Community discussions

MikroTik App
 
Mike33
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 52
Joined: Tue Jun 25, 2013 2:13 am

SXT Lite2 (RouterOS 5.25) - firewall setup

Tue Jun 25, 2013 4:06 am

I need to do the following:

1) configure the device so that it served as the access point;

2) filter traffic passing between the wireless and ethernet segments.

I combined wireless and ethernet ports in the bridge and try to configure the firewall.
I found that in this case there are two firewalls:
1) /interface bridge filter
2) /ip firewall filter

Tell me please, what the difference between them?
It's really two different independent firewalls or the two interfaces to the same firewall?
If they are two different firewalls, whether there can be problems with the simultaneous operation of both?
 
Mike33
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 52
Joined: Tue Jun 25, 2013 2:13 am

Re: SXT Lite2 (RouterOS 5.25) - firewall setup

Tue Jun 25, 2013 2:32 pm

help please!
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26975
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia
Contact:

Re: SXT Lite2 (RouterOS 5.25) - firewall setup

Tue Jun 25, 2013 2:37 pm

SXT Lite cannot be configured to be an access point. It is a CPE (client) device only

Have you looked at the manual?
 
Mike33
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 52
Joined: Tue Jun 25, 2013 2:13 am

Re: SXT Lite2 (RouterOS 5.25) - firewall setup

Tue Jun 25, 2013 3:22 pm

SXT Lite cannot be configured to be an access point. It is a CPE (client) device only
Have you looked at the manual?
Yes.
I've done everything according to the instructions - http://wiki.mikrotik.com/wiki/Manual:TOC

I did a full reset, and then entered the commands:
/interface ethernet set 0 name=ether_if
/interface wireless set 0 name=wi-fi_if

/ip address set [/ip address find interface=ether_if] address=192.168.100.150/24

/interface wireless security-profiles set [ find default=yes ] mode=static-keys-required static-algo-0=104bit-wep static-key-0=".........................." static-transmit-key=key-0

/interface wireless set 0 mode=ap-bridge ssid="........" wireless-protocol=802.11 band=2ghz-b channel-width=20mhz country=russia frequency-mode=regulatory-domain bridge-mode=disabled security-profile=default allow-sharedkey=yes default-authentication=no default-forwarding=no hide-ssid=yes max-station-count=20

/interface wireless access-list add mac-address=00:00:00:00:00:00 authentication=no forwarding=no interface=all
/interface wireless access-list add mac-address=................ authentication=yes forwarding=no interface=all place-before=0
/interface wireless access-list add mac-address=................ authentication=yes forwarding=no interface=all place-before=0

/interface bridge remove [/interface bridge find]
/interface bridge add name=bridge_if
/interface bridge port add bridge=bridge_if interface=ether_if edge=yes
/interface bridge port add bridge=bridge_if interface=wi-fi_if edge=yes
As a result, I was connected to the wi-fi-network using a laptop and a specialized data collection terminal.
 
Mike33
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 52
Joined: Tue Jun 25, 2013 2:13 am

Re: SXT Lite2 (RouterOS 5.25) - firewall setup

Wed Jun 26, 2013 2:14 pm

I found that in this case there are two firewalls:
1) /interface bridge filter
2) /ip firewall filter

Tell me please, what the difference between them?
It's really two different independent firewalls or the two interfaces to the same firewall?
If they are two different firewalls, whether there can be problems with the simultaneous operation of both?

help please!
 
Mike33
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 52
Joined: Tue Jun 25, 2013 2:13 am

Re: SXT Lite2 (RouterOS 5.25) - firewall setup

Thu Jun 27, 2013 3:25 am

Thank you all. Everything works fine.
I was helped here – http://forum.nag.ru/forum/index.php?showtopic=86164
So probably MikroTik will have a new regular customer :)
 
User avatar
janisk
MikroTik Support
MikroTik Support
Posts: 6263
Joined: Tue Feb 14, 2006 9:46 am
Location: Riga, Latvia

Re: SXT Lite2 (RouterOS 5.25) - firewall setup

Thu Jun 27, 2013 12:16 pm

I found that in this case there are two firewalls:
1) /interface bridge filter
2) /ip firewall filter

Tell me please, what the difference between them?
It's really two different independent firewalls or the two interfaces to the same firewall?
If they are two different firewalls, whether there can be problems with the simultaneous operation of both?

these are two independent things. However, you can set bridge to pass through ip firewall by setting appropriate settings. see wiki.mikrotik.com for more details.
 
Mike33
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 52
Joined: Tue Jun 25, 2013 2:13 am

Re: SXT Lite2 (RouterOS 5.25) - firewall setup

Thu Jul 18, 2013 5:45 am

I found that in this case there are two firewalls:
1) /interface bridge filter
2) /ip firewall filter

Tell me please, what the difference between them?
It's really two different independent firewalls or the two interfaces to the same firewall?
If they are two different firewalls, whether there can be problems with the simultaneous operation of both?

these are two independent things. However, you can set bridge to pass through ip firewall by setting appropriate settings. see wiki.mikrotik.com for more details.
thx!
 
zoro238
just joined
Posts: 16
Joined: Wed Dec 23, 2015 8:44 pm

Re: SXT Lite2 (RouterOS 5.25) - firewall setup

Mon Dec 28, 2015 11:34 pm

I bought a sxt lite 2 but refuses to work on ap
What do I do works AP ??