Загнал меня в тупик CRS не могу WiFi запустить. Суть идеи - есть RB750Gr3, ether1 которого получает интернет от провайдера, а ether2-ether5 объединены в bonding (на него навешены vlan'ы) и соединены с ether21-ether24 объединенными в транк. при подключении клиентов к определенным портам или сетям wifi они должны попадать в соответствующий vlan. Настраивал по этому мануалу - https://wiki.mikrotik.com/wiki/Manual:C ... ith_Trunks, с проводными клиентами все получилось, при подключении к порту на CRS клиент попадает в соответствующий vlan и получает адрес с RB, а вот как по этой методике запустить в vlanы беспроводных клиентов сообразить не могу (через switch интерфейс wlan не виден). Подскажите в какую сторону копать плиз.
На всякий случай конфиги:
роутер:
Код: Выделить всё
# jan/02/1970 04:47:57 by RouterOS 6.45.6
# software id = DEBE-Q8VG
#
# model = RouterBOARD 750 r2
# serial number = 63BD05919C88
/interface ethernet
set [ find default-name=ether3 ] mac-address=E4:8D:8C:C9:16:44
set [ find default-name=ether4 ] mac-address=E4:8D:8C:C9:16:44
set [ find default-name=ether5 ] mac-address=E4:8D:8C:C9:16:44
/interface bonding
add mode=balance-xor name=bonding-to-vol-87-sw1 slaves=\
ether2,ether3,ether4,ether5 transmit-hash-policy=layer-2-and-3
/interface vlan
add arp=reply-only interface=bonding-to-vol-87-sw1 name="VLAN10 - SWEETHOME" \
vlan-id=10
add arp=reply-only interface=bonding-to-vol-87-sw1 name="VLAN20 - DSS" \
vlan-id=20
add arp=reply-only interface=bonding-to-vol-87-sw1 name="VLAN30 - TWONKY" \
vlan-id=30
add arp=reply-only interface=bonding-to-vol-87-sw1 name="VLAN40 - WTC" \
vlan-id=40
add arp=reply-only interface=bonding-to-vol-87-sw1 name="VLAN100 - WELCOME" \
vlan-id=100
add interface=bonding-to-vol-87-sw1 name="VLAN110 - CONTROL" vlan-id=110
/ip pool
add name=pool_sweethome ranges=192.168.10.2-192.168.10.20
add name=pool_dss ranges=192.168.20.2-192.168.20.10
add name=pool_twonky ranges=192.168.30.2-192.168.30.10
add name=pool_wtc ranges=192.168.40.2-192.168.40.10
add name=pool_welcome ranges=172.16.100.2-172.16.100.20
add name=pool_control ranges=172.16.110.10-172.16.110.20
/ip dhcp-server
add add-arp=yes address-pool=pool_welcome bootp-lease-time=lease-time \
bootp-support=dynamic disabled=no interface="VLAN100 - WELCOME" name=\
dhcp_welcome
add add-arp=yes address-pool=pool_sweethome bootp-lease-time=lease-time \
bootp-support=dynamic disabled=no interface="VLAN10 - SWEETHOME" name=\
dhcp_sweethome
add add-arp=yes address-pool=pool_dss bootp-lease-time=lease-time \
bootp-support=dynamic disabled=no interface="VLAN20 - DSS" name=dhcp_dss
add add-arp=yes address-pool=pool_twonky bootp-lease-time=lease-time \
bootp-support=dynamic disabled=no interface="VLAN30 - TWONKY" name=\
dhcp_twonky
add add-arp=yes address-pool=pool_wtc bootp-lease-time=lease-time \
bootp-support=dynamic disabled=no interface="VLAN40 - WTC" name=dhcp_wtc
add add-arp=yes address-pool=pool_control bootp-lease-time=lease-time \
bootp-support=dynamic disabled=no interface="VLAN110 - CONTROL" name=\
dss_control
/ip address
add address=172.16.110.1/24 interface="VLAN110 - CONTROL" network=\
172.16.110.0
add address=192.168.10.1/24 interface="VLAN10 - SWEETHOME" network=\
192.168.10.0
add address=192.168.20.1/24 interface="VLAN20 - DSS" network=192.168.20.0
add address=192.168.30.1/24 interface="VLAN30 - TWONKY" network=192.168.30.0
add address=192.168.40.1/24 interface="VLAN40 - WTC" network=192.168.40.0
add address=172.16.100.1/24 interface="VLAN100 - WELCOME" network=\
172.16.100.0
/ip dhcp-server network
add address=172.16.100.0/24 dns-server=172.16.100.1 domain=WELCOME gateway=\
172.16.100.1 netmask=24 ntp-server=172.16.100.1
add address=192.168.10.0/24 dns-server=192.168.10.1 domain=SWEETHOME gateway=\
192.168.10.1 netmask=24 ntp-server=192.168.10.1
add address=192.168.20.0/24 dns-server=192.168.20.1 domain=DSS gateway=\
192.168.20.1 ntp-server=192.168.20.1
add address=192.168.30.0/24 dns-server=192.168.30.1 domain=TWONKY gateway=\
192.168.30.1 ntp-server=192.168.30.1
add address=192.168.40.0/24 dns-server=192.168.40.1 domain=WTC gateway=\
192.168.40.1 ntp-server=192.168.40.1
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system identity
set name=vol-87-gw1
Код: Выделить всё
# jan/02/1970 02:22:24 by RouterOS 6.45.6
# software id = LNE1-3RJP
#
# model = CRS125-24G-1S-2HnD
# serial number = 523A05F469A8
/interface bridge
add name=bridge protocol-mode=none
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
country=russia2 disabled=no distance=indoors frequency=auto \
frequency-mode=regulatory-domain installation=indoor mode=ap-bridge name=\
wlan-sweethome ssid=!SWEETHOME vlan-id=10 vlan-mode=use-tag wps-mode=\
disabled
add arp=reply-only disabled=no keepalive-frames=disabled mac-address=\
E6:8D:8C:80:E6:A1 master-interface=wlan-sweethome multicast-buffering=\
disabled name=wlan-twonky ssid=!TWONKY vlan-id=30 vlan-mode=use-tag \
wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add arp=reply-only disabled=no keepalive-frames=disabled mac-address=\
E6:8D:8C:80:E6:A0 master-interface=wlan-sweethome multicast-buffering=\
disabled name=wlan-welcome ssid=!WELCOME vlan-id=100 vlan-mode=use-tag \
wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/interface ethernet
set [ find default-name=sfp1 ] disabled=yes
/interface vlan
add interface=bridge name="VLAN110 - CONTROL" vlan-id=110
/interface ethernet switch
set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports="ether1,ether2,eth\
er3,ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ethe\
r13,ether14,ether15,ether16,ether17,ether18,ether19,ether20,ether21,ether2\
2,ether23,ether24,sfp1"
/interface ethernet switch trunk
add member-ports=ether21,ether22,ether23,ether24 name=trunk-to-vol-87-gw1
add member-ports=ether1,ether2 name=trunk-to-hpe
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge interface=ether1
add bridge=bridge interface=ether2
add bridge=bridge interface=ether3
add bridge=bridge interface=ether4
add bridge=bridge interface=ether5
add bridge=bridge interface=ether6
add bridge=bridge interface=ether7
add bridge=bridge interface=ether8
add bridge=bridge interface=ether9
add bridge=bridge interface=ether10
add bridge=bridge interface=ether11
add bridge=bridge interface=ether12
add bridge=bridge interface=ether13
add bridge=bridge interface=ether14
add bridge=bridge interface=ether15
add bridge=bridge interface=ether16
add bridge=bridge interface=ether17
add bridge=bridge interface=ether18
add bridge=bridge interface=ether19
add bridge=bridge interface=ether20
add bridge=bridge interface=ether21
add bridge=bridge interface=ether22
add bridge=bridge interface=ether23
add bridge=bridge interface=ether24
add bridge=bridge interface=sfp1
add bridge=bridge interface=wlan-sweethome pvid=10
add bridge=bridge interface=wlan-welcome pvid=100
add bridge=bridge interface=wlan-twonky pvid=30
/interface ethernet switch egress-vlan-tag
add tagged-ports=trunk-to-vol-87-gw1,trunk-to-hpe vlan-id=10
add tagged-ports=trunk-to-vol-87-gw1,trunk-to-hpe vlan-id=20
add tagged-ports=trunk-to-vol-87-gw1,trunk-to-hpe vlan-id=30
add tagged-ports=trunk-to-vol-87-gw1,trunk-to-hpe vlan-id=40
add tagged-ports=trunk-to-vol-87-gw1 vlan-id=100
add disabled=yes tagged-ports=trunk-to-hpe,switch1-cpu vlan-id=110
/interface ethernet switch ingress-vlan-translation
add new-customer-vid=30 ports=\
ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16
add new-customer-vid=10 ports=\
trunk-to-hpe,ether3,ether4,ether5,ether6,ether7,ether8
add new-customer-vid=110 ports=ether17,ether18
add customer-vid=0 new-customer-vid=10 new-service-vid=0 ports=trunk-to-hpe
/interface ethernet switch vlan
add ports="trunk-to-vol-87-gw1,trunk-to-hpe,ether3,ether4,ether5,ether6,ether7\
,ether8" vlan-id=10
add ports=trunk-to-vol-87-gw1,trunk-to-hpe vlan-id=20
add ports="trunk-to-vol-87-gw1,trunk-to-hpe,ether9,ether10,ether11,ether12,eth\
er13,ether14,ether15,ether16" vlan-id=30
add ports=trunk-to-vol-87-gw1,trunk-to-hpe vlan-id=40
add ports=trunk-to-vol-87-gw1 vlan-id=100
add ports=trunk-to-vol-87-gw1,ether17,ether18,switch1-cpu vlan-id=110
/ip address
add address=172.16.110.2/24 interface="VLAN110 - CONTROL" network=\
172.16.110.0
/ip dns
set servers=172.16.110.1
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
/ip route
add distance=1 gateway=172.16.110.1
/lcd interface pages
set 0 interfaces=wlan-sweethome
/system identity
set name=vol-87-sw1
