It's very simple question and config file, the internal computer ping gateway router is no problem,

but router can't ping internal client, (client computer without any firewall, it's a devices/machine)

Please help, this problem caused I can't use Radius server, it's URGENT

the configuration information as below:


# aug/22/2014 01:12:55 by RouterOS 6.18
# software id = 6WAP-4P60
#
/interface bridge
add l2mtu=1598 name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=\
20/40mhz-ht-above disabled=no frequency=2412 l2mtu=2290 ssid=CDC
/ip hotspot profile
set [ find default=yes ] use-radius=yes
/ip pool
add name=pool1 ranges=192.168.88.20-192.168.88.200
/ip dhcp-server
add address-pool=pool1 disabled=no interface=bridge1 name=server1
/ip hotspot
add address-pool=pool1 disabled=no idle-timeout=none interface=bridge1 name=\
server1
/ip hotspot user profile
set [ find default=yes ] add-mac-cookie=no address-pool=pool1 shared-users=5
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=wlan1
/ip address
add address=192.168.1.63/23 interface=ether1 network=192.168.0.0
add address=192.168.88.1/24 interface=bridge1 network=192.168.88.0
/ip dhcp-server network
add address=192.168.88.0/24 dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat
/ip hotspot user
add name=1 password=1
/ip hotspot walled-garden
add comment="place hotspot rules here" disabled=yes
/ip hotspot walled-garden ip
add action=accept disabled=no dst-address=192.168.88.1
add action=accept disabled=no dst-address=192.168.88.10
/ip route
add distance=1 gateway=ether1
/ip upnp
set allow-disable-external-interface=no
/radius
add address=192.168.88.10 secret=111 service=hotspot
/radius incoming
set accept=yes port=1700
/system leds
set 0 interface=wlan1
/system ntp client
set enabled=yes primary-ntp=137.189.4.10
/system routerboard settings
set cpu-frequency=500MHz

by the way, the internal devices ping each other also no problem. it means I can ping 192.168.88.10 from 192.168.88.200

the problem is why router(192.168.88.1) can't ping internal (192.168.88.10) devices?

Please advise, Thanks a lot.

Sorry, this problem resolved by myself, I forgot to setup ethernet master port.


Please close this post.

Just change the subject line, to solved.

http://forum.mikrotik.com/posting.php?m ... 1&p=443574