urferTim, I am putting a pause on the hot spot for right now. I need your help on this setup. I have a rb 411AR and rb411. The 411ar is my AP and 411 is Station both with xr9, I can get the both to communicate but my problem is to get my pc to connect to the internet through the station, got ip from the internet modem. I can only ping with bridge interface in win box.

The i tried this settings with the on board wlan1 RB 411ar to connect to the modem wirelessly, it still doesnt go to the internet.
( My connections: Internet Modem>>wireless to RB411ar eth1 >> netgear switch>> PC )
ip/address:
address: 192.168.1.254/24
network: 192.168.1.0
broadcast: 192.168.1.255
interface: eth1

ip/pool
name: pool-ethn1
addresses: 192.168.1.1-192.168.1.253

ip/dhcp server
name: dhcp-eth1
interface: eth1
address pool: pool-eth1

dhcp server network:
address: 192.168.1.0/24
gateway: 192.168.1.254

ip/firewall NAT
chain: srcnat
src.address: 192.168.1.0/24
action: masquerade

ip/dhcp client:
add
interface: wlan1 (is bound )

This is the setup of the AP or the station? If so, how does the wireless interface fit in? No ip assignment? What about the setup on the other router? How are the wireless interfaces set up on both?

That settings is Station mode to see if i would have the same problem with the xr9 p2p. I follow the instruction to bridge the 2 xr9 cards but my main concern is that i can ping the internet gateway in winbox with the bridge interface on the station RB but not with eth1 and wlan and i think thats where my problem is. I will get the ip and gateway ip from internet modem through the station on my pc.
This is what i follow:>
http://wiki.mikrotik.com/wiki/Transpare ... o_Networks

I think you need to read that wiki again. The interfaces ether1 and wlan1 should be added to a bridge, then the bridge becomes the interface. The ip address should be assigned to it.

I still have the same problem, in winbox i can ping the gateway through the Station RB411 on the bridge interface but i cannot ping it with my pc on the ether1 port.

I don't know if you need dhcp in the station, but in any case, this is incorrect. The gateway should be the ip on the other router (192.168.1.1?). Insure it is set in "/ip route".

dhcp server network:
address: 192.168.1.0/24
gateway: 192.168.1.254

You should post "/ip address", "interface bridge port", and "/interface wireless" from the station.

ADD: And remove the dhcp client on the wlan1 interface on the station. That would duplicate ip subnets on the station. Wlan1 and the bridge (wlan1/ether1) would have the same ip subnet. I see no reference to dhcp, either as a client or server, in that wiki. Insure that the AP dhcp server does not issue 192.168.1.254. That will be the first ip it issues in most cases.

wiki was for the 2 xr9 cards, the settings below is for the on board card.


Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 192.168.1.254/24 192.168.1.0 192.168.1.255 bridge1
1 192.168.1.3/24 192.168.1.0 192.168.1.255 wlan1

Flags: X - disabled, I - inactive, D - dynamic
# INTERFACE BRIDGE PRIORITY PATH-COST HORIZON
0 ether1 bridge1 0x80 10 none
1 wlan1 bridge1 0x80 10 none


Flags: X - disabled, R - running
0 R name="wlan1" mtu=1500 mac-address=00:0C:4A:4B:22:6F arp=enabled
interface-type=Atheros AR5212 mode=station ssid="NIC's" frequency=2412
band=2.4ghz-b scan-list=default antenna-mode=ant-a wds-mode=disabled
wds-default-bridge=none wds-ignore-ssid=no default-authentication=yes
default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0
hide-ssid=no security-profile=default compression=no

You need to read the wiki again. And this time try following it!
Where are the wds settings in the wireless setup?
"mode=station-wds"
"wds-mode=dynamic"
and
"wds-default-bridge=wds-bridge"

Why are there two ips in "/ip address"? Remove the dhcp client on wlan1.

ok im going to start from scratch, does it make a difference if 1 rb is level4 an the other level3

ok im going to start from scratch, does it make a difference if 1 rb is level4 an the other level3

No. The only difference is the number of clients it will accept. One is all you need, correct?

Insure you follow all the instructions. I know it is a bit confusing because there are two types of bridges.
One is the bridge in the station ("/interface bridge") between wlan1 and ether1 named "wds-bridge".
There is also a wds wireless bridge ("/interface wireless") named "wds-bridge".

What way should i setup the RB for bridge. what i am planning to sent my internet from Site A to Site B then the Station Rb at site B connect to a switch with other wifi devices for many clients.

The station should be set with The address like this The wireless like this: Set wlan1 with the correct frequency, band and ssid as the AP.

The AP should have "mode=bridge", but the same "wds-mode" and "wds-default-bridge" as the station in the wireless settings. And a bridge with wlan1 added.

Thanks, it is working now
1. what is the difference between ap bridge mode and bridge?

2. how can I stop a client on the station side not to access my gateway login page on the internet modem?

Can I use dhcp sever on the station to give different ip addresses instead from the gateway modem?

I am happy to hear it is working for you!

As I understand it, bridge allows only one connection. ap-bridge allows multiple connections. I normally use ap-bridge and limit the connections with "/interface wireless access-list". I set "default-authentication=no" and add the mac addresses in the access list to allow a connection.

I would leave the dhcp alone on this one. Use the dhcp server on the main router (the one you use now). If you want to isolate the remote network, then you would need to use another dhcp server.

ADD: What type router is on the bridge side of the connection? It would probably be best to block access to the modem login page there with a firewall rule.

I normally use ap-bridge and limit the connections with "/interface wireless access-list". I set "default-authentication=no"

Do you set both authentication =no, in access-list and interface wlan1?

I have RB411AR as bridge and RB411 as station wds.
If i change the AP from Bridge to ap bridge

Hi nicmo. Change the setting for the radio (wlan1 for this example) in "/interface wireless" to "default-authentication=no".
Then
/interface wireless access-list
add mac-address=xx:xx:xx:xx:xx:xx authentication=yes interface=wlan1

That will let only the wireless device with xx:xx:xx:xx:xx:xx connect to wlan1

how do i setup the firewall rule to block access to my modem login page?

Do you mean the port 80 page? If you don't want to use it, turn off www service.
/ip service
disable www

I disable those but i need to block the gateway page at ip 192.168.1.1

My bad! I thought you meant your router. In the router connected to your modem:
/ip firewall filter
add chain=forward dst-address=192.168.1.1 action=drop

ADD: If both interfaces are assigned to the bridge, then add the same rule to
/interface bridge filter

on the bridge filter i dont see were to put the IP address
Flags: X - disabled, I - invalid, D - dynamic
0 chain=forward action=drop

The ip address section cannot be edited.
If set Action to drop it block every thing in bridge filter.

My bad. My version won't take that dst-address either, even tho it shows as an option. ??
Try this instead:
/interface bridge settings
set use-ip-firewall=yes

Thanks again Surfertim, I got it to work and this is what i did, I dont know if im right,
Flags: X - disabled, I - invalid, D - dynamic
0 chain=forward action=drop mac-protocol=ip dst-address=192.168.1.0/24
dst-port=80 ip-protocol=tcp

You got to change the Mac protocol number to ip to edit the IP section.

That was the missing part. Mine works with that also. Thanks! I learned something from you!