MikroTik Tutorial: Adding a 2nd Wireless SSID Virtual Access Point

MikroTik Tutorial: Adding a 2nd Wireless SSID Virtual Access Point

How to configure a VirtualAP in RouterOS

This example assumes you are starting with the RouterOS default configuration. The screenshots below detail the steps required to add a second access point to a MikroTik router. This quick tutorial does not address the setup steps required to secure your wireless network WPA/WPA2 wireless authentication.

mikrotik-virtual-access-point-step01
Step 1: Click Wireless from the left menu, Click Add and choose “VirtualAP”
Step 2: Enter the SSID name your would like the 2nd wireless network to appear as.
Step 2: Enter the SSID name your would like the 2nd wireless network to appear as.
Step 3: Open the Bridge dialog and choose the "Ports" tab. Click Add
Step 3: Open the Bridge dialog and choose the “Ports” tab. Click Add
Step 4: Choose the newly created VAP interface and add it to the "bridge-local" bridge.
Step 4: Choose the newly created VAP interface and add it to the “bridge-local” bridge.
mikrotik-virtual-access-point-wireless-networks
Now you will see 2 SSIDs presented by the single wireless interface.
 

  • Joseph Daoud

    Does this method create 2 isolated wireless networks that prevent users on the separate networks from communicating, or does it simply create 2 SSIDs with different logins credentials for a single network?

  • This method does not isolate the 2nd wireless network.

    To accomplish the isolation you can use two approaches.

    1. Use a bridge filter, you can see an example of this setup by configuring a new mikrotik router with the quickset feature. It has an option for guest wireless network. Once applied take a look at the bridge filter that is created.

    2. Create a separate bridge, assign 2nd VAP interface to new bridge. Assign a new ip subnet to the new bridge and run DHCP server setup. add a Nat rule for new bridge, and then ip filter rules to limit traffic between the 2 subnets.

Comments are closed.