{"id":28250,"date":"2025-08-14T12:10:29","date_gmt":"2025-08-14T09:10:29","guid":{"rendered":"https:\/\/wifilab.org\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/"},"modified":"2025-08-16T13:56:43","modified_gmt":"2025-08-16T10:56:43","slug":"configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide","status":"publish","type":"post","link":"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/","title":{"rendered":"Configuring Vlan CapsMan Mikrotik RouterOS 7.0 and Above &#8211; Configuration Guide"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"28250\" class=\"elementor elementor-28250 elementor-28018\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7718e289 e-flex e-con-boxed e-con e-parent\" data-id=\"7718e289\" data-element_type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7553e96a elementor-widget elementor-widget-text-editor\" data-id=\"7553e96a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3><span style=\"color: #0000ff;\"><em><strong>If you have any problems during setup, our experts will be happy to provide you with <a style=\"color: #0000ff;\" href=\"https:\/\/wifilab.org\/en\/configuring-mikrotik\/\">Mikrotik Setup SERVICE!<\/a><\/strong><\/em><\/span><\/h3>\n<p>So, let&#8217;s get started! Configuring Mikrotik Vlan. <\/p>\n<p>This setting is relevant only for wifi-qcom \/ wifi-qcom-ac wireless drivers and RouterOS firmware version higher than 7.0!<\/p>\n<p><em>If your Mikrotik hardware uses the Wireless driver for wireless modules and it is not possible to replace it due to incompatibility, this article will not be suitable for implementing a Mikrotik Guest Network via Vlan! This incompatibility can be found on the official Mikrotik website!   <\/em><\/p>\n<p><strong>1) Initial conditions and preparations<\/strong> for setting up Guest Network via Vlan Mikrotik 7.0 and higher.<br \/><strong><em>Why: to<\/em><\/strong> make sure that the hardware\/software is suitable and will work correctly.<br \/><strong>WinBox\/WebFig<\/strong>: go to System \u2192 Packages, check:<br \/>routeros 7.13+ (or newer), wifi-qcom \/ wifi-qcom-ac,<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/Screenshot_2.png\" alt=\"\"><\/figure>\n<ul>\n<li>If you see the wireless package, you need to uninstall it, using the button above (Unistall), reboot the router, and then add the corresponding wifi-qcom \/ wifi-qcom-ac package to Files according to the RouterOS firmware installed at the time of configuration and reboot again, after the reboot should appear already updated WiFI modules working on the new driver.<\/li>\n<li><strong>Model:<\/strong> hAP ax\u00b2 \/ hAP ac\u00b2 etc. support wifi-qcom \/ wifi-qcom-ac packages respectively! <\/li>\n<\/ul>\n<p><strong><em>Plan, <\/em><\/strong><b><i>Configuring Mikrotik Vlan<\/i><\/b><strong style=\"font-size: 1.125rem; letter-spacing: 0px;\">:<\/strong><\/p>\n<p>In our scheme, 3 Vlan will be used:<\/p>\n<ul>\n<li>Vlan10 &#8211; Primary network.<\/li>\n<li>Vlan20 &#8211; Guest Network.<\/li>\n<li>Vlan30 &#8211; The management network, the management network is also called.<\/li>\n<\/ul>\n<p><strong>Network plan:<\/strong> determine which port goes to the aplink\/internet (e.g. ether1) and which ports go to the switch\/AP (e.g. ether2, ether3).<\/p>\n<p>2) <strong>Creating VLAN interfaces (on the bridge)<\/strong><\/p>\n<p><strong><em>Why<\/em>: To<\/strong> bring up logical interfaces for each VLAN.<\/p>\n<ul>\n<li><strong>WinBox:<\/strong> Interfaces \u2192 VLAN \u2192 +:<\/li>\n<\/ul>\n<p>Name: VLAN10_VIP, VLAN ID: 10, Interface: BridgeLocal \u2192 OK,<\/p>\n<figure><img decoding=\"async\" style=\"width: 348px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/New.jpg\" alt=\"\"><\/figure>\n<p>Name: VLAN20_GUEST, VLAN ID: 20, Interface: BridgeLocal \u2192 OK,<\/p>\n<figure><img decoding=\"async\" style=\"width: 361px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/New22.jpg\" alt=\"\"><\/figure>\n<p>And 30 Vlan is created in the same way as the 2 previous ones by analogy.<\/p>\n<p><em><strong>Create a VLAN on the BridgeLocal, not on the port &#8211; this is recommended in ROS7.<\/strong><\/em><\/p>\n<p>On the command line, it will look like this<strong>(CLI):<\/strong><\/p>\n<div>\n<div>\n<p><strong><em>\/interface vlan<\/em><\/strong><\/p>\n<p><strong><em>add name=VLAN10_VIP vlan-id=10 interface=BridgeLocal<\/em><\/strong><\/p>\n<p><strong><em>add name=VLAN20_GUEST vlan-id=20 interface=BridgeLocal<\/em><\/strong><\/p>\n<p><strong><em>add name=VLAN33_MGMT vlan-id=33 interface=BridgeLocal<\/em><\/strong><\/p>\n<\/div>\n<\/div>\n<p><strong><em>Result<\/em>:<\/strong> 3 VLANs appear in the interface list.<\/p>\n<p><strong>3) Assign IP addresses to VLAN<\/strong><br \/><strong><em>Why<\/em>:<\/strong> gateway\/management for each subnet.<br \/>WinBox: IP \u2192 Addresses \u2192 +:<br \/>172.16.10.1\/24 \u2192 Interface: VLAN10_VIP \u2192 OK,<\/p>\n<figure><img decoding=\"async\" style=\"width: 376px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/New33.jpg\" alt=\"\"><\/figure>\n<p>192.168.20.1\/24 \u2192 Interface: VLAN20_GUEST \u2192 OK,<\/p>\n<figure><img decoding=\"async\" style=\"width: 408px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/new44.jpg\" alt=\"\"><\/figure>\n<p>192.168.30.1\/24 \u2192 Interface: VLAN30_MGMT \u2192 OK. Similar to the previous two. <\/p>\n<div>\n<p><strong><em>CLI:<\/em><\/strong><br \/><em><strong>\/ip address<\/strong><\/em><\/p>\n<p><em><strong>add address=172.16.10.1\/24 interface=VLAN10_VIP<\/strong><\/em><\/p>\n<p><strong><em>add address=192.168.20.1\/24 interface=VLAN20_GUEST<\/em><\/strong><\/p>\n<p><strong><em>add address=10.30.30.30.1\/24 interface=VLAN30_MGMT<\/em><\/strong><\/p>\n<\/div>\n<p><strong><em>Result<\/em><\/strong>: three addresses in the IP \u2192 Addresses list.<\/p>\n<p><strong>4) Bridge VLANs table (Bridge VLANs).  <\/strong><b>Configuring Mikrotik Vlan<\/b><\/p>\n<p><strong><em>Why<\/em><\/strong>: to determine which VLANs pass through which ports (tagged\/untagged).<\/p>\n<ul>\n<li>WinBox: Bridge \u2192 VLANs \u2192 +:\n<ul>\n<li>VLAN 10:\n<ul>\n<li>VLAN IDs: 10,<\/li>\n<\/ul>\n<ul>\n<li>Tagged: BridgeLocal, ether2, ether3,<\/li>\n<\/ul>\n<ul>\n<li>Untagged: (leave blank) \u2192 OK.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<figure><img decoding=\"async\" style=\"width: 438px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/New-55.jpg\" alt=\"\"><\/figure>\n<p>For VLAN 20:  <\/p>\n<figure><img decoding=\"async\" style=\"width: 438px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/New-66.jpg\" alt=\"\"><\/figure>\n<p>For Vlan30, similar to the previous two.<\/p>\n<p><strong><em>This makes ether2\/ether3 trunk ports (tagged only). If you need an access port on a VLAN, add it to Untagged and set the corresponding PVID in Bridge \u2192 Ports. <\/em><\/strong><\/p>\n<p><strong>CLI:<\/strong><\/p>\n<div>\n<p><strong><em>\/interface bridge vlan<\/em><\/strong><\/p>\n<p><strong><em>add bridge=BridgeLocal vlan-ids=10 tagged=BridgeLocal,ether2,ether3<\/em><\/strong><\/p>\n<p><strong><em>add bridge=BridgeLocal vlan-ids=20 tagged=BridgeLocal,ether2,ether3<\/em><\/strong><\/p>\n<p><strong><em>add bridge=BridgeLocal vlan-ids=30 tagged=BridgeLocal,ether2,ether3<\/em><\/strong><\/p>\n<\/div>\n<ul>\n<li><strong><em>Result<\/em><\/strong>: three rules in Bridge VLANs.<\/li>\n<\/ul>\n<p><strong>5) Enabling VLAN Filtering (and ingress)<\/strong><\/p>\n<p><strong><em>Why<\/em><\/strong>: you need to enable hardware VLAN filtering in the bridge otherwise subnet traffic will not pass through.<\/p>\n<ul>\n<li><strong><em>WinBox<\/em><\/strong>: Bridge \u2192 Bridge (double click on BridgeLocal) \u2192 VLAN tab:\n<ul>\n<li>Enable (check the box) VLAN Filtering,<\/li>\n<\/ul>\n<ul>\n<li>Enable Ingress Filtering \u2192 OK.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<figure><img decoding=\"async\" style=\"width: 424px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/New-77.jpg\" alt=\"\"><\/figure>\n<p><strong>CLI:<\/strong><\/p>\n<p><strong><em>\/interface bridge set BridgeLocal vlan-filtering=yes ingress-filtering=yes<\/em><\/strong><\/p>\n<p><strong><em>Result<\/em><\/strong>: in the bridge list VLAN Filtering: yes.<\/p>\n<p><strong>6) Checking the<\/strong> Mikrotik <strong>bridge ports<\/strong> <\/p>\n<p><strong><em>Why<\/em><\/strong>: make sure that ports are added to the bridge and have the expected state.<\/p>\n<ul>\n<li><strong><em>WinBox<\/em><\/strong>: Bridge \u2192 Ports:\n<ul>\n<li>Make sure ether2, ether3 are in BridgeLocal.For trunk, leave PVID=1 (default).<\/li>\n<\/ul>\n<ul>\n<li>For the access port (if needed):\n<ul>\n<li>Set PVID = &lt;VLAN ID&gt; and add the port to Untagged in the corresponding Bridge \u2192 VLANs rule.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>CLI (view):<\/p>\n<p><strong><em>\/interface bridge port print<\/em><\/strong><\/p>\n<p><strong><em>Result<\/em><\/strong>: desired ports are in the bridge, PVIDs are configured.<\/p>\n<p><strong>7) Configuring DHCP servers for all VLANs<\/strong><\/p>\n<p><strong><em>Why<\/em><\/strong>: automatic issuance of the correct IPs to clients on all subnets.<\/p>\n<ul>\n<li>WinBox: IP \u2192 DHCP Server \u2192 DHCP Setup:\n<ul>\n<li>Select VLAN10_VIP \u2192 Next-OK (change DNS to 172.16.10.1).<\/li>\n<\/ul>\n<ul>\n<li>Same for VLAN20_GUEST (DNS 192.168.20.1).<\/li>\n<\/ul>\n<ul>\n<li>Same for VLAN30_MGMT (DNS 10.30.30.1).<\/li>\n<\/ul>\n<\/li>\n<li>WinBox: IP \u2192 DNS \u2192 enable Allow Remote Requests.<\/li>\n<\/ul>\n<figure><img decoding=\"async\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/New88-1-1024x236.jpg\" alt=\"\"><\/figure>\n<p><strong>CLI:<\/strong><\/p>\n<div>\n<div>\n<p><em><strong>\/ip pool add name=pool10 ranges=172.16.10.2-172.16.10.254<\/strong><\/em><\/p>\n<p><strong><em>\/ip dhcp-server add name=dhcp10 interface=VLAN10_VIP address-pool=pool10 lease-time=1d<\/em><\/strong><\/p>\n<p><em><strong>\/ip dhcp-server network add address=172.16.10.0.0\/24 gateway=172.16.10.1 dns-server=172.16.10.1<\/strong><\/em><\/p>\n<p><em><strong>\/ip pool add name=pool20 ranges=192.168.20.2-192.168.20.254<\/strong><\/em><\/p>\n<p><strong><em>\/ip dhcp-server add name=dhcp20 interface=VLAN20_GUEST address-pool=pool20 lease-time=1d<\/em><\/strong><\/p>\n<p><em><strong>\/ip dhcp-server network add address=192.168.20.0.0\/24 gateway=192.168.20.1 dns-server=192.168.20.1<\/strong><\/em><\/p>\n<p><em><strong>\/ip pool add name=pool30 ranges=10.30.30.30.2-10.30.30.30.254<\/strong><\/em><\/p>\n<p><em><strong>\/ip dhcp-server add name=dhcp30 interface=VLAN30_MGMT address-pool=pool33 lease-time=1d<\/strong><\/em><\/p>\n<p><strong><em>\/ip dhcp-server network add address=10.30.30.30.0\/24 gateway=10.30.30.30.1 dns-server=10.30.30.1<\/em><\/strong><\/p>\n<p><strong><em>\/ip dns set allow-remote-requests=yes<\/em><\/strong><\/p>\n<\/div>\n<\/div>\n<p><strong><em>Result<\/em><\/strong>The three DHCP servers are active, the leases can be viewed under IP \u2192 DHCP Server \u2192 Leases.<\/p>\n<p><strong>8) <em>Enabling CAPsMAN (Controller\/Manager)<\/em><\/strong><br \/><strong><em>Why:<\/em><\/strong> To activate the controller for connecting remote CAP APs.<\/p>\n<p>WiFi \u2192 Remote Cap \u2192 CapsMan (or Managers) \u2192 Enable.<br \/>Interface leave 0.0.0.0.0 (listen all) or specify VLAN30_MGMT.<br \/>Legacy wireless: Wireless \u2192 CAPsMAN \u2192 Manager \u2192 Enabled: yes.<br \/>Ports: open UDP 5246\/5247 inside VLAN Mgmt (default OK).<\/p>\n<figure><img decoding=\"async\" style=\"width: 536px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/Screenshot_1-1024x707.png\" alt=\"\"><\/figure>\n<p><img decoding=\"async\" src=\"file:\/\/\/C:\/Users\/USER\/AppData\/Local\/Temp\/msohtmlclip1\/01\/clip_image003.png\" alt=\"\u2705\" width=\"19\" height=\"19\">  Result: controller is running, waiting for CAP.<\/p>\n<p><strong>9) <em>Datapath for SSID (<\/em><\/strong><b><i>Mikrotik Vlan configuration, <\/i><\/b><strong style=\"font-size: 1.125rem; letter-spacing: 0px;\"><em>VLAN binding)<\/em><\/strong><\/p>\n<p><em><strong>Why<\/strong><\/em>: to determine which VLAN each Wi-Fi network is using.<\/p>\n<ul>\n<li>WiFi \u2192 Datapaths \u2192 +:\n<ul>\n<li>Name: dp_VIP, VLAN Mode: use tag, VLAN ID: 10 \u2192 OK,<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<figure><img decoding=\"async\" style=\"width: 365px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/New888.jpg\" alt=\"\"><\/figure>\n<ul>\n<li>Name: dp_GUEST, VLAN Mode: use tag, VLAN ID: 20:\n<ul>\n<li>Disable Client-to-Client (or enable Isolate clients) \u2192 OK.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<figure><img decoding=\"async\" style=\"width: 359px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/new88888.jpg\" alt=\"\"><\/figure>\n<p><strong>10) <em>Security profiles<\/em><\/strong><\/p>\n<p><strong><em>Why:<\/em><\/strong> Set WPA2\/WPA3, keys, Fast Transition for maximum wireless security and correct operation of Mikrotik seamless roaming.<\/p>\n<ul>\n<li>WiFi \u2192 Security Profiles \u2192 +:<\/li>\n<\/ul>\n<p>VIP: WPA2-PSK + WPA3-SAE, Passphrase: 12344321,<\/p>\n<figure><img decoding=\"async\" style=\"width: 476px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/ne1.jpg\" alt=\"\"><\/figure>\n<p>It is also necessary to Enable Fast Transition (802.11r) and Over DS, these parameters are responsible for the correct operation of seamless roaming Mikrotik CapsMan, they are located in the FT tab.<\/p>\n<figure><img decoding=\"async\" style=\"width: 539px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/ne2-1024x477.jpg\" alt=\"\"><\/figure>\n<p>Also by analogy create a second security profile for the guest network which is located on the 20 Vlan CapsMan Mikrotik.<\/p>\n<p>You should end up with something similar to the screenshot below.<\/p>\n<figure><img decoding=\"async\" style=\"width: 557px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/ne3-1024x169.jpg\" alt=\"\"><\/figure>\n<p><strong>11) <em>Configuring Mikrotik Channel Profiles<\/em><\/strong><\/p>\n<p><strong><em>Why<\/em><\/strong>: Very Important parameter for correct operation of the Mikrotik CapsMan wireless network, channel frequencies\/widths for 2.4 and 5 GHz. it is very important to separate correctly. <\/p>\n<ul>\n<li>WiFi \u2192 Channel \u2192 +:<\/li>\n<\/ul>\n<p>Set 2AX_20: Band=2.4GHz-AX, Width=20MHz, Control channels=1\/6\/11,<\/p>\n<figure><img decoding=\"async\" style=\"width: 435px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/r1.jpg\" alt=\"\"><\/figure>\n<p>For 5 Ghz 5AX_40\/80: Band=5GHz-AX, Width=40 or 80MHz, Skip DFS Channels select ALL.<\/p>\n<figure><img decoding=\"async\" style=\"width: 449px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/r2.jpg\" alt=\"\"><\/figure>\n<p>At the start you can skip DFS = all, later return DFS to clear the air but it is not necessary.<\/p>\n<p><em><strong>If you have equipment with AC standard, similar actions should be performed for it, except Band should be specified AC for 5 Ghz frequency and for 2.4 Ghz should be specified N.<\/strong><\/em><\/p>\n<p>After all the customization, it should go something like this:<\/p>\n<figure><img decoding=\"async\" style=\"width: 324px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/r3.jpg\" alt=\"\"><\/figure>\n<p><strong><em>12) Configuring Capsman Vlan Datapath, WiFi Configs for SSID (VIP\/Guest \u00d7 2.4\/5), <\/em><\/strong><b><i>Configuring Mikrotik Vlan.<\/i><\/b><\/p>\n<p><strong><em>Why<\/em><\/strong>: separate configs for different bands\/groups are needed to separate networks by their own Wlan and also by their own channels. You don&#8217;t have to specify a country. <\/p>\n<ul>\n<li>WiFi \u2192 CAPsMAN \u2192 Configurations \u2192 +:\n<ul>\n<li>2 VIP AX: SSID: Office_VIP, Channel: 2AX_20, Security: VIP, Datapath: dp_VIP, Mode: AP,<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<figure><img decoding=\"async\" style=\"width: 400px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/r4.png\" alt=\"\"><\/figure>\n<p>5 VIP AX: similarly, Channel: 5AX as in the first screenshot, only the channel for 5AX should be selected. But for the AC standard it is necessary to select the corresponding AC standard and the channel corresponding to it, which was created earlier. <\/p>\n<figure><img decoding=\"async\" style=\"width: 426px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/r5.png\" alt=\"\"><\/figure>\n<p>For the guest network, similar steps need to be performed.<\/p>\n<p>2 GUEST AX: similar, SSID: Office_Guest, Datapath: dp_GUEST,<\/p>\n<p>5 GUEST AX: similarly.<\/p>\n<figure><img decoding=\"async\" style=\"width: 468px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/r6.png\" alt=\"\"><\/figure>\n<p><strong><em>Result:<\/em><\/strong> 4+ finished configurations.<\/p>\n<p><strong>14) <em>Local vs CAPsMAN (important):<\/em><\/strong> there is no CAPsMAN-forwarding in WiFi (RouterOS 7.0+). There is only Local-forwarding &#8211; guest\/VIP traffic is processed by the point itself and sent to the corresponding VLAN on the trunk port. <\/p>\n<p>Consequence: on the central controller you do not need to specify bridge in datapath, only VLAN ID. On the AP, the tags will go to trunk. <\/p>\n<figure><img decoding=\"async\" style=\"width: 451px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/r9.png\" alt=\"\"><\/figure>\n<p><strong><em>15) Connecting and Configuring CAP by Vlan:  <\/em><\/strong><\/p>\n<p><strong><em>Why<\/em><\/strong>: CapsMan should pass the VLAN as trunk and have control in VLAN30.<\/p>\n<ul>\n<li>On the remote Cap: Bridge \u2192 Bridges \u2192 + \u2192 Name: BridgeWiFi \u2192 OK,<\/li>\n<li>Bridge \u2192 Ports \u2192 +:\n<ul>\n<li>Add ether1 (aplink to the controller) to BridgeWiFi and all other ports similarly. Also do not forget to enable VlanFiltering on the bridge. <\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><strong><em>16) Cap preparation: <\/em><\/strong><b><i>Configuring Vlan mikrotik,<\/i><\/b><strong style=\"font-size: 1.125rem; letter-spacing: 0px;\"><em> interfaces and VLAN table<\/em><\/strong><\/p>\n<p><strong><em>Why<\/em><\/strong>: Cap should skip the 10\/20\/30 tags, and the management and management network should receive in VLAN30.<\/p>\n<ul>\n<li>Interfaces \u2192 VLAN \u2192 +:<\/li>\n<\/ul>\n<p>VLAN30_MGMT on BridgeWiFi (ID 30) \u2192 OK.<\/p>\n<figure><img decoding=\"async\" style=\"width: 404px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/r10-1.png\" alt=\"\"><\/figure>\n<ul>\n<li>(VLAN10\/VLAN20 on Cap is usually not needed as L3 if there are no local services there. Bridge-vlan rules are sufficient.)<\/li>\n<li>Go and create Vlan-i accordingly as we have done before<\/li>\n<li>Bridge \u2192 VLANs on Cap:\n<ul>\n<li>VLAN 10, 20, 30:<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<figure><img decoding=\"async\" style=\"width: 355px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/r11.png\" alt=\"\"><\/figure>\n<p><strong><em>There is a mistake in the screenshot, there should be 30 Vlan IDs instead of 33.<\/em><\/strong><\/p>\n<p>And add the other Vlans by analogy:<\/p>\n<figure><img decoding=\"async\" style=\"width: 357px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/r12.png\" alt=\"\"><\/figure>\n<figure><img decoding=\"async\" style=\"width: 362px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/r13.png\" alt=\"\"><\/figure>\n<ul>\n<li>Tagged: BridgeWiFi, ether1 ,\n<ul>\n<li>Untagged: (empty) &#8211; Do not change anything here, we have no untagged ports.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>Bridge \u2192 Bridge: enable VLAN Filtering\/Ingress Filtering.<\/p>\n<p><strong><em>CLI (CAP):<\/em><\/strong><\/p>\n<div>\n<p><strong><em>\/interface bridge add name=BridgeWiFi<\/em><\/strong><\/p>\n<p><strong><em>\/interface bridge port add bridge=BridgeWiFi interface=ether1<\/em><\/strong><\/p>\n<p><em><strong>\/interface vlan add name=VLAN30_MGMT vlan-id=30 interface=BridgeWiFi<\/strong><\/em><\/p>\n<p><strong><em>\/interface bridge vlan<\/em><\/strong><\/p>\n<p><strong><em>add bridge=BridgeWiFi vlan-ids=10 tagged=BridgeWiFi,ether1<\/em><\/strong><\/p>\n<p><strong><em>add bridge=BridgeWiFi vlan-ids=20 tagged=BridgeWiFi,ether1<\/em><\/strong><\/p>\n<p><strong><em>add bridge=BridgeWiFi vlan-ids=30 tagged=BridgeWiFi,ether1<\/em><\/strong><\/p>\n<p><strong><em>\/interface bridge set BridgeWiFi vlan-filtering=yes ingress-filtering=yes<\/em><\/strong><\/p>\n<\/div>\n<p><strong><em>17) DHCP Client on CAP (VLAN30)<\/em><\/strong>:<\/p>\n<p><em><strong>Why<\/strong><\/em>: so that the CAP can get an IP on the Mgmt VLAN and be able to communicate with the controller.<\/p>\n<ul>\n<li>IP \u2192 DHCP Client \u2192 +:\n<ul>\n<li>Interface: VLAN30_MGMT,Use Peer DNS: yes,<\/li>\n<\/ul>\n<ul>\n<li>OK.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<figure><img decoding=\"async\" style=\"width: 342px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/r14-1.png\" alt=\"\"><\/figure>\n<figure><img decoding=\"async\" style=\"width: 342px; height: auto;\" src=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/r15.png\" alt=\"\"><\/figure>\n<p><strong><em>CLI:<\/em><\/strong><\/p>\n<p>\/ip dhcp-client add interface=VLAN30_MGMT use-peer-dns=yes disabled=no<\/p>\n<ul>\n<li>Result: The ATS got an address from the 10.30.30.0\/24 subnet, which fully matches our settings (see IP \u2192 DHCP Client\/Leases on the controller).<\/li>\n<\/ul>\n<p><em><strong>Updates, backups, exports<\/strong><\/em><\/p>\n<p><strong><em>Why<\/em><\/strong>: stability and rollback in case of problems.<\/p>\n<ul>\n<li>System \u2192 Packages \u2192 Check For Updates \u2192 Install (scheduled).<\/li>\n<li>Files \u2192 Backup \u2192 Name: vlan_capsman_backup \u2192 Backup.<\/li>\n<li>New Terminal:\n<ul>\n<li>export file=full_config.<\/li>\n<\/ul>\n<\/li>\n<li>Download the files from Files locally.<\/li>\n<\/ul>\n<p><em><strong>Secure access to the router<\/strong><\/em><\/p>\n<p><strong><em>Why<\/em><\/strong>: to minimize the risks of tampering or unauthorized access.<\/p>\n<ul>\n<li>IP \u2192 Services:\n<ul>\n<li>Disable: Telnet, FTP, www (if not needed).<\/li>\n<\/ul>\n<ul>\n<li>Restrict WinBox\/SSH to (Available From: 10.30.30.0\/24).<\/li>\n<\/ul>\n<\/li>\n<li>System \u2192 Users:\n<ul>\n<li>Change the password, create a separate admin user, disable admin (if you still have it).<\/li>\n<\/ul>\n<\/li>\n<li>IP \u2192 Firewall \u2192 Address Lists:\n<ul>\n<li>Add the mgmt_allowed list and create a rule to allow management only from it.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><strong><em>Result<\/em><\/strong>: management is available only from VLAN30\/allowed IPs.<\/p>\n<p><strong><em>Additional notes \/ common mistakes<\/em><\/strong>:<\/p>\n<ul>\n<li>Wave2 vs Wireless: Wave2 has different interfaces and menus. If you see only Wireless, it means you have legacy &#8211; the logic is similar, but the tab names are different. <\/li>\n<li>VLAN on CAP: For Local-forwarding, you do not need to raise L3 on VLAN10\/20 on CAP. Bridge-vlan (tagged) rules are sufficient. L3 is needed only for VLAN30 (DHCP client).  <\/li>\n<li>DFS: you can skip DFS at the start, but it is better to return DFS channels later to avoid interference\/radar.<\/li>\n<li>PVID\/Access port: if you need to give someone an &#8220;untagged&#8221; VLAN &#8211; make it an access port: add the port to the Untagged corresponding VLAN and set this VLAN as PVID in Bridge \u2192 Ports.<\/li>\n<li>Firewall rule order: allow for Mgmt must be higher than drop rules for Guest, otherwise you will disable your control.<\/li>\n<li>CAPsMAN Address: if discovery fails &#8211; explicitly specify CAPsMAN Addresses to CAP (IP of the controller in VLAN30).<\/li>\n<li>UDP 5246\/5247: If there are firewalls between the controller and the CAP, open these ports.<\/li>\n<\/ul>\n<p>5 GHz channel width: 80 MHz gives speed but is sensitive to noise; 40 MHz is more stable in &#8220;noisy&#8221; locations.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2b1d7cdb e-flex e-con-boxed e-con e-parent\" data-id=\"2b1d7cdb\" data-element_type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-73f19ccf elementor-icon-list--layout-inline elementor-align-right elementor-mobile-align-center elementor-list-item-link-full_width elementor-invisible elementor-widget elementor-widget-global elementor-global-27655 elementor-global-27561 elementor-widget-icon-list\" data-id=\"73f19ccf\" data-element_type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeIn&quot;}\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"tel:+380938739888\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-phone-alt\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M497.39 361.8l-112-48a24 24 0 0 0-28 6.9l-49.6 60.6A370.66 370.66 0 0 1 130.6 204.11l60.6-49.6a23.94 23.94 0 0 0 6.9-28l-48-112A24.16 24.16 0 0 0 122.6.61l-104 24A24 24 0 0 0 0 48c0 256.5 207.9 464 464 464a24 24 0 0 0 23.4-18.6l24-104a24.29 24.29 0 0 0-14.01-27.6z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">+380938739888<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"tel:+380963292604\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-phone-alt\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M497.39 361.8l-112-48a24 24 0 0 0-28 6.9l-49.6 60.6A370.66 370.66 0 0 1 130.6 204.11l60.6-49.6a23.94 23.94 0 0 0 6.9-28l-48-112A24.16 24.16 0 0 0 122.6.61l-104 24A24 24 0 0 0 0 48c0 256.5 207.9 464 464 464a24 24 0 0 0 23.4-18.6l24-104a24.29 24.29 0 0 0-14.01-27.6z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">+380963292604<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"viber:\/\/chat?number=+380963292604\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fab-viber\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M444 49.9C431.3 38.2 379.9.9 265.3.4c0 0-135.1-8.1-200.9 52.3C27.8 89.3 14.9 143 13.5 209.5c-1.4 66.5-3.1 191.1 117 224.9h.1l-.1 51.6s-.8 20.9 13 25.1c16.6 5.2 26.4-10.7 42.3-27.8 8.7-9.4 20.7-23.2 29.8-33.7 82.2 6.9 145.3-8.9 152.5-11.2 16.6-5.4 110.5-17.4 125.7-142 15.8-128.6-7.6-209.8-49.8-246.5zM457.9 287c-12.9 104-89 110.6-103 115.1-6 1.9-61.5 15.7-131.2 11.2 0 0-52 62.7-68.2 79-5.3 5.3-11.1 4.8-11-5.7 0-6.9.4-85.7.4-85.7-.1 0-.1 0 0 0-101.8-28.2-95.8-134.3-94.7-189.8 1.1-55.5 11.6-101 42.6-131.6 55.7-50.5 170.4-43 170.4-43 96.9.4 143.3 29.6 154.1 39.4 35.7 30.6 53.9 103.8 40.6 211.1zm-139-80.8c.4 8.6-12.5 9.2-12.9.6-1.1-22-11.4-32.7-32.6-33.9-8.6-.5-7.8-13.4.7-12.9 27.9 1.5 43.4 17.5 44.8 46.2zm20.3 11.3c1-42.4-25.5-75.6-75.8-79.3-8.5-.6-7.6-13.5.9-12.9 58 4.2 88.9 44.1 87.8 92.5-.1 8.6-13.1 8.2-12.9-.3zm47 13.4c.1 8.6-12.9 8.7-12.9.1-.6-81.5-54.9-125.9-120.8-126.4-8.5-.1-8.5-12.9 0-12.9 73.7.5 133 51.4 133.7 139.2zM374.9 329v.2c-10.8 19-31 40-51.8 33.3l-.2-.3c-21.1-5.9-70.8-31.5-102.2-56.5-16.2-12.8-31-27.9-42.4-42.4-10.3-12.9-20.7-28.2-30.8-46.6-21.3-38.5-26-55.7-26-55.7-6.7-20.8 14.2-41 33.3-51.8h.2c9.2-4.8 18-3.2 23.9 3.9 0 0 12.4 14.8 17.7 22.1 5 6.8 11.7 17.7 15.2 23.8 6.1 10.9 2.3 22-3.7 26.6l-12 9.6c-6.1 4.9-5.3 14-5.3 14s17.8 67.3 84.3 84.3c0 0 9.1.8 14-5.3l9.6-12c4.6-6 15.7-9.8 26.6-3.7 14.7 8.3 33.4 21.2 45.8 32.9 7 5.7 8.6 14.4 3.8 23.6z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Viber<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/t.me\/wifilab\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fab-telegram\" viewBox=\"0 0 496 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M248 8C111 8 0 119 0 256s111 248 248 248 248-111 248-248S385 8 248 8zm121.8 169.9l-40.7 191.8c-3 13.6-11.1 16.9-22.4 10.5l-62-45.7-29.9 28.8c-3.3 3.3-6.1 6.1-12.5 6.1l4.4-63.1 114.9-103.8c5-4.4-1.1-6.9-7.7-2.5l-142 89.4-61.2-19.1c-13.3-4.2-13.6-13.3 2.8-19.7l239.1-92.2c11.1-4 20.8 2.7 17.2 19.5z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Telegram<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5ced21bb elementor-section-boxed elementor-section-height-default elementor-section-height-default elementor-invisible\" data-id=\"5ced21bb\" data-element_type=\"section\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[{&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;https:\\\/\\\/ld-wp73.template-help.com\\\/monstroid2\\\/v3\\\/default\\\/wp-content\\\/uploads\\\/2018\\\/07\\\/home-1-icon-px-1.svg&quot;,&quot;id&quot;:662,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:6,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_z_index&quot;:1,&quot;jet_parallax_layout_bg_x&quot;:20.3,&quot;jet_parallax_layout_bg_y&quot;:23,&quot;_id&quot;:&quot;f27f29f&quot;,&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:null,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;]},{&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;https:\\\/\\\/ld-wp73.template-help.com\\\/monstroid2\\\/v3\\\/default\\\/wp-content\\\/uploads\\\/2018\\\/07\\\/home-1-icon-px-2.svg&quot;,&quot;id&quot;:663,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:-6,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_z_index&quot;:2,&quot;jet_parallax_layout_bg_x&quot;:10.7,&quot;jet_parallax_layout_bg_y&quot;:89,&quot;_id&quot;:&quot;2c4e5ab&quot;,&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:null,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;]},{&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;https:\\\/\\\/ld-wp73.template-help.com\\\/monstroid2\\\/v3\\\/default\\\/wp-content\\\/uploads\\\/2018\\\/07\\\/home-1-icon-px-3.svg&quot;,&quot;id&quot;:664,&quot;size&quot;:&quot;&quot;},&quot;_id&quot;:&quot;8784e48&quot;,&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:-6,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_z_index&quot;:3,&quot;jet_parallax_layout_bg_x&quot;:79.5,&quot;jet_parallax_layout_bg_y&quot;:68,&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:null,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;]},{&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;https:\\\/\\\/ld-wp73.template-help.com\\\/monstroid2\\\/v3\\\/default\\\/wp-content\\\/uploads\\\/2018\\\/07\\\/home-1-icon-px-4.svg&quot;,&quot;id&quot;:665,&quot;size&quot;:&quot;&quot;},&quot;_id&quot;:&quot;c927807&quot;,&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:6,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_z_index&quot;:4,&quot;jet_parallax_layout_bg_x&quot;:83.2,&quot;jet_parallax_layout_bg_y&quot;:63,&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:null,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;]}],&quot;background_background&quot;:&quot;gradient&quot;,&quot;animation&quot;:&quot;zoomIn&quot;}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-636ffb57\" data-id=\"636ffb57\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5b501184 elementor-widget elementor-widget-text-editor\" data-id=\"5b501184\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Configuring MIkrotik, Ubiquiti, Cisco, Aruba of any complexity!<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-70156aeb elementor-widget elementor-widget-heading\" data-id=\"70156aeb\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Need help with customization?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4e1492e elementor-widget elementor-widget-spacer\" data-id=\"4e1492e\" data-element_type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6a5ce21a elementor-invisible elementor-widget elementor-widget-contact-form-7\" data-id=\"6a5ce21a\" data-element_type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;zoomIn&quot;}\" data-widget_type=\"contact-form-7.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-contact-form-7 jet-elements\">\n<div class=\"wpcf7 no-js\" id=\"wpcf7-f26873-o1\" lang=\"en-US\" dir=\"ltr\" data-wpcf7-id=\"26873\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/en\/wp-json\/wp\/v2\/posts\/28250#wpcf7-f26873-o1\" method=\"post\" class=\"wpcf7-form init\" aria-label=\"Contact form\" novalidate=\"novalidate\" data-status=\"init\">\n<div style=\"display: none;\">\n<input type=\"hidden\" name=\"_wpcf7\" value=\"26873\" \/>\n<input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.0.2\" \/>\n<input type=\"hidden\" name=\"_wpcf7_locale\" value=\"en_US\" \/>\n<input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f26873-o1\" \/>\n<input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/>\n<input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/>\n<\/div>\n<div class=\"row\">\n\t<div class=\"col-xs-12\">\n\t\t<p><label>Your Name*<span class=\"wpcf7-form-control-wrap\" data-name=\"your-name\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Your Name\" value=\"\" type=\"text\" name=\"your-name\" \/><\/span><\/label>\n\t\t<\/p>\n\t<\/div>\n<\/div>\n<div class=\"row\">\n\t<div class=\"col-xs-12\">\n\t\t<p><label>Your phone number*<span class=\"wpcf7-form-control-wrap\" data-name=\"phone\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-tel wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-tel\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"+3-XXX-XXX-XXXXXXXXXXX\" value=\"\" type=\"tel\" name=\"phone\" \/><\/span><\/label>\n\t\t<\/p>\n\t<\/div>\n<\/div>\n<div class=\"row\">\n\t<div class=\"col-xs-12\">\n\t\t<p><input class=\"wpcf7-form-control wpcf7-submit has-spinner\" type=\"submit\" value=\"Send\" \/>\n\t\t<\/p>\n\t<\/div>\n<\/div>\n<p><input type=\"hidden\" name=\"wpcf7tg_sending\" value=\"1\" \/>\n<\/p><p style=\"display: none !important;\" class=\"akismet-fields-container\" data-prefix=\"_wpcf7_ak_\"><label>&#916;<textarea name=\"_wpcf7_ak_hp_textarea\" cols=\"45\" rows=\"8\" maxlength=\"100\"><\/textarea><\/label><input type=\"hidden\" id=\"ak_js_1\" name=\"_wpcf7_ak_js\" value=\"107\"\/><script>document.getElementById( \"ak_js_1\" ).setAttribute( \"value\", ( new Date() ).getTime() );<\/script><\/p><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<\/form>\n<\/div>\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>If you have any problems during setup, our experts will be happy to provide you with Mikrotik Setup SERVICE! So, let&#8217;s get started! Configuring Mikrotik Vlan. This setting is relevant only for wifi-qcom \/ wifi-qcom-ac wireless drivers and RouterOS firmware version higher than 7.0! If your Mikrotik hardware uses the Wireless driver for wireless modules [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":28270,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[252],"tags":[],"class_list":["post-28250","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.2 (Yoast SEO v24.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Configuring Mikrotik Vlan Mikrotik RputerOS 7 and Above. Guest Network!-% WiFiLab%%<\/title>\n<meta name=\"description\" content=\"Configuration Services! This article details the algorithm for configuring Mikrotik RouterOS 7 and Above Vlan Mikrotik RouterOS 7 and Above. Guest Network, with Split!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Configuring Vlan CapsMan Mikrotik RouterOS 7.0 and Above - Configuration Guide\" \/>\n<meta property=\"og:description\" content=\"Configuration Services! This article details the algorithm for configuring Mikrotik RouterOS 7 and Above Vlan Mikrotik RouterOS 7 and Above. Guest Network, with Split!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/\" \/>\n<meta property=\"og:site_name\" content=\"WiFiLab\" \/>\n<meta property=\"article:published_time\" content=\"2025-08-14T09:10:29+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-16T10:56:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/ChatGPT-Image-14-\u0430\u0432\u0433.-2025-\u0433.-11_58_36-1-1024x718.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"718\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"skyber\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"skyber\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/\"},\"author\":{\"name\":\"skyber\",\"@id\":\"https:\/\/wifilab.org\/en\/#\/schema\/person\/2cd3eee1b33923a877d35ad94c1b928d\"},\"headline\":\"Configuring Vlan CapsMan Mikrotik RouterOS 7.0 and Above &#8211; Configuration Guide\",\"datePublished\":\"2025-08-14T09:10:29+00:00\",\"dateModified\":\"2025-08-16T10:56:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/\"},\"wordCount\":1913,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/wifilab.org\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/ChatGPT-Image-14-\u0430\u0432\u0433.-2025-\u0433.-11_58_36-1.png\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/\",\"url\":\"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/\",\"name\":\"Configuring Mikrotik Vlan Mikrotik RputerOS 7 and Above. Guest Network!-% WiFiLab%%\",\"isPartOf\":{\"@id\":\"https:\/\/wifilab.org\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/ChatGPT-Image-14-\u0430\u0432\u0433.-2025-\u0433.-11_58_36-1.png\",\"datePublished\":\"2025-08-14T09:10:29+00:00\",\"dateModified\":\"2025-08-16T10:56:43+00:00\",\"description\":\"Configuration Services! This article details the algorithm for configuring Mikrotik RouterOS 7 and Above Vlan Mikrotik RouterOS 7 and Above. Guest Network, with Split!\",\"breadcrumb\":{\"@id\":\"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#primaryimage\",\"url\":\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/ChatGPT-Image-14-\u0430\u0432\u0433.-2025-\u0433.-11_58_36-1.png\",\"contentUrl\":\"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/ChatGPT-Image-14-\u0430\u0432\u0433.-2025-\u0433.-11_58_36-1.png\",\"width\":1536,\"height\":1077,\"caption\":\"\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 Vlan Mikrotik - WiFiLab\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\",\"item\":\"https:\/\/wifilab.org\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Configuring Vlan CapsMan Mikrotik RouterOS 7.0 and Above &#8212; Configuration Guide\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/wifilab.org\/en\/#website\",\"url\":\"https:\/\/wifilab.org\/en\/\",\"name\":\"WiFiLab\",\"description\":\"\u041f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 Mikrotik, Ubiquiti, Cisco\",\"publisher\":{\"@id\":\"https:\/\/wifilab.org\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/wifilab.org\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/wifilab.org\/en\/#organization\",\"name\":\"WiFiLab\",\"url\":\"https:\/\/wifilab.org\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/wifilab.org\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/i0.wp.com\/wifilab.org\/wp-content\/uploads\/2018\/08\/Logo-2.png?fit=611%2C131&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/wifilab.org\/wp-content\/uploads\/2018\/08\/Logo-2.png?fit=611%2C131&ssl=1\",\"width\":611,\"height\":131,\"caption\":\"WiFiLab\"},\"image\":{\"@id\":\"https:\/\/wifilab.org\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/t.me\/wifilab\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/wifilab.org\/en\/#\/schema\/person\/2cd3eee1b33923a877d35ad94c1b928d\",\"name\":\"skyber\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/wifilab.org\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/abd3d36dd4c74d9a115b5d2a9c915a96655d2fade0c8c757744d4c4b0cab4de9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/abd3d36dd4c74d9a115b5d2a9c915a96655d2fade0c8c757744d4c4b0cab4de9?s=96&d=mm&r=g\",\"caption\":\"skyber\"},\"sameAs\":[\"http:\/\/wifilab.org\"],\"url\":\"https:\/\/wifilab.org\/en\/author\/skyber\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Configuring Mikrotik Vlan Mikrotik RputerOS 7 and Above. Guest Network!-% WiFiLab%%","description":"Configuration Services! This article details the algorithm for configuring Mikrotik RouterOS 7 and Above Vlan Mikrotik RouterOS 7 and Above. Guest Network, with Split!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Configuring Vlan CapsMan Mikrotik RouterOS 7.0 and Above - Configuration Guide","og_description":"Configuration Services! This article details the algorithm for configuring Mikrotik RouterOS 7 and Above Vlan Mikrotik RouterOS 7 and Above. Guest Network, with Split!","og_url":"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/","og_site_name":"WiFiLab","article_published_time":"2025-08-14T09:10:29+00:00","article_modified_time":"2025-08-16T10:56:43+00:00","og_image":[{"width":1024,"height":718,"url":"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/ChatGPT-Image-14-\u0430\u0432\u0433.-2025-\u0433.-11_58_36-1-1024x718.png","type":"image\/png"}],"author":"skyber","twitter_card":"summary_large_image","twitter_misc":{"Written by":"skyber","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#article","isPartOf":{"@id":"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/"},"author":{"name":"skyber","@id":"https:\/\/wifilab.org\/en\/#\/schema\/person\/2cd3eee1b33923a877d35ad94c1b928d"},"headline":"Configuring Vlan CapsMan Mikrotik RouterOS 7.0 and Above &#8211; Configuration Guide","datePublished":"2025-08-14T09:10:29+00:00","dateModified":"2025-08-16T10:56:43+00:00","mainEntityOfPage":{"@id":"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/"},"wordCount":1913,"commentCount":0,"publisher":{"@id":"https:\/\/wifilab.org\/en\/#organization"},"image":{"@id":"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#primaryimage"},"thumbnailUrl":"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/ChatGPT-Image-14-\u0430\u0432\u0433.-2025-\u0433.-11_58_36-1.png","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/","url":"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/","name":"Configuring Mikrotik Vlan Mikrotik RputerOS 7 and Above. Guest Network!-% WiFiLab%%","isPartOf":{"@id":"https:\/\/wifilab.org\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#primaryimage"},"image":{"@id":"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#primaryimage"},"thumbnailUrl":"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/ChatGPT-Image-14-\u0430\u0432\u0433.-2025-\u0433.-11_58_36-1.png","datePublished":"2025-08-14T09:10:29+00:00","dateModified":"2025-08-16T10:56:43+00:00","description":"Configuration Services! This article details the algorithm for configuring Mikrotik RouterOS 7 and Above Vlan Mikrotik RouterOS 7 and Above. Guest Network, with Split!","breadcrumb":{"@id":"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#primaryimage","url":"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/ChatGPT-Image-14-\u0430\u0432\u0433.-2025-\u0433.-11_58_36-1.png","contentUrl":"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/ChatGPT-Image-14-\u0430\u0432\u0433.-2025-\u0433.-11_58_36-1.png","width":1536,"height":1077,"caption":"\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 Vlan Mikrotik - WiFiLab"},{"@type":"BreadcrumbList","@id":"https:\/\/wifilab.org\/en\/2025\/08\/14\/configuring-vlan-capsman-mikrotik-routeros-7-0-and-above-configuration-guide\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430","item":"https:\/\/wifilab.org\/en\/"},{"@type":"ListItem","position":2,"name":"Configuring Vlan CapsMan Mikrotik RouterOS 7.0 and Above &#8212; Configuration Guide"}]},{"@type":"WebSite","@id":"https:\/\/wifilab.org\/en\/#website","url":"https:\/\/wifilab.org\/en\/","name":"WiFiLab","description":"\u041f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 Mikrotik, Ubiquiti, Cisco","publisher":{"@id":"https:\/\/wifilab.org\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/wifilab.org\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/wifilab.org\/en\/#organization","name":"WiFiLab","url":"https:\/\/wifilab.org\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wifilab.org\/en\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/wifilab.org\/wp-content\/uploads\/2018\/08\/Logo-2.png?fit=611%2C131&ssl=1","contentUrl":"https:\/\/i0.wp.com\/wifilab.org\/wp-content\/uploads\/2018\/08\/Logo-2.png?fit=611%2C131&ssl=1","width":611,"height":131,"caption":"WiFiLab"},"image":{"@id":"https:\/\/wifilab.org\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/t.me\/wifilab"]},{"@type":"Person","@id":"https:\/\/wifilab.org\/en\/#\/schema\/person\/2cd3eee1b33923a877d35ad94c1b928d","name":"skyber","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wifilab.org\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/abd3d36dd4c74d9a115b5d2a9c915a96655d2fade0c8c757744d4c4b0cab4de9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/abd3d36dd4c74d9a115b5d2a9c915a96655d2fade0c8c757744d4c4b0cab4de9?s=96&d=mm&r=g","caption":"skyber"},"sameAs":["http:\/\/wifilab.org"],"url":"https:\/\/wifilab.org\/en\/author\/skyber\/"}]}},"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/wifilab.org\/wp-content\/uploads\/2025\/08\/ChatGPT-Image-14-\u0430\u0432\u0433.-2025-\u0433.-11_58_36-1.png","_links":{"self":[{"href":"https:\/\/wifilab.org\/en\/wp-json\/wp\/v2\/posts\/28250","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wifilab.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wifilab.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wifilab.org\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wifilab.org\/en\/wp-json\/wp\/v2\/comments?post=28250"}],"version-history":[{"count":4,"href":"https:\/\/wifilab.org\/en\/wp-json\/wp\/v2\/posts\/28250\/revisions"}],"predecessor-version":[{"id":28276,"href":"https:\/\/wifilab.org\/en\/wp-json\/wp\/v2\/posts\/28250\/revisions\/28276"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wifilab.org\/en\/wp-json\/wp\/v2\/media\/28270"}],"wp:attachment":[{"href":"https:\/\/wifilab.org\/en\/wp-json\/wp\/v2\/media?parent=28250"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wifilab.org\/en\/wp-json\/wp\/v2\/categories?post=28250"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wifilab.org\/en\/wp-json\/wp\/v2\/tags?post=28250"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}