2 ms·
Multiple subnets to keep the wireless domain, wired domain, protected domains and dmz apart. I used to run the backbone over wireless when I rented (couldn't ru
by isostatic 9y ago
Multiple subnets to keep the wireless domain, wired domain, protected domains and dmz apart. I used to run the backbone over wireless when I rented (couldn't run cat5 through the walls), so didn't vlan everything back to a single router.
OSPF makes it far easier to manage those, but I did used to run BGP as it made more sense to me when I learned about routing protocols and was more forgiving of wireless issues (which could have been me using the wrong OSPF mode to be honest)
In addition to the normal fixed infrastructure, I have a cluster of 5 cheap mikrotiks that I use for a little experimentation with things like failover time, but that's mainly for work purposes.
- colanderman 9y agoMikrotik does in fact support VLAN bridging over WiFi (only between Mikrotik devices), unless you're running in CAPsMAN mode. When I switched to CAPsMAN, I ended up using VPLS for my wireless backbone, thus giving me proper layer 2 isolation, without fragmentation (MPLS not being limited by the L3 MTU).
- isostatic 9y agoOne goal was to keep layer 2 multicast network off wireless where possible. Mikrotik's don't do IGMP snooping (until very recently). The wireless backbone had to support multi-networked traffic of course, but local traffic (between a couple of devices in one room) could be kept off the link