Design
This is mostly brainstorming. Hopefully I come back and rewrite it as solutions are hammered out. TODO
Features
VLANs
- Virtual APs
Gives ability to extend VLAN segregation to wireless clients by which AP they connect to. https://forum.mikrotik.com/viewtopic.php?p=104755 Maybe worth using capsman to manage this part.
- Inter-VLAN routing
Wireless roaming or Mesh
minimum rssi something to enable seamless wireless client transfer between APs
Ansible controlled
goal: playbooks written to be deployable/undeployable without making a mess
Wireguard VPN
Pi-Hole or similiar ad-blocking
Possibly implemented with a couple NanoPI NEO running Debian. They could also run other light services (NTP, …).
RoMON and MNDP
Allows for a independent MAC layer management network. I think this may be limited to management with winbox or connection via another mikrotik device. Not clear what exactly it allows for. TODO