#Church guest wifi password ideas full#

I also set the router to be the DNS server and NTP server.ДЄnd the domain to /ip dhcp-server network> print The Netmask should be 255.255.255.0 or 24, unless you know much more about subnets than I do. It should be the same as the IP address you chose, but with a zero at the end, and the netmask afterwards. The Address field is what ties the Address Pool, DHCP Server and Network Configuration all together. Now, jump over to the Networks tab and add new configuration. Give it a name (I named mine after the wlan-phones interface).Д®xtend the lease time to something reasonably long (I use 1 day).ДЄnd select the address pool you created in the last /ip dhcp-server> print Goto IP -> DHCP Server -> DHCP Tab and add a new DCHP Server. Which means a range like 10.46.2.64 - 10.46.2.254 is my /ip pool> printДHCP is used to assign addresses to devices as they connect to the WiFi network.ДЄnd also assign a few other special addresses. I tend to reserve the bottom ~60 address (from x.1 to x.63) for static allocations, and x.255 is the broadcast address. So we need a pool before we can configure DHCP. On a Mikrotik you create an IP Pool, which is then used by DHCP (and other things too, I guess, though I have no idea what). On many other routers, you assign an IP address range against the DHCP server. Goto IP -> Address and then add a new address.Д¬hoose an appropriate IP address for your new network (IвЂ™m using 10.46.2.xxx) and assign it to your new /ip address> printДЇlags: X - disabled, I - invalid, D - dynamic Vlan-id=1 wds-mode=disabled wds-default-bridge=none wds-ignore-ssid=no bridge-Дefault-authentication=yes default-forwarding=yes default-ap-tx-limit=0Дefault-client-tx-limit=0 hide-ssid=no security-profile=wpa2-phonesДЄ network interface isnвЂ™t much use without an IP address. Interface-type=virtual-AP master-interface=wlan ssid='ligos-phones' vlan-mode= Then select your newly created security /interface wireless> printДЈ name='wlan-phones' mtu=1500 l2mtu=1600 mac-address=4C:5E:0C:01:02:03 arp=enabl On the Wireless tab, enter an SSID to identify your network: ligos-phones for me, On the General tab, enter a name for the network interface (which will be used internally on your Mikrotik).

Goto Wireless -> Interfaces and then add a Virtual AP. Radius-mac-caching=disabled group-key-update=5m management-protection=allowed Interim-update=0s radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username Radius-mac-authentication=no radius-mac-accounting=no radius-eap-accounting=no Static-transmit-key=key-0 static-sta-private-algo=none static-sta-private-key='' Static-algo-2=none static-key-2='' static-algo-3=none static-key-3='' Mschapv2-password='' static-algo-0=none static-key-0='' static-algo-1=none static-key-1='' Wpa2-pre-shared-key='NotMyRealPassphrase' supplicant-identity=''Д®ap-methods='' tls-mode=no-certificates tls-certificate=none mschapv2-username='' Group-ciphers=aes-ccm wpa-pre-shared-key='' I disable WPA and only use WPA2, as I have no legacy devices and it improves security slightly.ДЇinally, donвЂ™t forget to enter your /interface wireless security-profiles> printД¤ name='wpa2-phones' mode=dynamic-keys authentication-types=wpa2-psk unicast-ciphers=aes-ccm Give it an appropriate name ( wpa2-phones in my case). Goto Wireless -> Security Profiles and add a new profile. I generate one from and save it in my KeePass database. Create an InterfaceДЇirst thing to do is create yourself a passphrase for your AP. IвЂ™ll be using WinBox, but IвЂ™ll also list the console details via a print command.

#Church guest wifi password ideas full#

Phones rarely need full network access to other local devices.ДЄnd they have a nasty habit of getting lost, stolen or otherwise broken, so having a separate WiFi access point (and password) means you donвЂ™t accidentally disclose your main WiFi password.

In this guide, I create a separate WiFi interface for phones and tablets. Mikrotik routers can do exactly the same thing, except you can have effectively unlimited access points and you need to build the network piece by piece. You tick the вЂњguest networkвЂќ box and out pops a virtual guest access point. Many home routers have a вЂњtick the boxвЂќ style of guest WiFi network, So my friends use a guest network, the kids are on their own network, etc. I like to separate different WiFi on my network. Steps to create a second (or third) network on a Mikrotik router, perhaps for a guest network.