Mikrotik ROS Guest Network using VLANs

[@TheNetworkBerg]

Great video, really hoping to see you keep at it and create more content on MikroTik!

[@TheseBytes]

Thank so much for the feedback!

[@IG2296]

The Network Berg thanks for sharing this video.

[@IG2296]

@@TheseBytes I will wait more video from you

[@snowballeffects]

Huzzit brus - I'm here thanks to The Network Berg posting this on his Discord channel - Great Vid! So I subscribed :)

[@TheseBytes]

@@snowballeffects Awesome to have you subbed!

[@survivingnetworkingandit2084]

Thank you for the reminder about how to do this on the classic series!

[@JeroenHouben-dy4rd]

Man, thank you. This is straightforward and completely understandable. I was watching a lot of videos. But I can tell you just understand completely what you are doing!

[@iaw15ece]

Thank you for sharing this tutorial. Could you please show us, how to configure these under RouterOS 7.13? As we all know, wireless conception and menu are changed. Thanks.

[@PhilMassie]

Thank you, this is the video I have been looking for! As a newb, setting up an isolated IOT vlan on my Mikrotik has been super confusing. Hoping you have a video on Mikrotik firewalls for dummies like me lol.

[@TheseBytes]

In the pipeline for sure!

[@darksecrets874]

Duuude thank you so much for posting this video i been struggling for the past 2 days to setup a guest wifi network on 5 mikrotik access points using a vlan and this video really helped me allot

[@rayreckless]

This video was just what I needed to see! Very clear. Many thanks :)

[@TheseBytes]

Thank you! Glad I could help.

[@kopparsulfat]

Love the video. You explain howto setup very good, it is easy to follow. 👌

[@mfarokh27]

Courtesy of TNB. 🖐️

[@CheekyMiner]

Excellent video I would love to see this setup include a switch with vlans and see how everything routes thru LAN and wifi.

[@chilli9129]

skorzystałem, działa, dziękuje

[@theyogabios]

Awesome video, thank you.

[@georgecaballero3405]

I purchase a RBD53iG-5HacD2HnD and I still have problems to create SSIDs with different Vlans, I'm able to connect I get dhcp but no internet, I checked the Firewall and the masquerade is created, I made the same routes as the video said and still not internet also even I'm connected to the vlan with the ip range I assigned I don't have access to the mikrotik or able to ping it. It's version 7.15.2 Any recommendation or video I can follow? Thank you. If I use the one that comes by default with vlan1 everything works.

Nice. Keep going.

[@thefixitgal]

Great job

[@TheseBytes]

Thank you!

[@kresimirpecar4925]

NetworkBerg got competition :P

[@danielpcostas]

Great video! Just curious, on Winbox 7.7 I can't see the "Virtual" button on "Wireless tables", I see only a "plus" icon (I'm using a hap ax2). So I cam add a new interfase with "master" on another wifi (I suppose is the same as virtual) but there's no VLAN mode or VLAN ID on any of the tabs. Any ideas on how to achieve? maybe this was removed on newer versions? Thank you!

[@frankogah1833]

Good evening Sir, thanks for your time educating us. Pls, kindly help... I have a unified AP Pro that want to use and extend internet service from groundfloor to 4th floor. pls how do i go about it... I have already run cat6 to 4th floor. Thank you.

[@stefanlodders9521]

I read at some locations that one should avoid more than one bridge per device for performance reasons. Is that true? Woudld be a 1-bridge-solution possible by binding virtual interfaces to the wlan-interfaces themselves and add those to the bridge?

[@Liviu.B]

Hello, ether4 should be an access port for vlan10 untagged. I dont understand why you put ether4 as "tagged" (trunk).

[@TheseBytes]

Hello, yep totally correct and I thought I added a note there to highlight the mistake. Will add one to the video :) Interestingly though, making ether 4 tagged vlan 10 in the bridge vlan table, whist not standard I did set the ingress filtering on with pvid 10. In that sense all traffic ingressing would be assigned to vlan 10 untagged 😵‍💫🤣

[@austinreilly1067]

21 minutes in, this works fine for dhcp but the ether ports have no internet?

[@jarryd3996]

Nice video, just out of curiosity , why did you untag VLAN 10 on the Guest WLAN interface if you are tagging VLAN 10 for that interface and tagging it in the bridge VLAN filtering?

[@TheseBytes]

Hey Jarryd, you are correct! Setting the pvid is actually an unnecessary step as it's being ignored due to the fact that the frame type was set to "admit only vlan tagged". I also must have made a mistake in my editing and forgot to show me enabling ingress filtering on the port 🙈 I will add a little note there on the video.

[@jvplayground]

@@TheseBytes Hi please, is that problem already solved in video? Or is there any other neccessary step to setup it right? Thank you

[@TheseBytes]

@@jvplayground its not a problem in the sense that it will effect the config, rather that setting the PVID is bypassed by the introduction of frame type filtering.

[@jvplayground]

@@TheseBytes Ah, OK,. Please, can I ask you - I have router set up with Quick set wizard as HomeAP dual with bridges all LAN ports and NAT... I made everything as you in video and Guest Wifi worked perfect, when i tried to add one LAN port to same VLAN (as guest wifi), it didnt worked - connected devices could receive IP address from DHCP... Please, is there any difference, when I used that Quickset config? Thank you very much

[@TheseBytes]

@@jvplayground I don't really know regarding the quickset wizard. I usually don't recommend using it. In order to add a port to a specific VLAN you'd need to set the ports PVID to the vlan ID, then on the bridge vlan table set that port as the untagged interface and the bridge interface as the tagged. If you've already done this for the wireless then just go onto the same vlan table entry for the corresponding vlan ID and add the ether port as an untagged interface.

[@juschu]

this vlan shit doesnt work at all!