Page 1 of 1
SXT Lite2 (RouterOS 5.25) - firewall setup
Posted: Tue Jun 25, 2013 4:06 am
by Mike33
I need to do the following:
1) configure the device so that it served as the access point;
2) filter traffic passing between the wireless and ethernet segments.
I combined wireless and ethernet ports in the bridge and try to configure the firewall.
I found that in this case there are two firewalls:
1) /interface bridge filter
2) /ip firewall filter
Tell me please, what the difference between them?
It's really two different independent firewalls or the two interfaces to the same firewall?
If they are two different firewalls, whether there can be problems with the simultaneous operation of both?
Re: SXT Lite2 (RouterOS 5.25) - firewall setup
Posted: Tue Jun 25, 2013 2:32 pm
by Mike33
help please!
Re: SXT Lite2 (RouterOS 5.25) - firewall setup
Posted: Tue Jun 25, 2013 2:37 pm
by normis
SXT Lite cannot be configured to be an access point. It is a CPE (client) device only
Have you looked at the manual?
Re: SXT Lite2 (RouterOS 5.25) - firewall setup
Posted: Tue Jun 25, 2013 3:22 pm
by Mike33
SXT Lite cannot be configured to be an access point. It is a CPE (client) device only
Have you looked at the manual?
Yes.
I've done everything according to the instructions -
http://wiki.mikrotik.com/wiki/Manual:TOC
I did a full reset, and then entered the commands:
/interface ethernet set 0 name=ether_if
/interface wireless set 0 name=wi-fi_if
/ip address set [/ip address find interface=ether_if] address=192.168.100.150/24
/interface wireless security-profiles set [ find default=yes ] mode=static-keys-required static-algo-0=104bit-wep static-key-0=".........................." static-transmit-key=key-0
/interface wireless set 0 mode=ap-bridge ssid="........" wireless-protocol=802.11 band=2ghz-b channel-width=20mhz country=russia frequency-mode=regulatory-domain bridge-mode=disabled security-profile=default allow-sharedkey=yes default-authentication=no default-forwarding=no hide-ssid=yes max-station-count=20
/interface wireless access-list add mac-address=00:00:00:00:00:00 authentication=no forwarding=no interface=all
/interface wireless access-list add mac-address=................ authentication=yes forwarding=no interface=all place-before=0
/interface wireless access-list add mac-address=................ authentication=yes forwarding=no interface=all place-before=0
/interface bridge remove [/interface bridge find]
/interface bridge add name=bridge_if
/interface bridge port add bridge=bridge_if interface=ether_if edge=yes
/interface bridge port add bridge=bridge_if interface=wi-fi_if edge=yes
As a result, I was connected to the wi-fi-network using a laptop and a specialized data collection terminal.
Re: SXT Lite2 (RouterOS 5.25) - firewall setup
Posted: Wed Jun 26, 2013 2:14 pm
by Mike33
I found that in this case there are two firewalls:
1) /interface bridge filter
2) /ip firewall filter
Tell me please, what the difference between them?
It's really two different independent firewalls or the two interfaces to the same firewall?
If they are two different firewalls, whether there can be problems with the simultaneous operation of both?
help please!
Re: SXT Lite2 (RouterOS 5.25) - firewall setup
Posted: Thu Jun 27, 2013 3:25 am
by Mike33
Thank you all. Everything works fine.
I was helped here –
http://forum.nag.ru/forum/index.php?showtopic=86164
So probably MikroTik will have a new regular customer
Re: SXT Lite2 (RouterOS 5.25) - firewall setup
Posted: Thu Jun 27, 2013 12:16 pm
by janisk
I found that in this case there are two firewalls:
1) /interface bridge filter
2) /ip firewall filter
Tell me please, what the difference between them?
It's really two different independent firewalls or the two interfaces to the same firewall?
If they are two different firewalls, whether there can be problems with the simultaneous operation of both?
these are two independent things. However, you can set bridge to pass through ip firewall by setting appropriate settings. see wiki.mikrotik.com for more details.
Re: SXT Lite2 (RouterOS 5.25) - firewall setup
Posted: Thu Jul 18, 2013 5:45 am
by Mike33
I found that in this case there are two firewalls:
1) /interface bridge filter
2) /ip firewall filter
Tell me please, what the difference between them?
It's really two different independent firewalls or the two interfaces to the same firewall?
If they are two different firewalls, whether there can be problems with the simultaneous operation of both?
these are two independent things. However, you can set bridge to pass through ip firewall by setting appropriate settings. see wiki.mikrotik.com for more details.
thx!
Re: SXT Lite2 (RouterOS 5.25) - firewall setup
Posted: Mon Dec 28, 2015 11:34 pm
by zoro238
I bought a sxt lite 2 but refuses to work on ap
What do I do works AP ??