Ubiquiti Airos 5.6 Virtual Ssid Footstep Past Times Step

One of the big gripes that people convey amongst Ubiquiti is the lack of back upwardly for Virtual SSIDs. Here is a measuring past times measuring tutorial for setting upwardly VSSIDs on Airos 5.6 devices amongst Vlans dorsum to the upstream router. Please regime notation that you lot volition non last able to utilisation Airmax when you lot convey Virtual SSIDs.

This tutorial is based on data from the Ubiquiti Forums, specifically this post past times AnubisSL.

Step 1 - Make certain you lot are running the latest version of AirOS

Step two - Configure the outset SSID equally you lot would nether normal circumstances

Step three - Download the config file from the device together with opened upwardly it using a text editor

Step four - Edit the config file

4.1a - Without VLAN use this if you lot don't demand to vlan the instant SSID
Under the "bridge" section, exercise a novel span port. The port number, "3" inwards this illustration should last incremented past times 1 from the previous highest number. The devname, inwards this instance "ath1" is too 1 to a greater extent than than the previous, inwards this instance "ath0"

bridge.1.port.3.devname=ath1
bridge.1.port.3.prio=20
bridge.1.port.3.status=enabled

4.1b - With VLAN use this if you lot desire to house the clients on the instant SSID inwards a VLAN
Under the "bridge" section, exercise a novel bridge, incrementing the end used past times one. Add the ethernet interface, equally good equally the novel (virtual) wireless interface (created afterward on). The ethernet device cite is noted equally eth0.vlanid (in this instance vlan10).
The device cite for bridge.2 would last br1  for bridge.3 it would last br2 together with and thus on.

bridge.2.comment=Management
bridge.2.devname=br1
bridge.2.port.1.devname=eth0.10
bridge.2.port.1.status=enabled
bridge.2.port.2.devname=ath1
bridge.2.port.2.status=enabled
bridge.2.status=enabled
bridge.2.stp.status=disabled

4.2 Under the "ebtables" section, add together the novel device, incrementing the set out "2" equally appropriate, together with using the device cite created above.

Without VLAN

ebtables.sys.eap.2.status=enabled
ebtables.sys.eap.2.devname=ath1
ebtables.sys.arpnat.2.status=enabled
ebtables.sys.arpnat.2.devname=ath1

With VLAN (note, you lot tin rate the sack too exercise the VLAN using the spider web interface)

ebtables.sys.eap.2.status=enabled
ebtables.sys.eap.2.devname=ath1
ebtables.sys.arpnat.2.status=enabled
ebtables.sys.arpnat.2.devname=ath1
ebtables.sys.vlan.1.comment=VirtualSSID
ebtables.sys.vlan.1.devname=eth0
ebtables.sys.vlan.1.id=10
ebtables.sys.vlan.1.status=enabled
ebtables.sys.vlan.status=enabled

4.3 Under the "netconf" department add together the data below incrementing "4" equally needed. brand certain you lot utilisation the same device cite equally above

netconf.4.up=enabled
netconf.4.status=enabled
netconf.4.role=bridge_port
netconf.4.promisc=enabled
netconf.4.netmask=255.255.255.0
netconf.4.mtu=1500
netconf.4.ip=0.0.0.0
netconf.4.hwaddr.status=disabled
netconf.4.hwaddr.mac=
netconf.4.devname=ath1
netconf.4.autoip.status=disabled
netconf.4.allmulti=enabled

4.4 Add the next nether the "radio" section, specifying radio.1 equally the rear device, together with incrementing the virtual device set out equally needed

radio.1.virtual.1.status=enabled
radio.1.virtual.1.devname=ath1
radio.1.virtual.1.mode=master

4.5 Add the next nether the "wireless" section, using the adjacent available number, together with pick out a sensible SSID name

wireless.2.wmm=enabled
wireless.2.wds.status=disabled
wireless.2.status=enabled
wireless.2.ssid=NEWSSID     <= CHANGE TO ACTUAL SSID OF VIRTUAL AP
wireless.2.l2_isolation=enabled    <= CHANGE TO 'disabled' IF NO ISOLATION IS REQUIRED
wireless.2.hide_ssid=disabled
wireless.2.autowds=disabled
wireless.2.authmode=1
wireless.2.ap=
wireless.2.addmtikie=enabled
wireless.2.devname=ath1

4.6 Unless you lot demand security, you lot tin rate the sack salvage the file together with upload it to your device. That is all.

4.6 If you lot desire to enable security, add together the next nether the "aaa" section, changing the values appropriately

aaa.2.devname=ath1     <= CHANGE TO ACTUAL DEVICE OF VIRTUAL AP
aaa.2.driver=madwifi
aaa.2.radius.auth.1.status=disabled
aaa.2.ssid=NEWSSID     <= CHANGE TO ACTUAL SSID OF VIRTUAL AP
aaa.2.status=enabled
aaa.2.wpa.1.pairwise=TKIP CCMP
aaa.2.wpa.key.1.mgmt=WPA-PSK
aaa.2.wpa.psk=PASSWORD     <= CHANGE TO REQUIRED PASSWORD OF VIRTUAL AP
aaa.2.wpa.mode=2

That's it, you lot tin rate the sack immediately upload the novel config, together with reboot the device!

Limitations:
NO AIRMAX!
NO 10MHZ channels
i intend that's it