Tak jsem pokrocil snad dal, ale nejsem si jisty spravnosti konfigurace - zarizeni se mezi sebou vidi, bohuzel jeste nemam do portu c. 5 poslanou (nakonfigurovanou - neni to v me rezii) vlanu 799, abych si mohl otestovat zda se pres radius overeni pripojim na ap pres wifi. Vidite tam prosim nekde nekdo chybu? Hlavne v tech vlanach a tim jak se propaguji z portu 5 na port 4?
/interface bridge
add comment="bridge pro CaPs AP 1 az 20" name=bridge_capsman
add comment="bridge pro TRUNK vlan 320 a 799" name=bridge_trunk
/interface ethernet
set name=ether1-gateway
set name=ether2-master-local
set name=ether3-slave-local
set comment="posilam vlan 320 na AP 1az20 a vlan 799" name=ether4-slave-local
set comment="WAN konektivita UTB - service vlan 320 a vlan 799" name=ether5-slave-local
/ip neighbor discovery
set ether1-gateway discover=no
set ether4-slave-local comment="posilam vlan 320 na AP 1az20 a vlan 799"
set ether5-slave-local comment="WAN konektivita UTB - service vlan 320 a vlan 799"
set bridge_capsman comment="bridge pro CaPs AP 1 az 20"
set bridge_trunk comment="bridge pro TRUNK vlan 320 a 799"
/interface vlan
add interface=bridge_trunk l2mtu=1516 name=vlan_320 vlan-id=320
add interface=bridge_trunk l2mtu=1516 name=vlan_799 vlan-id=799
/caps-man security
add authentication-types=wpa-eap,wpa2-eap eap-methods=passthrough name=security1
/caps-man configuration
add channel.frequency=2412 channel.tx-power=10 country="czech republic" mode=ap name=konfigurace1 security=security1 ssid=XXX
/caps-man interface
#
add arp=enabled comment=AP1 configuration=konfigurace1 disabled=no l2mtu=1600 \
mac-address=E4 master-interface=none mtu=1500 name=cap1 \
radio-mac=E4 security=security1
/ip neighbor discovery
#
set cap1 comment=AP1
/interface wireless security-profiles
set supplicant-identity=MikroTik
/ip ipsec proposal
set enc-algorithms=aes-128-cbc
/caps-man manager
set ca-certificate=auto certificate=auto enabled=yes
/interface bridge port
add bridge=bridge_capsman interface=cap1
add bridge=bridge_trunk interface=ether5-slave-local
add bridge=bridge_trunk interface=ether4-slave-local
/interface ethernet switch vlan
add ports=ether4-slave-local,ether5-slave-local switch=switch1 vlan-id=320
add ports=ether4-slave-local,ether5-slave-local switch=switch1 vlan-id=799
/ip address
add address=10.32.0.151/24 interface=vlan_320 network=10.32.0.0
