UP  |  HOME

Design

Table of Contents

This is mostly brainstorming. Hopefully I come back and rewrite it as solutions are hammered out. TODO

Features

VLANs

Virtual APs

Gives ability to extend VLAN segregation to wireless clients by which AP they connect to. https://forum.mikrotik.com/viewtopic.php?p=104755 Maybe worth using capsman to manage this part.

Inter-VLAN routing

Wireless roaming or Mesh

minimum rssi something to enable seamless wireless client transfer between APs

Ansible controlled

goal: playbooks written to be deployable/undeployable without making a mess

Wireguard VPN

Pi-Hole or similiar ad-blocking

Possibly implemented with a couple NanoPI NEO running Debian. They could also run other light services (NTP, …).

RoMON and MNDP

Allows for a independent MAC layer management network. I think this may be limited to management with winbox or connection via another mikrotik device. Not clear what exactly it allows for. TODO

Considerations

Shared devices

Many devices would be convenient to work across networks, but usually rely on some broadcast mechanism to be found on the network.

With the exception of the printer most are gaming/entertainment devices. I could segregate based on this attribute, but my own devices tend to be multi-role and I would still have the same issue.

Ubiquiti (igmp snooping, multicast enhancement, and multicast dns) setting, then they need additional mdns repeater. Haven't found a straight answer on whether mikrotik devices can be made to handle this situation. Mikrotik does have PIM-SM (protocol independent multicast - sparse module) that might enable some sort of wider multicast area. Maybe also work around with an independent mdns repeater that is multihomed. Can the NanoPi NEO be multihomed with it's single interface?

https://forum.mikrotik.com/viewtopic.php?p=871563#p866434 "Allow inter-VLAN routing, allow multi-cast routing on LAN, don't block Multicast subnets. Problem solved." - from same thread

Chromecast

Chromecast w/ Google TV

Stadia controller

HP LaserJet Pro MFP M29w

Printer seems really challenging. I probably want it on the Family VLAN. I want to access it which should be easy enough with a route and manual setup. I also want the kids devices to be able to print without requiring manual config.

Thread on getting the traffic there https://forum.mikrotik.com/viewtopic.php?p=862868, but this doesn't address making the printer's broadcasts available generally.

Can chromebooks even add the printer by IP?