Help. both LAN and WLAN must have internet connection.
Posted: Mon Dec 12, 2016 3:10 pm
Good day.
can some please enlighten me what to do to fix this issue.
Host that are connected via LAN port (ether3 and ether4) dont have an internet connection.
Host that are connected via WLAN do have internet connection without any problem.
below is my config
can some please enlighten me what to do to fix this issue.
Host that are connected via LAN port (ether3 and ether4) dont have an internet connection.
Host that are connected via WLAN do have internet connection without any problem.
below is my config
Code: Select all
/interface bridge
add auto-mac=no mtu=1500 name=Local-Bridge protocol-mode=none
/interface ethernet
set [ find default-name=ether1 ] name=WAN1
set [ find default-name=ether2 ] name=WAN2
set [ find default-name=ether3 ] l2mtu=1600
set [ find default-name=ether4 ] master-port=ether3
/interface wireless security-profiles
add authentication-types=wpa2-psk eap-methods="" group-ciphers=tkip,aes-ccm \
management-protection=allowed mode=dynamic-keys name=wlan_password \
supplicant-identity="" unicast-ciphers=tkip,aes-ccm wpa2-pre-shared-key=\
f1e2d3c4b5a6
/interface wireless
set [ find default-name=wlan1 ] disabled=no hide-ssid=yes mode=ap-bridge \
security-profile=wlan_password ssid=bahay_only
/ip pool
add name=Local-Pool ranges=192.168.50.11-192.168.50.199
/ip dhcp-server
add address-pool=Local-Pool disabled=no interface=Local-Bridge lease-time=3d \
name=LAN-DHCP
/interface bridge port
add bridge=Local-Bridge interface=ether3
add bridge=Local-Bridge interface=wlan1
/ip address
add address=192.168.0.20/24 interface=WAN1 network=192.168.0.0
add address=192.168.50.100/24 interface=Local-Bridge network=192.168.50.0
/ip dhcp-server network
add address=192.168.50.0/24 gateway=192.168.50.100
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip firewall filter
add action=drop chain=input connection-state=invalid src-address-list=""
add action=drop chain=forward connection-state=invalid
add action=accept chain=input connection-state=new in-interface=Local-Bridge
add action=accept chain=input connection-state=established,related
add action=accept chain=input protocol=icmp
add action=accept chain=forward connection-state=new in-interface=\
Local-Bridge
add action=accept chain=forward connection-state=established,related
/ip firewall mangle
add action=mark-connection chain=input in-interface=WAN1 new-connection-mark=\
WAN1 passthrough=yes
add action=mark-connection chain=input in-interface=WAN2 new-connection-mark=\
WAN2 passthrough=yes
add action=mark-routing chain=output connection-mark=WAN1 new-routing-mark=\
to_WAN1 passthrough=yes
add action=mark-routing chain=output connection-mark=WAN2 new-routing-mark=\
to_WAN2 passthrough=yes
/ip firewall nat
add action=masquerade chain=srcnat out-interface=WAN1
add action=masquerade chain=srcnat out-interface=WAN2
/ip route
add distance=1 gateway=192.168.0.1 routing-mark=to_WAN1
add distance=2 gateway=192.168.1.1 routing-mark=to_WAN2
add check-gateway=ping distance=1 gateway=192.168.0.1,192.168.1.1
/system routerboard settings
set cpu-frequency=650MHz protected-routerboot=disabled