MikroTik

Hello everyone, I'm having a hard time figuring out why one of my DHCP servers is showing red. I' have compared my Executive DHCP Server (not red) to my Public DHCP Server (red) and cant find a difference. Pools are setup correctly, Interfaces have been properly selected. I'm stumped.

Eth 3 and 4 are my LAN's, ETH 1 is my WAN. I leave port 2 open for local configs if needed.

I'm also noticing that my printer cant connect to a DNS server when placed on the Public LAN. Any help there would be greatly appreciated.

Thanks so much in advance.

Here is my config

# apr/25/2016 14:20:05 by RouterOS 6.29.1
# software id = xxxx-xxxx
#
/interface bridge
add admin-mac=xx:xx:xx:xx:xx:xx auto-mac=no name=bridge-local
/interface ethernet
set [ find default-name=ether1 ] name="ETH 1 - WAN"
set [ find default-name=ether2 ] name="ETH 2 - Master Config"
set [ find default-name=ether3 ] name="ETH 3 - Public LAN"
set [ find default-name=ether4 ] name="ETH 4 - Executive LAN"
set [ find default-name=ether5 ] name="ETH 5 - Public LAN"
set [ find default-name=ether6 ] name=ether6-master-local
set [ find default-name=ether7 ] master-port=ether6-master-local name=\
ether7-slave-local
set [ find default-name=ether8 ] master-port=ether6-master-local name=\
ether8-slave-local
set [ find default-name=ether9 ] master-port=ether6-master-local name=\
ether9-slave-local
set [ find default-name=ether10 ] master-port=ether6-master-local name=\
ether10-slave-local
/ip neighbor discovery
set "ETH 1 - WAN" discover=no
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
add name="Public Pool" ranges=172.20.32.30-172.20.32.254
add name="Executive Pool" ranges=172.20.224.30-172.20.224.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge-local name=default
add address-pool="Executive Pool" disabled=no interface=\
"ETH 4 - Executive LAN" name="Executive DHCP"
add address-pool="Public Pool" disabled=no interface="ETH 3 - Public LAN" \
name="Public DHCP"
add address-pool="Public Pool" disabled=no interface="ETH 5 - Public LAN" \
name="Public DHCP 2"
/ppp profile
set [ find name=default ] name=default
set [ find name=default-encryption ] name=default-encryption
/interface bridge port
add bridge=bridge-local interface="ETH 2 - Master Config"
add bridge=bridge-local interface=ether6-master-local
add bridge=bridge-local disabled=yes interface="ETH 3 - Public LAN"
/ip address
add address=192.168.88.1/24 comment="default configuration" interface=\
bridge-local network=192.168.88.0
add address=172.20.224.1/24 interface="ETH 4 - Executive LAN" network=\
172.20.224.0
add address=50.196.180.81/29 interface="ETH 1 - WAN" network=xx.xx.xx.xx
add address=172.20.32.1/24 interface="ETH 3 - Public LAN" network=172.20.32.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid interface=\
"ETH 1 - WAN"
/ip dhcp-server lease
add address=172.20.32.10 comment=Printer mac-address=00:23:8B:42:22:43
add address=172.20.32.4 mac-address=A0:EC:F9:F0:57:AA
add address=172.20.32.8 mac-address=00:04:F2:93:46:73
add address=172.20.224.5 mac-address=70:71:BC:16:FD:BD
/ip dhcp-server network
add address=172.20.32.0/24 gateway=172.20.32.1 netmask=19
add address=172.20.224.0/24 gateway=172.20.224.1 netmask=19
add address=192.168.88.0/24 comment="default configuration" gateway=\
192.168.88.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=172.20.32.1 name=router
/ip firewall filter
add chain=input comment="default configuration" protocol=icmp
add chain=forward dst-port=53 protocol=udp src-port=53
add chain=forward dst-port=20000 protocol=udp src-port=10000
add chain=input comment="default configuration" connection-state=\
established,related
add action=drop chain=input comment="default configuration" in-interface=\
"ETH 1 - WAN"
add action=fasttrack-connection chain=forward comment="default configuration" \
connection-state=established,related
add chain=forward comment="default configuration" connection-state=\
established,related
add action=drop chain=forward comment="default configuration" \
connection-state=invalid
add action=drop chain=forward comment="default configuration" \
connection-nat-state=!dstnat connection-state=new in-interface=\
"ETH 1 - WAN"
/ip firewall nat
add chain=dstnat dst-port=53 protocol=udp src-port=53
add action=masquerade chain=srcnat comment="default configuration" \
out-interface="ETH 1 - WAN"
/ip route
add distance=1 gateway=xx.xx.xx.xx
/system clock
set time-zone-name=America/Los_Angeles
/system routerboard settings
set protected-routerboot=disabled
/tool mac-server
set [ find default=yes ] disabled=yes
add interface="ETH 2 - Master Config"
add interface="ETH 3 - Public LAN"
add interface="ETH 4 - Executive LAN"
add interface="ETH 5 - Public LAN"
add interface=ether6-master-local
add interface=ether7-slave-local
add interface=ether8-slave-local
add interface=ether9-slave-local
add interface=ether10-slave-local
add interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface="ETH 2 - Master Config"
add interface="ETH 3 - Public LAN"
add interface="ETH 4 - Executive LAN"
add interface="ETH 5 - Public LAN"
add interface=ether6-master-local
add interface=ether7-slave-local
add interface=ether8-slave-local
add interface=ether9-slave-local
add interface=ether10-slave-local
add interface=bridge-local
/tool netwatch
add host=xx.xx.xx.xx
/tool romon port
add disabled=no

Did you remember to add a network configuration for the second network?

DHCP basically has 3 pieces in Mikrotik:
dhcp-server itself
dhcp > network (defines the 'scope' options)
ip > pools (server makes assignments from the pool)

ZeroByte, I have IP Pools setup, I have the Networks configured, and I have the DHCP server setup.
We run an Executive LAN and a Public LAN. The public lan is sending DHCP to devices connected to that LAN, but the DHCP server shows red in the DHCP server list.


I have attached screen caps of the area's your talking about.

Thanks for your reply ZeroByte, any help is greatly appreciated.

You have ether-3 assigned to bridge-local, but disabled. Try removing it from the bridge.

add bridge=bridge-local disabled=yes interface="ETH 3 - Public LAN"

I removed ETHE 3 from the bridge. Still having the issue. SC attached for reference .
Sorry for all the trouble. I'm very new to RoutOS, trying to read as much as I can. But not finding what I need.

I looked back through your settings and ether3 being on the bridge was the only thing I see that would keep it from working properly.

I did notice that in the config you posted that you are supposed to have another dhcp-server on ether5 and it is not shown in the screen shots you posted. If you have made changes to the configuration currently on the device, do a new export and post it.

Maybe it shouldnt have relation to this, but i had this kind of problem once and updating ROS was solution, after all that i've tried.

This has been fixed. The port that the LAN is running off of didn't have an IP assigned to it. So there was no gateway for the LAN to use.

Thanks for everyone's help on this.