(4) True Guest WiFi with MikroTik Routers

Category5 Technology TV with Robbie Ferguson

Подписаться 35 тыс.

Просмотров 30 тыс.

50% 1

Series and Documentation: cat5.tv/mikrotik
When customers, friends, or guests arrive, they often ask for the WiFi password. Thing is, by providing it to them, you make your network susceptible to ransomware attack if their device is infected, plus you grant them limitless access to your network resources, such as private shared files, printers, and IoT devices such as your smart surveillance, thermostat or even smart door locks. Let's set up a separate WiFi network--with no additional hardware--using MikroTik. It will be isolated from our main network so users who are connected to it will be unable to access anything on our private network.

Наука

Опубликовано:

28 май 2020

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 47

@ahmdnaube3745 3 года назад

Your explanation deserves an international award. Thanks

@one2omg154 3 года назад

Excellent video! Thank you covering this nontrivial use case. It’s exactly what I was looking for.

@lasalefamine 3 года назад

Simple, accurate and effective. Thank you for this series!

@FlexibleToast 3 года назад

I really wish this series didn't stall out. Please start this series again.

@smileymattj 3 года назад

Technically you didn't have to make the guest-bridge. You could have applied all the settings afterwards to the virtual wlan interface instead of the bridge. But the bridge would be helpful if you wanted a 2.4 and 5 GHz guest signals. Bridge is helpful to do because you never know how your network might change in the future. MikroTik makes moving settings IPs, DHCP, etc... very easy. Other brands you have to delete the settings and recreate them, you don't technically "move" it. And they throw validation errors if you try to do it any other way. MikroTik will even allow you to add the same IP address twice if you want.

@ovidiucr7300 3 года назад

Hi, and thank you for these great tutorials. i recently bought a mikrotik router, coming from a dd-wrt one. these are great, but, without a vlan tutorial.....are not so great. i would love to see one that JUST WORKS. the router is a hap ac2, and the switch is a dell powerconnect 2716 managed. thank you again for your great job!!

@drreality1 4 года назад

Another great tutorial. Many thanks

@ironkox7777 6 месяцев назад

20:04 - you specify the eth1 source port in these two rules for 0.17 so even if you put the wifi guest rule below these two rules, the wifi guest will not access the 0.17.

@luisserrano36 4 месяца назад

I Would like to see this updated, there is a routerOS7 that now carries a WireGuard.

@pennakira 3 года назад

thank you for the video. can you do a wifi video with access points for people that don't have built-in wifi to there router? thank you

@demetrismit3090 3 года назад

Great video, thanks. When will you have the throttling, bandwidth limiting video. Looking forward to it. Thanks.

@lorikeetllc3649 3 года назад

Thank you for all information, question for you, is there a way to use mikrotik on an exisiting setup in between the ISP modem and access points have the same control of features over those 3rd party access points wifi?

@henrybarning1279 4 года назад

THANKS YOU ARE A GOOD TEACHER IN MIKKRO TIK IEARN A LOTS FROM YOU

@LinuxTechShow 4 года назад

Thanks Henry. I appreciate that very much.

@cee128d 4 года назад

Trying to decide between a full on pfsense box with a WiFi Router or Access Point or just one of these MikroTik Routers for my home. Normally 3 wired connections and 1 or 2 wireless unless I'm working on other computers which increases that. What would you recommend? I have a four port Intel Gigabit card that I can install in a computer I have available so the pfsense box would be cheaper to some extent. I would have to get the Wireless access point or the Wireless Router either way tho as the ones I have do not support DD-WRT and are rather old with older protocols.

@deafno 4 года назад

in order of increasing price: * hAP ac² - gigabit networking with ac wifi, excellent value router * hEX s + cAP ac - same as above, but you can connect AP to PoE port on hEX S and move AP to more central point of your home for better coverage + you have an SFP port if you ever need that * RB4011iGS+5HacQ2HnD-IN - if you need a lot of performance, like VPN tunneling or connect 10GbE switch

@drreality1 4 года назад

I used mikrotik hap ac2, it's an excellent all in one and cheap router. However, I moved to pfsense pc with mikrotik acting as access point for WiFi recently. Mainly due to 2 reasons, mdns reflector to iot stuff don't exist on mikrotik to my knowledge and mikrotik doesn't have dps/dpi built-in to it. Please correct me if I'm wrong. There are if course alternatives as you could setup a reflector on the network and use a server for IPS/IDS but these things are built-in to pfsense add-ons. Another minor gripe is that there is no wireless mesh solution on mikrotik APs like to what you see on ubiquiti.

@IanSebryk 3 года назад

you should add doing this via CAPsMAN using wAPs. if you're using a box without onboard wifi, the config is very different with managed CAPs. regardless, well done. nice and clear.

@cpsprangers 2 года назад

I agree! Yes please! I am very much interested in this. Trying to figure this out, but no success yet. Lot of tutorials how to configure this on a AP itself, but not how do do this through CAPs.

@gabrielporto.mikrotik Год назад

I use CAPsMAN on my home network with 3 APs. It's the best thing ever.

@nycsaba 3 года назад

Very good video. Massive thanks!

@LinuxTechShow 3 года назад

Glad you liked it! Thanks for watching.

@Gabriel-V 2 года назад

@@LinuxTechShow Why do we need to bridge the guest network? Why can't we just assign a block of addresses to 'guest-wifi' interface, and assign a dhcp to guest-wfi? Why does have to go through the bridge?

@haploguy Год назад

You forgot to mention what happens when you try to use the guest bridge IP as DNS server, and further more when you use DoH on the WAN. Fun times.

@udenspasaule 3 года назад

Great video. Do you have same about capsmans guest network?

@k4qdex 6 месяцев назад

can you please start making videos like this again? it trully is helpful

@ciprian-nedelcu 3 года назад

great video

@Merryler 3 года назад

Is it possible to set up guest virtual AP SSID the same as Main SSID and differentiate vlan networks by entering different passwords?

@joejoes7770 4 года назад

Great, thanks!

@liviu2004 3 года назад

What’s the bridge guest bridging if it has only one port?

@kikohandumon2438 10 месяцев назад

Copy that.. Nice and Clear Thank you so much Bro💓💓💓👌

@fatdollar Год назад

I realize this is an older video but I hoping someone see this. Following the video I'm not able to get internet connectivity on my guest wifi. If i move the guest wlan over to my root bridge (bridge1) then I get internet but I'm not using the new subnet. I figured this would be fine and I could just filter by in interface but this doesnt seem to work because I can only filter using bridge. I do have a slightly different setup as I've got a mikrotik ethernet only router and a switch and then a Mikrotik wAP that has the guest wifi. I'm pretty sure my VLAN may be the issue but I'm wondering if someone might have an idea to try.

@EllyTaliesinBingle 2 года назад

I can't get my guest-wifi interface to show up when I try to select it in ports. :/

@leogomes6 2 года назад

Tks!

@gomgom330 6 месяцев назад

Yo mista white!!, thanks for the explanation.

@LinuxTechShow 6 месяцев назад

No problem, Jesse.

@xcrisso Год назад

Is it not possible to use vlan for seperating networks?

@lhorthy Год назад

What happened to the tutorial on the bandwidth limit for the guest network?

@LinuxTechShow Год назад

Video released May 29, 2020. Any guesses? :) We're getting there, but not quite recovered from the pandemic yet. Finding our footing, and doing what we can to get on track. Sub and keep watching for it: We haven't forgotten and can't wait to pick up where we left off!

@RockawayCCW 4 года назад

My MikroTik came in the mail yesterday. I tried to name my wifi "This is not the wifi you're looking for." but it wouldn't let me. Maybe there's a character limit or maybe it doesn't like spaces or punctuation? Not sure. So instead I named the 5Ghz "NotYours" and the 2Ghz "DEA_Surveillance_Van" :-)

@RockawayCCW 4 года назад

I would like to have the 2ghz wifi (DEA_Surveillance_Van) activate and deactivate at random times to mimic a van cruising the area (to freak out my crack head neighbors). Is there a way to do that?

@Hanesy 3 года назад

why aren't you not fan of winbox?

@doughgarcia6086 4 года назад

doi just login to my router or do i have to have the mikro router???

@LinuxTechShow 4 года назад

Indeed, the tutorial is specific to MikroTik routers, so you must have one of their routers to do this. Please see the series at cat5.tv/mikrotik to learn more, noting in particular that what we show is not hardware specific, but you can have any of the compatible MikroTik routers to do this (whether it's a cheap $40 one or a big fancy $600 enterprise one). The one we're using for the demo is about $100.