{"id":10972,"date":"2022-10-12T13:21:23","date_gmt":"2022-10-12T20:21:23","guid":{"rendered":"https:\/\/www.xh86.me\/?p=10972"},"modified":"2022-10-12T13:21:23","modified_gmt":"2022-10-12T20:21:23","slug":"routeros%e6%97%a0%e7%ba%bf%e7%bd%91%e7%bb%9c%e5%88%9b%e5%bb%ba%e5%a4%9a%e4%b8%aassid%e7%9a%84vlan%e9%85%8d%e7%bd%ae","status":"publish","type":"post","link":"https:\/\/www.xh86.me\/?p=10972","title":{"rendered":"RouterOS\u65e0\u7ebf\u7f51\u7edc\u521b\u5efa\u591a\u4e2aSSID\u7684VLAN\u914d\u7f6e"},"content":{"rendered":"

\u65e0\u7ebf\u591aVLAN\u63a5\u5165\uff0c\u5373\u6839\u636e\u4e0d\u540c\u7684\u65e0\u7ebfSSID\u5c06\u5ba2\u6237\u7aef\u63a5\u5165\u5230\u4e0d\u540c\u7684VLAN\u4e2d\uff0c\u4f7f\u4e0d\u540c\u5ba2\u6237\u7aef\u83b7\u53d6\u4e0d\u540c\u7684IP\u5730\u5740\uff0c\u6839\u636eIP\u5730\u5740\u521b\u5efa\u4e0d\u540c\u7684\u9632\u706b\u5899\u89c4\u5219\u76f8\u4e92\u9694\u79bb\u3002\u5047\u8bbe\u4ee5\u666e\u901a\u5bb6\u5ead\u6216\u5c0f\u578b\u529e\u516c\u533a\u5355\u7ebf\u4e0a\u7f51\u7684hAP ac2\u4e3a\u4f8b\uff0c\u9700\u8981\u914d\u7f6e\u4e24\u4e2a\u4e0d\u540c\u65e0\u7ebfSSID\uff0c\u4e3a\u4e0d\u540c\u7c7b\u578b\u7684\u7ec8\u7aef\u63a5\u5165\u4e0a\u7f51\u4f7f\u7528\uff0c\u4e00\u4e2a\u7528\u4e8e\u5185\u90e8\u4eba\u5458\uff0c\u4e00\u4e2a\u7528\u4e8e\u8bbf\u5ba2\u3002<\/p>\n

\u8fd9\u91cc\u914d\u7f6e\u4ec5\u8003\u86515GHz\u9891\u7387\u7684\u591aVLAN\u63a5\u5165\uff08wlan2\u65e0\u7ebf\u7f51\u5361\uff09\uff0cether1\u5355\u7ebf\u62e8\u53f7\u63a5\u5165\u4e0a\u7f51\uff0cehter2\u3001ether3\u3001ether4\u548cether5\u6709\u7ebf\u4ee5\u592a\u7f51\u7f51\u53e3\u63a5\u5165\u5230bridge\u4ea4\u6362\u5206\u7ec4\uff0c\u518d\u5c06wlan2\u548cwlan3\uff08VAP\uff09\u52a0\u5165\u5230bridge\uff0c\u5e76\u5f00\u542fvlan-filtering(\u5f00\u542f\u540e\uff0chAP ac2\u4e0b\u4ee5\u592a\u7f51\u53e3\u7684HW-Offloading\u5c06\u5931\u6548)<\/p>\n

\"\"<\/div><\/p>\n

 <\/p>\n

\u914d\u7f6eether1\u62e8\u53f7\u4e0a\u7f51<\/p>\n

\/<\/span>interface<\/span> pppoe<\/span>-<\/span>client\r\n<\/span>add<\/span> add<\/span>-<\/span>default<\/span>-<\/span>route<\/span>=<\/span>yes disabled<\/span>=<\/span>no<\/span> interface<\/span>=<\/span>ether1 name<\/span>=<\/span>pppoe<\/span>-<\/span>out1 \u00a0\u00a0\u00a0<\/span>use<\/span>-<\/span>peer<\/span>-<\/span>dns<\/span>=<\/span>yes user<\/span>=<\/span>yus password<\/span>=<\/span>yes<\/span><\/pre>\n
\u521b\u5efa\u5185\u5916\u7f51\u8f6c\u6362\u7684nat\u89c4\u5219<\/p>\n
\/<\/span>ip firewall nat\r\n<\/span>add<\/span> action<\/span>=<\/span>masquerade chain<\/span>=<\/span>srcnat <\/span>out<\/span>-<\/span>interface<\/span>=<\/span>pppoe<\/span>-<\/span>out<\/span><\/pre>\n
\u521b\u5efa\u65e0\u7ebf\u52a0\u5bc6\u65b9\u5f0f\u4e3awpa2\uff0c\u8bbe\u7f6e\u4e0d\u540c\u7684\u5bc6\u7801\uff0c\u5e76\u5206\u522b\u53d6\u540d\u4e3avlan111\u548cvlan222<\/p>\n
\/<\/span>interface<\/span> wireless security<\/span>-<\/span>profiles\r\n<\/span>add<\/span> authentication<\/span>-<\/span>types<\/span>=<\/span>wpa2<\/span>-<\/span>psk mode<\/span>=<\/span>dynamic<\/span>-<\/span>keys name<\/span>=<\/span>vlan111 \\\r\nwpa2<\/span>-<\/span>pre<\/span>-<\/span>shared<\/span>-<\/span>key<\/span>=<\/span>yusvlan111\r\n<\/span>add<\/span> authentication<\/span>-<\/span>types<\/span>=<\/span>wpa2<\/span>-<\/span>psk mode<\/span>=<\/span>dynamic<\/span>-<\/span>keys name<\/span>=<\/span>vlan222 \\\r\nwpa2<\/span>-<\/span>pre<\/span>-<\/span>shared<\/span>-<\/span>key<\/span>=<\/span>yus vlan222<\/span><\/pre>\n
\u4fee\u6539wlan2\u65e0\u7ebf\u7f51\u5361\u6a21\u5f0f\u4e3aap-bridge\uff0c\u5e76\u8bbe\u7f6e\u9009\u62e9vlan111\u7684\u5b89\u5168\u7b56\u7565\u548cvlan\u6807\u7b7e\u53c2\u6570<\/p>\n
\/<\/span>interface<\/span> wireless\r\n<\/span>set<\/span> [<\/span> find <\/span>default<\/span>-<\/span>name<\/span>=<\/span>wlan2 <\/span>]<\/span> disabled<\/span>=<\/span>no<\/span> mode<\/span>=<\/span>ap<\/span>-<\/span>bridge security<\/span>-<\/span>profile<\/span>=<\/span>vlan111 ssid<\/span>=<\/span>vlan111 vlan<\/span>-<\/span>id<\/span>=<\/span>111<\/span> vlan<\/span>-<\/span>mode<\/span>=<\/span>use<\/span>-<\/span>tag<\/span><\/pre>\n
\u57fa\u4e8ewlan2\u6dfb\u52a0\u865a\u62dfAP\u53d6\u540dwlan3\uff0c\u8bbe\u7f6e\u6a21\u5f0f\u4e3aap-bridge\uff0c\u9009\u62e9\u52a0\u5bc6\u7b56\u7565\u4e3avlan222<\/p>\n
\/<\/span>interface<\/span> wireless\r\n<\/span>add<\/span> disabled<\/span>=<\/span>no<\/span> master<\/span>-<\/span>interface<\/span>=<\/span>wlan2 name<\/span>=<\/span>wlan3 security<\/span>-<\/span>profile<\/span>=<\/span>vlan222 ssid<\/span>=<\/span>vlan222 vlan<\/span>-<\/span>id<\/span>=<\/span>222<\/span> vlan<\/span>-<\/span>mode<\/span>=<\/span>use<\/span>-<\/span>tag<\/span><\/pre>\n
\u521b\u5efabridge1\u53e3\uff0c\u5e76\u542f\u7528vlan-filtering\uff0c\u7531\u4e8eether2-ether5\u662f\u4ee5\u592a\u7f51\u53e3\u548cbridge1\uff0c\u9ed8\u8ba4\u6240\u6709\u7aef\u53e3\u7684PVID\u662f1\uff0c\u56e0\u6b64\u542f\u7528vlan-filtering\u4e0d\u5f71\u54cd\u7ba1\u7406<\/p>\n
\/<\/span>interface<\/span> bridge\r\n<\/span>add<\/span> name<\/span>=<\/span>bridge1 vlan<\/span>-<\/span>filtering<\/span>=<\/span>yes\r\n\r\n<\/span>\u5c06<\/span>ether2<\/span>\uff0c<\/span>ether3<\/span>\u3001<\/span>ether4<\/span>\u548c<\/span>ether5<\/span>\uff0c\u8fd8\u6709<\/span>wlan2<\/span>\u548c<\/span>wlan3<\/span>\u52a0\u5165<\/span>bridge1<\/span><\/pre>\n
\/<\/span>interface<\/span> bridge port\r\n<\/span>add<\/span> bridge<\/span>=<\/span>bridge1 <\/span>interface<\/span>=<\/span>ether2\r\n<\/span>add<\/span> bridge<\/span>=<\/span>bridge1 <\/span>interface<\/span>=<\/span>ether3\r\n<\/span>add<\/span> bridge<\/span>=<\/span>bridge1 <\/span>interface<\/span>=<\/span>ether4\r\n<\/span>add<\/span> bridge<\/span>=<\/span>bridge1 <\/span>interface<\/span>=<\/span>ether5\r\n<\/span>add<\/span> bridge<\/span>=<\/span>bridge1 <\/span>interface<\/span>=<\/span>wlan2\r\n<\/span>add<\/span> bridge<\/span>=<\/span>bridge1 <\/span>interface<\/span>=<\/span>wlan3<\/span><\/pre>\n
\u914d\u7f6ewlan2\u548cwlan3\u7684trunk vlan<\/p>\n
\/<\/span>interface<\/span> bridge vlan\r\n<\/span>add<\/span> bridge<\/span>=<\/span>bridge1 tagged<\/span>=<\/span>bridge1<\/span>,<\/span>wlan2 vlan<\/span>-<\/span>ids<\/span>=<\/span>111<\/span>\r\nadd<\/span> bridge<\/span>=<\/span>bridge1 tagged<\/span>=<\/span>bridge1<\/span>,<\/span>wlan3 vlan<\/span>-<\/span>ids<\/span>=<\/span>222<\/span><\/pre>\n
\u521b\u5efa\u4e09\u5c42vlan\u63a5\u53e3<\/p>\n
\/<\/span>interface<\/span> vlan\r\n<\/span>add<\/span> interface<\/span>=<\/span> bridge1 name<\/span>=<\/span>vlan111 vlan<\/span>-<\/span>id<\/span>=<\/span>111<\/span>\r\nadd<\/span> interface<\/span>=<\/span> bridge1 name<\/span>=<\/span>vlan222 vlan<\/span>-<\/span>id<\/span>=<\/span>222<\/span><\/pre>\n
\u914d\u7f6evlan111\u548cvlan222\u7684IP\u5730\u5740\uff0c\u4e3abridge1\u63a5\u53e3\u914d\u7f6e192.168.88.1\/24\u5730\u5740\u6bb5\uff08pvid 1\uff09<\/p>\n
\/<\/span>ip address\r\n<\/span>add<\/span> address<\/span>=<\/span>192.168<\/span>.<\/span>1.1<\/span>\/<\/span>24<\/span> interface<\/span>=<\/span>vlan111\r\n<\/span>add<\/span> address<\/span>=<\/span>192.168<\/span>.<\/span>2.1<\/span>\/<\/span>24<\/span> interface<\/span>=<\/span>vlan222\r\n<\/span>add<\/span> address<\/span>=<\/span>192.168<\/span>.<\/span>88.1<\/span>\/<\/span>24<\/span> interface<\/span>=<\/span>bridge1<\/span><\/pre>\n
\u4e3avlan111\u3001vlan222\u548cbridge1\u521b\u5efaDHCP\u670d\u52a1\u9700\u8981\u7684IP\u5730\u5740\u6c60<\/p>\n
\/<\/span>ip pool\r\n<\/span>add<\/span> name<\/span>=<\/span>vlan111 range<\/span>=<\/span>192.168<\/span>.<\/span>1.2<\/span>-<\/span>192.168<\/span>.<\/span>1.254<\/span>\r\nadd<\/span> name<\/span>=<\/span>vlan222 range<\/span>=<\/span>192.168<\/span>.<\/span>2.2<\/span>-<\/span>192.168<\/span>.<\/span>2.254<\/span>\r\nadd<\/span> name<\/span>=<\/span>pool1 range<\/span>=<\/span>192.168<\/span>.<\/span>88.2<\/span>-<\/span>192.168<\/span>.<\/span>88.254<\/span><\/pre>\n
\u521b\u5efaDHCP\u670d\u52a1\u63a5\u53e3\uff0c\u9009\u62e9\u5bf9\u5e94\u7684\u5730\u5740\u6c60<\/p>\n
\/<\/span>ip dhcp<\/span>-<\/span>server\r\n<\/span>add<\/span> address<\/span>-<\/span>pool<\/span>=<\/span>vlan111 <\/span>interface<\/span>=<\/span>vlan111 name<\/span>=<\/span>server1\r\n<\/span>add<\/span> address<\/span>-<\/span>pool<\/span>=<\/span>vlan222 <\/span>interface<\/span>=<\/span>vlan222 name<\/span>=<\/span>server2\r\n<\/span>add<\/span> address<\/span>-<\/span>pool<\/span>=<\/span>pool1 <\/span>interface<\/span>=<\/span>bridge1 name<\/span>=<\/span>server3<\/span><\/pre>\n
\u521b\u5efaDHCP\u7f51\u7edc\u5206\u914d\u7684\u7f51\u5173\u548cDNS<\/p>\n
\/<\/span>ip dhcp<\/span>-<\/span>server network\r\n<\/span>add<\/span> address<\/span>=<\/span>192.168<\/span>.<\/span>1.0<\/span>\/<\/span>24<\/span> gateway<\/span>=<\/span>192.168<\/span>.<\/span>1.1<\/span> dns<\/span>-<\/span>server<\/span>=<\/span>223.5<\/span>.<\/span>5.5<\/span>\r\nadd<\/span> address<\/span>=<\/span>192.168<\/span>.<\/span>2.0<\/span>\/<\/span>24gateway<\/span>=<\/span>192.168<\/span>.<\/span>2.1<\/span> dns<\/span>-<\/span>server<\/span>=<\/span>223.5<\/span>.<\/span>5.5<\/span>\r\nadd<\/span> address<\/span>=<\/span>192.168<\/span>.<\/span>88.0<\/span>\/<\/span>24gateway<\/span>=<\/span>192.168<\/span>.<\/span>88.1<\/span> dns<\/span>-<\/span>server<\/span>=<\/span>223.5<\/span>.<\/span>5.5<\/span><\/pre>\n
\u6211\u4eec\u4e0d\u5141\u8bb8vlan222\u7684\u65e0\u7ebf\u7528\u6237\u8bbf\u95ee\u6709\u7ebf\u7f51\u7edc\u7684IP\u5730\u5740\uff0c\u5373\u7981\u6b62192.168.2.0\/24\u7684IP\u6bb5\u8bbf\u95ee192.168.88.0\/24\uff0c\u5728\/ip firewall filter\u4e0b\u914d\u7f6e\u8fc7\u6ee4\u89c4\u5219<\/p>\n
\/<\/span>ip firewall filter\r\n<\/span>add<\/span> action<\/span>=<\/span>drop chain<\/span>=<\/span>forward src<\/span>-<\/span>address<\/span>=<\/span>192.168<\/span>.<\/span>2.0<\/span>\/<\/span>24<\/span> dst<\/span>-<\/span>address<\/span>=<\/span>192.168<\/span>.<\/span>88.0<\/span>\/<\/span>24<\/span><\/pre>\n
<\/div>\n
\n
\n
 <\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
\u65e0\u7ebf\u591aVLAN\u63a5\u5165\uff0c\u5373\u6839\u636e\u4e0d\u540c\u7684\u65e0\u7ebfSSID\u5c06\u5ba2\u6237\u7aef\u63a5\u5165\u5230\u4e0d\u540c\u7684VLAN\u4e2d\uff0c\u4f7f\u4e0d\u540c\u5ba2\u6237\u7aef\u83b7\u53d6\u4e0d\u540c\u7684IP\u5730\u5740\uff0c\u6839 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,2],"tags":[],"class_list":["post-10972","post","type-post","status-publish","format-standard","hentry","category-mikrotik","category-network"],"_links":{"self":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/10972","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=10972"}],"version-history":[{"count":1,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/10972\/revisions"}],"predecessor-version":[{"id":10973,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/10972\/revisions\/10973"}],"wp:attachment":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=10972"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=10972"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=10972"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}