Hello;

I just bought a routerboard with a wifi antenna, and am having problems trying to setup something very simple.

I have an existing wifi network with the internet which I want to connnect to via my new routerboard.

I've successfully got the routerboard to connect to my existing wifi, however I cannot get an ip or the internet through the ethernet port of the routerboard.

Can someone explain how to do this? I'm configuring my routerboard through WinBox v4.1.

Thanks for any assistance!

Anyone?

Maybe this isn't as simple as I expected that it may be?

You must give more details, or/and configuration you are using,
because there is to much different configurations you can setup using RO and no one will guess the good one for you

OK, I didn't realize. If I'm not elaborating enough on my setup please let me know.

The hardware I bought was this http://www.bizsyscon.com/product/MIKROT ... _5056.html

It has a wireless card, and an ethernet connection.

Basically I want to use it to connect to get the internet from an existing wifi connection

INTERNET ACCESS VIA WIFI ---wireless----> MIKROTIK ROUTER --ethernet--> COMPUTER TO VIEW THE INTERNET

I've gotten the router to connect to the wifi, and that's about it.
I'm able to connect to the router with Winbox over the ethernet port via MAC.
The computer isn't even getting an IP from the router.

the Mikrotik is acting as a client? Not an AP?

If so,

Setup a bridge and bridge your wireless interface and the port(s) that you want to access the wireless network.

If the wireless network has DHCP enabled, you will get an address from that network.

If you want to have your MT router get an ip from that network, add a dhcp client via winbox for the bridge you just config'd..

If you want to give it a static IP, add that in IP Addresses.

OK, thanks, yes it is a client I'm trying to setup.

It seems straightforward enough, if I can figure out how to do all of this through the Winbox interface.

Would I set the router into Station mode? How do you interface the ports? I'd imagine I'd like to have all ports connected.

Sorry about all the questions, I'm not much of an IT guy at all, and am obviously a newbie!

- on the menu list on the left, select interfaces. You should see wlan1 and ether 1 in the list of interfaces. Double click wlan1. Go to the 'wireless' tab and select mode as 'station pseudobridge' and the appropriate 'band' (i.e 2.4ghz or 5ghz) and then select 'scan' from the list on the right. Pick your existing wifi from the list of detected networks and click connect from the menu on the right. Confir that it's connected and running. Close this view window when done.
- on the menu list on the left, select bridge > click red plus sign to create a new bridge and apply
- still in the bridge menu, select the 'ports' tab and and the red plus sign again to add wlan1 and ether1 as ports to the bridge you created above. Apply after each addition.
- still from the menu list on the left, go to ip > dhcp client and click on the red plus sign and select your just created bridge1 as the interface. Ensure peer dns, default route and peer ntp are checked. Click apply.
- You can repair or refresh dhcp settings on your pc and you should now be able to browse
NB: this assumes your existing wifi hands out ip addresses automatically!

eneimi

Thanks for the detailed instructions. I think I might be almost there. I followed your instructions and seem to be seeing traffic flowing across the network. The DHCP doesn't appear to be working however. It says "searching" continuously. Any ideas?

If you try using a laptop to connect to your existing wireless, does it connect and browse automatically or do you have to manually configure anything ( a static ip address, wireless security, etc)?

It connects automatically.

oh sorry there is wireless security setup on my network (wpa2) however I seem to have that setup fine. The routeros maintains a connection to my wifi.

Would the make any difference what the ip of my router is?

It's currently set to the default 192.168.88.1, I think.

Should the router be getting an ip from the ap's dhcp server? Is there a way of checking this?

For testing purposes, choose a valid IP address on the subnet distributed via the other AP. Then add it as a static IP address on the bridge1 interface on the Mikrotik router. At that point, are you able to ping the other AP from the Mikrotik router?
If not, post the IP configuration from the other AP as well as the configuration you applied on the Mikrotik router here.

With this test we can verify layer 2 connectivity between the two APs.

Thanks for the help fewi

The access point is a linksys router running wep. I don't have the specifics of the setup. It's IP is the standard 192.168.1.1

I'm not sure how I can post the configuration of the Mikrotik. I've included a screenshot though. I've set it up according to the previous post in this thread.

I added a bridge between wlan1 and ether1, then setup a DHCP client on the bridge.

I added 192.168.1.50 on the bridge and am able to ping that, but when I try to ping 192.168.1.1 I get "no route to host"

Let me know if this is enough info, and I really really appreciate the help!

Some more info.

[admin@MikroTik] /interface wireless> print
Flags: X - disabled, R - running
0 R name="wlan1" mtu=1500 mac-address=00:15:6D:68:01:11 arp=disabled
interface-type=Atheros AR5413 mode=station-pseudobridge
ssid="MYNETWAN01" frequency=2412 band=2.4ghz-b scan-list=default
antenna-mode=ant-a wds-mode=disabled wds-default-bridge=none
wds-ignore-ssid=no default-authentication=yes default-forwarding=yes
default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no
security-profile=work compression=no

[admin@MikroTik] /interface bridge> print
Flags: X - disabled, R - running
0 R name="bridge1" mtu=1500 l2mtu=1526 arp=enabled
mac-address=00:15:6D:68:01:11 protocol-mode=none priority=0x8000
auto-mac=yes admin-mac=00:00:00:00:00:00 max-message-age=20s
forward-delay=15s transmit-hold-count=6 ageing-time=5m

[admin@MikroTik] /interface bridge port> print
Flags: X - disabled, I - inactive, D - dynamic
# INTERFACE BRIDGE PRIORITY PATH-COST HORIZON
0 wlan1 bridge1 0x80 10 none
1 ether1 bridge1 0x80 10 none

[admin@MikroTik] /ip> address print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 ;;; default configuration
192.168.88.200/24 192.168.88.0 192.168.88.255 ether1
1 X 192.168.1.254/24 192.168.1.1 192.168.1.255 wlan1
2 192.168.1.50/24 192.168.1.50 192.168.1.50 bridge1

[admin@MikroTik] /interface wireless> monitor
numbers: 0
status: connected-to-ess
band: 2.4ghz-b
frequency: 2437MHz
tx-rate: "1Mbps"
rx-rate: "1Mbps"
ssid: "MYNETWAN01"
bssid: 00:12:17:61:3B:35
signal-strength: -61dBm
noise-floor: -98dBm
signal-to-noise: 37dB
p-throughput: 937
authenticated-clients: 1
current-ack-timeout: 30
802.1x-port-enabled: yes
current-tx-powers: 1Mbps:28(18/28),2Mbps:28(18/28),5.5Mbps:28(18/28),
11Mbps:28(18/28)
notify-external-fdb: no


[admin@MikroTik] /ip dhcp-client> print
Flags: X - disabled, I - invalid
# INTERFACE USE-PEER-DNS ADD-DEFAULT-ROUTE STATUS ADDRESS
0 bridge1 yes yes searching...

Disable the 192.168.88.0/24 IP address. Also collapse the network and broadcast settings for the 192.168.1.50 address so that the fields go away. You filled them out wrong. Let the router fill them out again. Then try the ping test again.

On that security issue, you said the linksys uses wep, i guess you used the same thing in your RB (static keys optional or required)? - just checking. You may want to consider WPA2 for security later on.

Did you statically assign 192.168.1.254/24 to wlan1 at any time?

Connect to your RB via mac address, and clear the IP address list. Go to the route list and be sure it's cleared. Try dhcp client on bridge 1 one more time.

If it still doesn't work, first confirm that the linksys dhcp server has the full range of ip addresses (192.168.1.2-192.168.1.254) available. Apply a valid ip to bridge1 via terminal (). Check your route list and be sure it reflects the ip address you just assigned to bridge1. Now you're going to have to assign a static route ( and dns addresses (). Try pinging 192.168.1.1 again.

If it still doesn't work, then we'll have to try routing instead of bridging.

fewi:

So I disabled the 192.168.88.0/24 address, and reset the 192.168.1.50 one so that the network and broadcast fields were set up properly. I tried the ping test again and it didn't work.

eneimi:

Yes, I'm using static keys for WEP. I will move to WPA2 once I get this thing working.

I may have tried to statically assign 192.168.1.254/24 to wlan1, I can't remember anymore, I've tried so many things.

I cleared the ip address list, and confirmed the route list was cleared. I tried dhcp client on bridge 1 and I still got nothing.

I checked the linksys router and it's ip range was from 100-149 so I changed the address to 192.168.1.130/24 for bridge1. I see it in the route list.

I added the gateway 192.168.1.1 as well.

At this point I see the following for routes:

[admin@MikroTik] /ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 192.168.1.1 1
1 ADC 192.168.1.0/24 192.168.1.130 bridge1 0

To add the dns, what do I put in for ip's for the primary/secondary dns?

You'll probably have to get the dns addresses from the linksys. Otherwise connect your laptop one more time to your exisiting linksys ap (as a dhcp client) and you can read off the dns addresses from your laptop.

This step isn't really necessary to be able to ping 192.168.1.1, unless there's something like a hotspot residing on the linksys (doubt that).

Otherwise we can try routing - there may be some issue with the linksys ap and your bridge/wep etc..these things do happen!

How would I route it? I'm getting desparate....

To route:
- remove the static ip on the bridge
- remove the bridge (and bridge ports)
- remove the static route (gateway)
- remove the dns addresses (if you eventually put them in)
- put wlan1 in station mode ( instead of station pseudobridge) and set security and connect to the linksys
- dhcp client on wlan1 (it will be really weird if it doesn't get an ip now!) - the rest of the setup depends on this
- assign static ip address to ether1
- you can then run dhcp server setup on ether1 (for your pc)
- include nat entry in firewall filter rules ()
- that's it

With all of that disabled, and simply the DHCP client setup on wlan1, it still says "searching"

This is my primary problem.

aha! I turned off the wep on the linksys ap, and I got an ip!

What does this mean? How do I properly setup wep?

OK, I finally solved the problem.

I had entered the static keys through the WinBox GUI, and it didn't work. I ended up printing out the security profiles through the terminal and found the issue. The static-algo for the key didn't specify the key length (wep can be either 40bits, 104bits, etc.) I set the static-algo-1 parameter through the terminal, and bingo, it connected.

I guess people don't use WEP enough to have seen this issue.

Thanks for all the help guys, now hopefully I can get this thing working!

OK, so now my wlan1 is connected and getting an ip from my linksys router.
I've got a DHCP server setup on ether1. The PC is getting a proper IP assignment from it, and the DHCP server IP is correct as well.
The DNS entries aren't set up properly though, and I don't have internet access. Do I need to add some entries under DHCP Server Networks for DNS Servers/DNS Domains etc?

DNS addresses should be assigned automatically once you're a dhcp client.
Go back and double click the dhcp client entry and be sure that 'use peer dns', 'use peer ntp' and 'add default route' are all checked. And then release and renew the dhcp client.
Then confirm in ip dns settings and ip route that you now have a default gateway and dns addresses. Also check that there's an automatic route set for your ether1 dhcp server. Also check in 'ip firewall nat' that you're counter is increasing when you try browsing, if not change out-int=wlan1 to src-add=x.x.x.0/24 (your ether1 dhcp server network address), though the former should work just fine.

So things started working better when I changed the dhcp ip pool ip's to the 192.168.88.* range.

I still can't connect to the internet though.

when I type ipconfig /all on the pc I get.

Ip Address 192.168.88.98
subnet mask 255.255.255.0
default gateway 192.168.88.1
dhcp server 192.168.88.200
dns servers 192.168.1.1
206.41.81.4

I think I finally have it all working.

It turns out something was wrong with the ethernet on the laptop I was using. I tried another laptop and it's all good, working with masquerade with out-int=wlan1.

Thanks for all the help guys!

Why don't we reset and start afresh - using a bridged setup. Should be a cakewalk this time.
Just note your wep settings, station pseudobridge instead of station, dhcp client is on bridge1 (no static ip addresses, no need for nat rule) and disable or remove default ip after reset - after this you should be home dry.

How do the two setups compare? What are the pro's/con's?

Wouldn't the setup I have working now be better since it isolates clients from the AP?

Here we go again....

I switched to wpa2 personal on my ap, and now I can't get my dhcp client to work again.....

sigh..

Have you tried disabling wireless security to see if it works?

Yes, it works with wireless security disabled and with wep, however I haven't been able to get it to work with wpa2.

Are you able to browse from your mikrotik box after you disable security?

Be sure you got the wpa2 settings right - EAP or PSK, supplicant identity or preshared key, AES or TKIP encryption. wpa2-PSK is simpler than EAP and you need to be sure which encryption type your linksys supports.

http://wiki.mikrotik.com/wiki/Manual:In ... properties

@spooling

I may have misunderstood the setup you wanna do, but just for the record. If you already have a LAN running with another router distributing the IP's to your lan clients. And you only want to use the RB as an AP, then it is very simple. you just delete all rules in the RB e.g. by doing a master reset and deselect the standard setup. then activate the switch function and make you ethernet interface the master interface and assign the WLAN interface to the same switch.

rgs Pilgrim

Hey guys. I've been away for awhile. I've got my setup working, however I was never able to get the wpa2-psk working.

It isn't a big deal to me since I don't need it, but I could't figure it out.

The router setup is working well for me now. I'm a happy camper.

There is a bug with the latest BETA wep key setup though. Is there a way to report bugs to MicroTik?

Thanks again everyone for all the help.