Community discussions

MikroTik App
 
Kobold81
just joined
Topic Author
Posts: 6
Joined: Tue Aug 10, 2021 12:11 am

How to access camera behind access point

Wed Nov 27, 2024 12:42 pm

Hello,

I would like to make a ip camera accessible by wifi, so I hooked it up to a mikrotik map and told the map to connect to my wifi.
In my simple mind, on the mikrotik map, I just had to add the wlan1 to the bridge with both ether1 and ether2 and the camera would get an ip from the dhcp server on the hex. Naturally, that did not work :-)

Is my approch with briding wlan1 psiible at all or do I have to put wlan1 to wan?


What it looks like:
Hex (capsman ap) <---- wifi ----> wlan1:map(station mode) -------ether1: camera
 
phascogale
Frequent Visitor
Frequent Visitor
Posts: 74
Joined: Tue Oct 17, 2023 11:25 am

Re: How to access camera behind access point

Thu Nov 28, 2024 3:38 am

Connect the camera to ether2. On a mAP ether1 defaults to upstream (DHCP client, not server) while ether2 is for downstream devices.

That is a first action. Without a configuration export neither I nor the people who actually know stuff could really comment further.
 
Kobold81
just joined
Topic Author
Posts: 6
Joined: Tue Aug 10, 2021 12:11 am

Re: How to access camera behind access point

Tue Dec 03, 2024 4:26 pm

internet ---> hex ----> accesspoint wifi ---> (wlan1 mAP---> mAP with masquerade ---> network behind the mAP) eth1, eth2, wlan2 ----> ip camera etc.

It was easier than I though and I write it down here in case another person finds it useful.

Disclaimer: I know the experts will fuss about this or that setting and cry foul due to firewall rules, but I need a robust and working solution, not network theory battles.

on mAP:
- bridge eth1, eth2 and wlan2 if needed
- configure wlan1 with ssid and password of you wifi
- set an ip address for wlan1 or let it have one from the hex by using the dhcp client feature on interface wlan1
- have the dhcp server on the mAP serve an ip to the bridge and all associated interfaces
- standard config has masquerading enabled by default
- disable the firewall rules that prevent access to the webconfig on mAP on the "input" chain. This should be save because the mAP is behind the hex. feel free to use vlan to have a dedicated management port.

on hex:
- be sure that the hex does not have an ip address + network preconfigured that is equal to the one on the mAP
- set a route with the network behind the mAP and set as gateway the ip of the mAP that you gave wlan1