I've bricked my wifi AP too many times, and half of my IoT devices won't connect to the recovered networks, so I figure it's time to ask for help. I've read the docs, followed guides on setting this up, but nothing I've tried seems to work. (It's been about 15 years since my CCNA and I don't do network config in my career.)

Hardware:

• R1: RB5009UPr+S+

  • AP Bonding: bonding1
    • Ports: ether2, ether3
  • WAN: ether1
  • Bridge: LAN
    • Ports: ether4-8, sfp1, bonding1
    • Address: 172.23.0.1/16
  • DHCP
    • interface: bridge1
    • Pool: 172.23.30.0/24

• AP1: cAP AX

  • Wifi Antennas:
    • wifi1: 2.4GHz
    • wifi2: 5GHz
  • AP Bonding: bonding1
    • Ports: ether1, ether2
  • Bridge: bridge1
    • Ports: bonding1, wifi1, wifi2
    • Address: 172.23.0.6/16

I would like to create a virtual wifi network using wifi1 as a master that has a VLAN ID of 2, and a dhcp server for the 172.24.0.0/24 network.

I think my blocker is what interface to attach the vlan to, what interface to attach the DHCP server to, and what addresses need to be assigned to what interface.

I got to the point where I could ping from the vlan on the AP to the vlan on the router by following this guide, but I couldn't get a client to pull a dhcp address regardless of the device hosting the server. I also couldn't get it to see the 172.23.0.0/16 network (eventually it will only be able to talk to Home Assistant), but I think I'm lacking the right firewall rules to do the forwarding.