How to setup AP with multiple VLANs and SSIDs

Requirements: have two WiFi networks, one with SSID ARDITI and connected to the ARDITI VLAN (6), and a guest WiFI network, with SSID ARDITI-Guest and connected to the MT Guest VLAN (12).

This example is base on Mikrotik cAP ac

Initial Configuration

Quickset is a simple configuration wizard page that prepares your router in a few clicks. It is the first screen a user sees, when opening the router in a web browser.

Select Quickset Mode: WISP AP

In this mode configure the following settings as follows:

Configuration

Mode: Bridge

Wireless

Wireless Protocol: (leave) 802.11
Network Name: ARDITI
Frequency: (leave) auto
Band: (leave) 5GHz-A/N/AC
Cannel Width: (leave) 20/40/80MHz Ceee
Country: portugal
Security: WPA2
Encryption: aes ccm
WiFi Password: (enter wifi password)

Bridge

Address Acquisition: static
IP address: 192.168.6.228
Netmask: 255.255.255.0
Gateway: 192.168.6.254
DNS Servers: 192.168.6.230

System

Password: (enter new admin password)

Press the Apply Configuration button. We should have a working WiFi AP on the ARDITI network, however configuration is no complete. The configuration continues using WebFig and Terminal.

Add necessary VLAN interfaces on ethernet interfaces to make them as VLAN trunk or access ports:

add interface=ether1 name=eth2-vlan6 vlan-id=6
add interface=ether1 name=eth1-vlan12 vlan-id=12

add interface=ether2 name=eth2-vlan12 vlan-id=12

Add bridges for each VLAN

add name=bridge-vlan6
add name=bridge-vlan12

The Quickset configuration had set the IP address in ether2 interface, but since we have added bridges for each VLAN it is better (safer) to set the ip on the bridge bridge-vlan6.

In WebFig add Security Profile for the ARDITI-Guest WiFi network:

Goto Wireless -> Security Profiles and press the Add New to create a new profile.
Name: arditi-guest
Mode: (leave) dynamic keys
Authentication Types: (leave) WPA PSK and WPA2 PSK
Unicast Ciphers: (leave) aes ccm
Group Ciphers: (leave) aes ccm
WPA Pre-Shared Key: ard1t1w1f1
WPA2 Pre-Shared Key: ard1t1w1f1
Press OK, to create new security profile.

In WebFig add virtual wireless interfaces for the ARDITI-Guest WiFi:

Goto Wireless -> WiFi Interfaces and press the Add New and select Virtual to create a new interface.
Name: ARDITI-Guest-2G
SSID: ARDITI-Guest
Master Interface: ARDITI-2G
Security Profile: arditi-guest
Press OK, to create new interface.

Goto Wireless -> WiFi Interfaces and press the Add New and select Virtual to create a new interface.
Name: ARDITI-Guest-5G
SSID: ARDITI-Guest
Master Interface: ARDITI-5G
Security Profile: arditi-guest
Press OK, to create new interface.

Add VLAN interfaces to their corresponding bridges and ethernet interfaces where untagged traffic is necessary

/interface bridge port
add bridge=bridge-vlan6 interface=ether1
add bridge=bridge-vlan12 interface=eth1-vlan12
add bridge=bridge-vlan12 interface=ARDITI-Guest-2G 
add bridge=bridge-vlan12 interface=ARDITI-Guest-5G