MikroTik Tutorial: Adding a 2nd Wireless SSID Virtual Access Point

MikroTik Tutorial: Adding a 2nd Wireless SSID Virtual Access Point

How to configure a VirtualAP in RouterOS

This example assumes you are starting with the RouterOS default configuration. The screenshots below detail the steps required to add a second access point to a MikroTik router. This quick tutorial does not address the setup steps required to secure your wireless network WPA/WPA2 wireless authentication.

  1.  Click Wireless from the left menu, Click Add and choose VirtualAP
    Create Virtual AP Interface
  2.  Enter the SSID name your would like the 2nd wireless network to appear as.
    Set the SSID of the VAP wireless interface
  3.  Click Bridge from the left menu and then click the “Ports” tab. Click Add
    Add VAP to the bridge
  4.  Choose the newly created VAP interface and add it to the “bridge-local” bridge.
  5.  Now you will see 2 SSIDs presented by the Mikrotik Router from a single wireless interface.
  1. mikrotik-virtual-access-point-step01
    Step 1: Click Wireless from the left menu, Click Add and choose “VirtualAP”
  2. Step 2: Enter the SSID name your would like the 2nd wireless network to appear as.
    Step 2: Enter the SSID name your would like the 2nd wireless network to appear as.
  3. Step 3: Open the Bridge dialog and choose the "Ports" tab. Click Add
    Step 3: Open the Bridge dialog and choose the “Ports” tab. Click Add
  4. Step 4: Choose the newly created VAP interface and add it to the "bridge-local" bridge.
    Step 4: Choose the newly created VAP interface and add it to the “bridge-local” bridge.
  5. mikrotik-virtual-access-point-wireless-networks
    Now you will see 2 SSIDs presented by the Mikrotik Router from a single wireless interface.

I hope you found this MikroTik Tutorial on VirtualAP useful. If it helped you out, please leave a comment below and checkout my other MikroTik Tutorials!


2 Replies to “MikroTik Tutorial: Adding a 2nd Wireless SSID Virtual Access Point”

  1. Does this method create 2 isolated wireless networks that prevent users on the separate networks from communicating, or does it simply create 2 SSIDs with different logins credentials for a single network?

  2. This method does not isolate the 2nd wireless network.

    To accomplish the isolation you can use two approaches.

    1. Use a bridge filter, you can see an example of this setup by configuring a new mikrotik router with the quickset feature. It has an option for guest wireless network. Once applied take a look at the bridge filter that is created.

    2. Create a separate bridge, assign 2nd VAP interface to new bridge. Assign a new ip subnet to the new bridge and run DHCP server setup. add a Nat rule for new bridge, and then ip filter rules to limit traffic between the 2 subnets.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.