Multiple SSIDs with VLAN Tagging

[rigbyorange]

Hello,
After much research on Madwifi how to pages, I have been able to create multiple ssids in Access Point mode. I was wondering if anyone knows how to then place a vlan tag on traffic coming from a certain ssid? For example, if I have an ssid named "test" I want to put all wireless traffic coming to that ssid into vlan 100 on the ethernet cable. Has anyone tried this or have any ideas?
Thanks

[Oliver]

Hey rigbyorange,

I would start by using brctl to create one bridge for each SSID, then bridge "eth0.<vlan>" to the virtual wireless device with the proper SSID. The traffic at the ethernet-interface should then be tagged, but I haven't tried the setup myself yet.


Grtz,

Oliver

[omarvis]

could be useful to get this via webGUI i think

[bmoffitt]

To save us from having to endure the madwifi how-to, can you share here how one creates & configures multiple ssids?

[rodneal]

Please tell - how???

[rigbyorange]

Hello,
Sorry, I didn't see your posts earlier... To create additional ssids from the cli here is the process:

wlanconfig ath1 create wlandev wifi0 wlanmode ap
iwconfig ath1 essid "ssid here"

ath1 can be incremented to ath2, ath3, etc depending on the number of ssids you want to create. The issue I am having now, is assigning this ssid to a vlan. Here is the process I have tried, but doesn't seem to work:

vconfig add eth0 100
brctl addbr br1
brctl addif br1 eth0.100
brctl addif br1 ath1
ifconfig eth0.100 0.0.0.0 up
ifconfig ath1 0.0.0.0 up
ifconfig br1 10.188.4.50 netmask 255.255.252.0 up

Any ideas???
Thanks

[dan]

I'm a little lost here...
Some people are saying that VLAN tagging isn't supported, others are saying that it is supported and have managed to post valid VLAN configurations.
What I'm trying to do is simple...

Management VLAN 5 - 10.10.x.x/16 (reachable only on wifi side)
Internet VLAN 134 - 123.255.14.x/23 (customer facing VLAN)

What we tried was...

ath0.5 - 10.10.1.1/16

then we stuck the customer VLAN in...

eth0
ath0.134

bridged the two above and setup in br134 - 123.255.14.100/23

Should this work?

Regards
Dan

[kb9mwr]

Now if its possible to assign the separate SSIDs on different channels we are on to something.

[dan]

I can't imagine one wireless device could ever operate on multiple channels no..
However it should be able to be configured with multiple SSID's

Dan

[dan]

I can confirm we have this working in all configurations, please feel free to contact me to get some scripts to have a play with

Regards
Dan

[UBNT-Mike.Ford]

Hey Dan,

Post some working scripts and a good instruction set to my email so I can post it on the Wiki. Ill send ou some free gear if it works.

Thanks,

Mike

[dan]

ok doki will do...

[rigbyorange]

Dan,
I would like to take a look at what you have if possible...
Thanks

[drwho17]

Hey Dan,

Post some working scripts and a good instruction set to my email so I can post it on the Wiki. Ill send ou some free gear if it works.

Thanks,

Mike
How about getting this into the GUI, it should be pretty simple to make a CGI for it, it's easy to do from the CLI.

[dan]

we thought about doing that, I'll post some config scripts soon

[drwho17]

I've written a bash daemon that's launched via inittab, which will automatically bring up and tear down additional ssid's at a settable interval. The purpose being, we use 3 120 sector's in each location with unique SSID's, if one of the sector radios should fail, I want customers to fail over to the nearest sector, however I wan't to force them to move back to the correct sector upon restoration of service to that sector.

Example:
AP1 has a ath0 of AP1
AP2 has a ath0 of AP2
AP3 has a ath0 of AP3

On AP1 my script brings up AP2 on ath1 and AP3 on ath2 on boot, it removes them after an hour and re-adds them each hour (force client to reassociate).
On AP2 my script brings up AP1 on ath1 and AP3 on ath2 on boot, it removes them after an hour and re-adds them each hour (force client to reassociate).
On AP3 my script brings up AP1 on ath1 and AP2 on ath2 on boot, it removes them after an hour and re-adds them each hour (force client to reassociate).

Just need to test on the Ubiquities to verify everything works as it works on my local machine.

[rtr989]

Hello,
Sorry, I didn't see your posts earlier... To create additional ssids from the cli here is the process:

wlanconfig ath1 create wlandev wifi0 wlanmode ap
iwconfig ath1 essid "ssid here"

ath1 can be incremented to ath2, ath3, etc depending on the number of ssids you want to create. The issue I am having now, is assigning this ssid to a vlan. Here is the process I have tried, but doesn't seem to work:

vconfig add eth0 100
brctl addbr br1
brctl addif br1 eth0.100
brctl addif br1 ath1
ifconfig eth0.100 0.0.0.0 up
ifconfig ath1 0.0.0.0 up
ifconfig br1 10.188.4.50 netmask 255.255.252.0 up

Any ideas???
Thanks

i did it, but br1 is not pinging then i connect to ath1

[Vitis]

Hello,
Sorry, I didn't see your posts earlier... To create additional ssids from the cli here is the process:

wlanconfig ath1 create wlandev wifi0 wlanmode ap
iwconfig ath1 essid "ssid here"

ath1 can be incremented to ath2, ath3, etc depending on the number of ssids you want to create. The issue I am having now, is assigning this ssid to a vlan. Here is the process I have tried, but doesn't seem to work:

vconfig add eth0 100
brctl addbr br1
brctl addif br1 eth0.100
brctl addif br1 ath1
ifconfig eth0.100 0.0.0.0 up
ifconfig ath1 0.0.0.0 up
ifconfig br1 10.188.4.50 netmask 255.255.252.0 up

Any ideas???
Thanks

Its old topic, but...
I think that you can`t make a vlan on interface whitch is already in bridge.
You have eth0 in br0 and than you try to make vlan on eth0.
You must remove eth0 from the bridge, than make 2 vlan`s and take this 2 vlan`s into 2 bridges. That should be working.

[Vitis]

I was right. It works. :)
There is my rc.poststart script..


XS2.ar2316.v3.4.4390.090521.1757# cat /etc/persistent/rc.poststart
#!/bin/sh
channel=`iwlist ath0 channel | grep Current | cut -d " " -f15 | cut -d ")" -f1`;
wlanconfig ath1 create wlandev wifi0 wlanmode ap
iwconfig ath1 essid mh2net-hotspot channel $channel
iwconfig ath1 key off open
iwpriv ath1 authmode 1
iwpriv ath1 ap_bridge 1
brctl addbr br1
brctl addif br1 ath1
ifconfig ath1 up
brctl delif br0 eth0
vconfig add eth0 55
ifconfig eth0.55 up
vconfig add eth0 56
ifconfig eth0.56 up
brctl addif br0 eth0.55
brctl addif br1 eth0.56
ifconfig br1 192.168.1.20 netmask 255.255.255.0



Of course you can change the VID, IP or you can add more Virtuap AP`s, bridges or VLAN`s.. :)

I really don´t know how to changed the channel of ath0...:( From web GUI itd doesn`t working.. :(

I think that this is enought for most of us. And this is not so dificult to write into the next version of AirOS web GUI. :D

[thecompwiz]

If you're only doing VLAN pass through, you don't need to go to all the trouble of removing the bridge & creating vlans on each interface... then re-adding them to a new bridge... you can add the vlan tagging directly to the bridge interface!

vconfig add br0 5
vconfig add br0 10
ifconfig br0.5 x.x.x.x netmask x.x.x.x up
ifconfig br0.10 x.x.x.x netmask x.x.x.x up


This is much simpler, but will also keep the default vlan intact.

[Vitis]

If you're only doing VLAN pass through, you don't need anything of these troubles..

You just use Access Point WDS and Station WDS.. Then is your device transparent.
Making VLAN on bridge is useless.. It`s good just for monitoring, but you can monitore the device on the native VLAN (untag)..

And your script is missing multiple SSID`s solution on multiple vlan`s.

[thecompwiz]

That's what I though too... but no vlan traffic was traversing my wifi link until I added the VLAN bridged interfaces...

I may need to dig further into this. (I saw someone else post (http://ubnt.com/forum/viewtopic.php?t=13453) about the same problem with encryption + vlans... Not sure what the problem is... Anyone want to add some insight?

[Vitis]

I dont think so..
I just try it.
I have 2 PS5 with AirOS 3.4.
1st side is on AP WDS with set WDS peer and encryption WPA2-TKIP, access list and so on..
On advance list I enabled all multicast data (because of ospf)

On 2nd side is just one diference - mode is Station WDS.

This is working fine without VLANs and also working fine with vlan pass through.

What do you exactly need from vVLAN on bridge?

[WadeM]

Hi All,

I'm about to give this a crack on some Nano Station 2 AirOS V3.5 devices. Does anyone out here have a vetted/working config for this they'd like to share? There's quite a few different versions of things going on in here.

I'll post what I manage to work out on my own, if I nail it, but if anyone's around and done the ground work and can nicely post it, it'd be appreciated.

Thanks,
--Wade

[walkinwifi]

Hey Dan,

Post some working scripts and a good instruction set to my email so I can post it on the Wiki. Ill send ou some free gear if it works.

Thanks,

Mike
Hi Mike

Has this been done yet? I would like to create a second SSID with WPA but can't find any definitive ways to accomplish this.

Thanks

Rob

[walkinwifi]

I can confirm we have this working in all configurations, please feel free to contact me to get some scripts to have a play with

Regards
Dan

Hi Dan

I would appreciate it if I could get my hands on those scripts. Let me know if that's possible.

Thanks

[ringersoll1869]

I'd like to get my hands on them too if you don't mind please.

Thanks

[luhiwu]

Anyone has multiple ssid and vlan tagging working on latest beta?

*sorry*, i was talking about 5.3 beta

Regards,
Marcelo

[900mhzdude]

Anyone has multiple ssid and vlan tagging working on latest beta?

*sorry*, i was talking about 5.3 beta

Regards,
Marcelo

I 2nd this Q anyone get Multi SSIDs working on 5.3?

[UBNT-Mike.Ford]

I 2nd this Q anyone get Multi SSIDs working on 5.3?

Hello,

I do not know of any working scripts for Multi SSID and V5.3-Beta2 at this time.

Thanks,

[luhiwu]

900mhzdude,

I manage to make multi ssids work on 5.3
// Just disable airmax and try.

http://www.ubnt.com/forum/showthread.php?p=123363&posted=1#post123363

Please let me know if you have the same results.

Regards,
Marcelo

[900mhzdude]

900mhzdude,

I manage to make multi ssids work on 5.3
// Just disable airmax and try.

http://www.ubnt.com/forum/showthread.php?p=123363&posted=1#post123363

Please let me know if you have the same results.

Regards,
Marcelo

this link is to the beta thread

Do you have a how to

or just follow the old how to?

Thanks

[900mhzdude]

also dose your VLAN script make VLAN ingress on the WLAN?

for some resin it is reversed on the 5.3beta2

and there is no use for VLAN to work like that

what I want is simple

any untagged device coming in on WLAN gets tagged VLAN150

and then have the LAN untagged on the AP for management

you guys think we can fix the firmware to do that?

Thanks

[carullos]

Anyone make this happen yet? Point me in the right direction....

Thanks

[900mhzdude]

Anyone make this happen yet? Point me in the right direction....

Thanks

high hopes for it to be in 6.0 firmware

take a look at this link

http://www.ubnt.com/forum/showthread.php?t=28940

[bornpilot]

I take it this has not been able to be accomplished. I am looking to do this with with the 802.11/b/g/n device on firmware v3.6.1. What I am looking to do is have one ssid for staff and another ssid for open wifi-hotspot. Does anyone know if this can be done in 3.6.1

[okulski]

Hi all
i need multissid with vlan in bullet2 and nanostation2! please how to make this?
i need to change access points from dlink dwl-3200 to bullets and nanostations!!!! :ubnt_banana:

please add GUI multissid with vlan in 3.6.1

exemple

1 ssid - cheremkhovo (vlan id 111, without security and with client isolation)
2 ssid - rr_region001 (vlan id 001 , with WPA2 security and without client isolation)
3 ssid - sales (vlan id 34 , with WPA2 security and without client isolation)
4 ........
access point management vlan id 100

[yulius]

Hi!

I'm new member of this forum and I have a problem with my Openwrt firmware.
I'm trying to implement multiple SSID with the use of VLANs on the Ubiquiti Nanostation2.
My problem is VLAN: it DOESN'T WORK with the last releases of trunk (OpenWrt Firmware Attitude Adjustment (r29330)/LuCI Trunk (trunk+svn8037)) but VLAN WORK with an old version of Openwrt Backfire (10.03, r20728)

I compared the etc/config/network and etc/config/wireless files between the two version and they seem to be identical.
I'm sure that the problem is on my new firmware because we tried more times but only the old firware VLAN work.

Can sameone help me??
thanks

I add entirely the configuration files:


NETWORK (OLD FW)

config 'interface' 'loopback'
option 'ifname' 'lo'
option 'proto' 'static'
option 'ipaddr' '127.0.0.1'
option 'netmask' '255.0.0.0'

config 'interface' 'data'
option 'ifname' 'eth0.3301'
option 'type' 'bridge'
option 'proto' 'static'
option 'ipaddr' '192.168.4.100'
option 'netmask' '255.255.255.0'
option 'gateway' '192.168.4.1'
option 'dns' '217.18.208.130'

config 'interface' 'mngt'
option 'ifname' 'eth0.3300'
option 'type' 'bridge'
option 'proto' 'static'
option 'ipaddr' '78.24.82.100'
option 'netmask' '255.255.255.0'
option 'gateway' '78.24.82.254'

config 'interface' 'wan'
option 'ifname' ' '
option 'proto' 'none'



WIRELESS (OLD FW)

config wifi-device wifi0
option type atheros
option hwmode 11bg
option channel 1
option antenna auto
option disabled 0

config wifi-iface
option device wifi0
option network data
option mode ap
option ssid Guglielmo
option encryption none



NETWORK (NEW FW)

config 'interface' 'loopback'
option 'ifname' 'lo'
option 'proto' 'static'
option 'ipaddr' '127.0.0.1'
option 'netmask' '255.0.0.0'

config 'interface' 'lan'
option 'ifname' 'eth0'
option 'type' 'bridge'
option 'proto' 'static'
option 'ipaddr' '192.168.1.1'
option 'netmask' '255.255.255.0'

config 'interface' 'vlan'
option 'proto' 'static'
option 'ifname' 'eth0.100'
option 'ipaddr' '192.198.1.21'
option 'netmask' '255.255.255.0'
option 'gateway' '191.168.1.25'
option 'type' 'bridge'


WIRELESS (NEW FW)

config 'wifi-device' 'radio0'
option 'type' 'mac80211'
option 'channel' '11'
option 'macaddr' '00:15:6d:f0:2e:7b'
option 'hwmode' '11g'
option 'disabled' '1'
option 'txpower' '1'
option 'country' 'IT'

config 'wifi-iface'
option 'device' 'radio0'
option 'network' 'lan'
option 'mode' 'ap'
option 'ssid' 'OpenWrt'
option 'encryption' 'none'

config 'wifi-iface'
option 'device' 'radio0'
option 'mode' 'ap'
option 'encryption' 'none'
option 'ssid' 'vlan100'
option 'network' 'vlan'