classic.ISPforum.cz

Kluci, nenasel by se nekdo s kym muzu to nastaveni kolem Vlan probrat? Potrebuju jen nakopnout, pak to snad uz pujde.

Jde o to, ze potrebuju na port napr. 5 privect 2 vlany - 320 a 799, tyto vlany poslat portem 4 dal. Dale potrebuji na vlanu 799 poslat dhcp (coz tedy uz mam nastavene), ale potrebuji aby uvedene ip adresy ziskaval uzivatel pripojeny na wifi body AP1 az APx, ktere jsou nakonfigurovane pres CAPsman, kdy vsechny capsman ap jsou v brdige, takze s nejvetsi pravdepodobnosti poslat tyto dhcp requesty na ten bridge. Predem Vam moc dekuju.


Nastaveni nize si asi nevsimejte, jsou to me pokusy a nevim zda spravne.
-------------------------------------------------------



Dobry den,

potreboval bych poradit a nevim si s tim rady a nebo spis se mi to nedari rozjet. Mam 5 port. RB 450C, kde mam rozjety centralni CAPsmanager pro dalsich x AP. Do portu napr. 5 je privedena konektivita a dve vlany (vlan 320 a vlan 799). Tyto vlany potrebuju dostat na AP1 a AP2, ktere jsou k centralnimu RB450C (port 4) pripojeny pres switch. AP1 a AP2 nastavuju pres CAPs (funguje), jen si nejsem jisty co je potreba jeste donastavit pro overovani pres Radius - zatim jsem to nemohl overit, kdyz mi nejede komunikace mezi RBckama.

Nize uvadim nastaveni, ale neco z toho mam disable, protoze jsem zkousel kde co. Neporadi mi tedy prosim nekdo, jak dostat 2 vlany pres port 5 na port 4 a poslat je dale na AP1 a AP2?

10.32.0.151/24 - centralni CAPsmanager
10.32.0.152/24 - AP1
10.32.0.153/24 - AP2

/interface bridge
add name=bridge_TRUNK
add comment="bridge pro CaPs AP" name=bridge_capsman protocol-mode=none
add comment="TRUNK pro vlan320 a 799" disabled=yes name=bridge_vlan320
add disabled=yes name=bridge_vlan789

/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether2 ] name=ether2-master-local
set [ find default-name=ether3 ] name=ether3-slave-local
set [ find default-name=ether4 ] comment="posilam vlan 320 na CAP1-2 a vlan 799" name=ether4-slave-local
set [ find default-name=ether5 ] comment="WAN konektivita service vlan 320 a vlan 799" name=ether5-slave-local

/interface vlan
add interface=ether5-slave-local l2mtu=1516 name=vlan_320 vlan-id=320
add interface=ether5-slave-local l2mtu=1516 name=vlan_789 vlan-id=789

/interface bridge port
add bridge=bridge_vlan320 disabled=yes interface=vlan_320
add bridge=bridge_vlan789 disabled=yes interface=vlan_789
add bridge=bridge_capsman interface=cap1
add bridge=bridge_TRUNK interface=ether4-slave-local
add bridge=bridge_TRUNK interface=ether5-slave-local

/ip address
add address=10.32.0.151/24 interface=vlan_320 network=10.32.0.0


Dekuju predem vsem za pomoc.

Tak jsem pokrocil snad dal, ale nejsem si jisty spravnosti konfigurace - zarizeni se mezi sebou vidi, bohuzel jeste nemam do portu c. 5 poslanou (nakonfigurovanou - neni to v me rezii) vlanu 799, abych si mohl otestovat zda se pres radius overeni pripojim na ap pres wifi. Vidite tam prosim nekde nekdo chybu? Hlavne v tech vlanach a tim jak se propaguji z portu 5 na port 4?

/interface bridge
add comment="bridge pro CaPs AP 1 az 20" name=bridge_capsman
add comment="bridge pro TRUNK vlan 320 a 799" name=bridge_trunk

/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether2 ] name=ether2-master-local
set [ find default-name=ether3 ] name=ether3-slave-local
set [ find default-name=ether4 ] comment="posilam vlan 320 na AP 1az20 a vlan 799" name=ether4-slave-local
set [ find default-name=ether5 ] comment="WAN konektivita UTB - service vlan 320 a vlan 799" name=ether5-slave-local

/ip neighbor discovery
set ether1-gateway discover=no
set ether4-slave-local comment="posilam vlan 320 na AP 1az20 a vlan 799"
set ether5-slave-local comment="WAN konektivita UTB - service vlan 320 a vlan 799"
set bridge_capsman comment="bridge pro CaPs AP 1 az 20"
set bridge_trunk comment="bridge pro TRUNK vlan 320 a 799"

/interface vlan
add interface=bridge_trunk l2mtu=1516 name=vlan_320 vlan-id=320
add interface=bridge_trunk l2mtu=1516 name=vlan_799 vlan-id=799

/caps-man security
add authentication-types=wpa-eap,wpa2-eap eap-methods=passthrough name=security1

/caps-man configuration
add channel.frequency=2412 channel.tx-power=10 country="czech republic" mode=ap name=konfigurace1 security=security1 ssid=XXX
/caps-man interface
#
add arp=enabled comment=AP1 configuration=konfigurace1 disabled=no l2mtu=1600 \
mac-address=E4:8D:8C:F2:C1:31 master-interface=none mtu=1500 name=cap1 \
radio-mac=E4:8D:8C:F2:C1:31 security=security1
/ip neighbor discovery
#
set cap1 comment=AP1

/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik

/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc

/caps-man manager
set ca-certificate=auto certificate=auto enabled=yes

/interface bridge port
add bridge=bridge_capsman interface=cap1
add bridge=bridge_trunk interface=ether5-slave-local
add bridge=bridge_trunk interface=ether4-slave-local

/interface ethernet switch vlan
add ports=ether4-slave-local,ether5-slave-local switch=switch1 vlan-id=320
add ports=ether4-slave-local,ether5-slave-local switch=switch1 vlan-id=799

/ip address
add address=10.32.0.151/24 interface=vlan_320 network=10.32.0.0

Kluci, nenasel by se nekdo s kym muzu to nastaveni kolem Vlan probrat? Potrebuju jen nakopnout, pak to snad uz pujde.

Jde o to, ze potrebuju na port napr. 5 privect 2 vlany - 320 a 799, tyto vlany poslat portem 4 dal. Dale potrebuji na vlanu 799 poslat dhcp (coz tedy uz mam nastavene), ale potrebuji aby uvedene ip adresy ziskaval uzivatel pripojeny na wifi body AP1 az APx, ktere jsou nakonfigurovane pres CAPsman, kdy vsechny capsman ap jsou v brdige, takze s nejvetsi pravdepodobnosti poslat tyto dhcp requesty na ten bridge. Predem Vam moc dekuju.