wi-Fi traffic with this option? we have 20 people and everyone have 20G limit package per month

[@nathanruben3372]

please make a video about mac based vlans.

[@jamesugbojoide1229]

lovely and educative.

[@puritywaithira1789]

SXT5 NV2 "lost connection, synchronization timeout" - how do i sort this error ,kindly advice

[@David-bq2qh]

Hello Maher, So I got one of the poe routers with ros 6 and a unifi ap and setup dual wan load balance working with your course help and the firewall stuff working. So wondering I have the other three ports in a bridge and was wondering how do I setup a guest vlan on same port as the ap without interfering with the other lan traffic is that possible or do I need multiple vlans?

[@MAICT]

use the way I did and put a different vlan for guest

[@WyzerDev]

Hi, You have 2 isolated Bridges, 1 Vlan only on each one. This VLANs can't be trunked together. You must use only 1 bridge and 2 Vlans, this is a better option

[@samuelwilson8959]

I am currently using IPfire as my router running on a PCengines APU board. I am considering switching over to RouterOS and will have about 4 VLANS. What hardware would you recommend for 1gb UP/DN internet?

[@MAICT]

Crs

[@samuelwilson8959]

@@MAICT Thanks, I will look into it. I am currently testing on an i5 tiny PC using RouterOS x_86.

[@pgotze]

Na ja, but isnt the better solution to use 1 bridge if possible due to HW offloading? More bridges solution is easy to do, but is not that efficient or?

[@HosseinYaghmaei]

Geart video and thanks for sharing that 🙏🌹. I think you had one little mistake in config that in untagged interfaces you should leave ether3 and untagged ether5. Am i right?

[@MAICT]

yep, and I put a note on the video that I made a mistake :)

[@roberttan9438]

hi sir, can make a video for us PPPoe Payment reminder to my client using CCR2116-10G-4S+ V7. thanks and more power.

[@QueeeeenZ]

Why do all networking videos use only IPv4 but not IPv6? We will never move to IPv6 this way.

[@zeljkomikrotik]

Hi. Great video! Tx for that. You've used two different bridges for two different VLAN's. Imagine i would have 10 VLAN's meaning, I would have 10 bridges. There is a way for doing the same config with (or under) only one bridge. Could you show the same config with one brige pls? Tx

[@MAICT]

nop you don't need 10 bridges for 10 VLANs. Only 1 can do.

[@zeljkomikrotik]

@@MAICT Is there a possibility of showing such config as well?

[@MAICT]

@@zeljkomikrotik take this course: mynetworktraining.com/p/vlan-vxlan-on-mikrotik-with-labs

[@zeljkomikrotik]

@@MAICT i see. Ok. Tx

[@free4all868]

Hotspot vlan and pppoe vlan with same port