Hi Everyone,
I have just purchased this station and I have major configuration problems.
I am a beginner and I have trouble with WinBox and RouterOS. No correct documentation (or non-existent) and for the settings (variables, values) there is not much on WinBox, or they are old versions that do not correspond to my v7.15.3.
My network diagram is simple, two routers in series, one switch where are devices.:
- ISP Router IP: 192.168.1.1 →
- wire connected to ISP Router, my “Tp-Link DecoM5” and its IP is DHCP acquired, DecoM5 is configured to Router Mode for 192.168.168.1/24 with DHCP Server (all devices connected are in this range)->
- wire connected a Netgear G S305E switch to my Tp-Link DecoM5
- On the Netgear switch I plugged:
- 2 pieces Deco M5 (Mesh working)
- the Mikrotik mANTbox ax 15s (192.168.168.247)
- and devices (TV, AndroidBox, printers, PV inverter, etc. and I reserved IP addresses in DHCP)
All roaming devices are connected by DecoM4 mesh WiFi (2.4 or 5GHz)
First time, I followed steps 1,2,3,4 of the RouterOS default script:
#| Welcome to RouterOS!
#| 1) Set a strong router password in the System > Users menu
#| 2) Upgrade the software in the System > Packages menu
#| 3) Enable firewall on untrusted networks
#| 4) Set your country name to observe wireless regulations
#| -----------------------------------------------------------------------------
#| WISP Bridge:
#| * wireless and LAN interfaces are bridged;
#| wifi1 Configuration:
#| mode: ap;
#| band: 2ghz-ax;
#| tx-chains: 0;1;
#| rx-chains: 0;1;
#| installation: outdoor;
#| ht-extension: 20/40mhz;
#| wpa2: yes;
#| wifi2 Configuration:
#| mode: ap;
#| band: 5ghz-ax;
#| tx-chains: 0;1;
#| rx-chains: 0;1;
#| installation: outdoor;
#| ht-extension: 20/40/80mhz;
#| wpa2: yes;
#| LAN Configuration:
#| DHCP Client: enabled on bridge (LAN port);
#| Login
#| admin user protected by password
:global ssid;
:global defconfMode;
:log info "Starting defconf script";
#-------------------------------------------------------------------------------
# Apply configuration.
# these commands are executed after installation or configuration reset
#-------------------------------------------------------------------------------
:if ($action = "apply") do={
# wait for interfaces
:local count 0;
:while ([/interface ethernet find] = "") do={
:if ($count = 30) do={
:log warning "DefConf: Unable to find ethernet interfaces";
/quit;
}
:delay 1s; :set count ($count +1);
};
:local count 0;
:while ([/interface wifi print count-only] < 2) do={
:set count ($count +1);
:if ($count = 40) do={
:log warning "DefConf: Unable to find wireless interface(s)";
/ip address add address=192.168.88.1/24 interface=ether1 comment="defconf";
/quit
}
:delay 1s;
};
/interface wifi {
:local ifcId [/interface wifi find where default-name=wifi1]
set $ifcId configuration.mode=ap channel.band=2ghz-ax disabled=no
set $ifcId channel.width=20/40mhz;
set $ifcId channel.skip-dfs-channels=10min-cac;
set $ifcId security.authentication-types=wpa2-psk,wpa3-psk security.passphrase=$defconfWifiPassword security.ft=yes security.ft-over-ds=yes
:local wlanMac [/interface get [/interface find where default-name=wifi1] mac-address];
:set ssid "MikroTik-$[:pick $wlanMac 9 11]$[:pick $wlanMac 12 14]$[:pick $wlanMac 15 17]"
set $ifcId configuration.ssid=$ssid
}
/interface wifi {
:local ifcId [/interface wifi find where default-name=wifi2]
set $ifcId configuration.mode=ap channel.band=5ghz-ax disabled=no
set $ifcId channel.width=20/40/80mhz;
set $ifcId channel.skip-dfs-channels=10min-cac;
set $ifcId security.authentication-types=wpa2-psk,wpa3-psk security.passphrase=$defconfWifiPassword security.ft=yes security.ft-over-ds=yes
:local wlanMac [/interface get [/interface find where default-name=wifi1] mac-address];
:set ssid "MikroTik-$[:pick $wlanMac 9 11]$[:pick $wlanMac 12 14]$[:pick $wlanMac 15 17]"
set $ifcId configuration.ssid=$ssid
}
/interface bridge
add name=bridge disabled=no auto-mac=yes protocol-mode=rstp comment=defconf;
:local bMACIsSet 0;
:foreach k in=[/interface find where !(slave=yes || passthrough=yes || type=loopback || name~"bridge")] do={
:local tmpPortName [/interface get $k name];
:if ($bMACIsSet = 0) do={
:if ([/interface get $k type] = "ether") do={
/interface bridge set "bridge" auto-mac=no admin-mac=[/interface get $tmpPortName mac-address];
:set bMACIsSet 1;
}
}
:if (([/interface get $k type] != "ppp-out") && ([/interface get $k type] != "lte")) do={
/interface bridge port
add bridge=bridge interface=$tmpPortName comment=defconf;
}
}
/ip dhcp-client add interface=bridge disabled=no comment="defconf";
:if (!($keepUsers = "yes")) do={
:if (!($defconfPassword = "" || $defconfPassword = nil)) do={
/user set admin password=$defconfPassword
:delay 0.5
/user expire-password admin
}
}
}
#-------------------------------------------------------------------------------
# Revert configuration.
# these commands are executed if user requests to remove default configuration
#-------------------------------------------------------------------------------
:if ($action = "revert") do={
:if (!($keepUsers = "yes")) do={
/user set admin password=""
:delay 0.5
/user expire-password admin
}
/ip firewall filter remove [find comment~"defconf"]
/ipv6 firewall filter remove [find comment~"defconf"]
/ipv6 firewall address-list remove [find comment~"defconf"]
/ip firewall nat remove [find comment~"defconf"]
/interface list member remove [find comment~"defconf"]
/interface detect-internet set detect-interface-list=none
/interface detect-internet set lan-interface-list=none
/interface detect-internet set wan-interface-list=none
/interface detect-internet set internet-interface-list=none
/interface list remove [find comment~"defconf"]
/tool mac-server set allowed-interface-list=all
/tool mac-server mac-winbox set allowed-interface-list=all
/ip neighbor discovery-settings set discover-interface-list=!dynamic
:local o [/ip dhcp-server network find comment="defconf"]
:if ([:len $o] != 0) do={ /ip dhcp-server network remove $o }
:local o [/ip dhcp-server find name="defconf" !disabled]
:if ([:len $o] != 0) do={ /ip dhcp-server remove $o }
/ip pool {
:local o [find name="default-dhcp" ranges=192.168.88.10-192.168.88.254]
:if ([:len $o] != 0) do={ remove $o }
}
:local o [/ip dhcp-client find comment="defconf"]
:if ([:len $o] != 0) do={ /ip dhcp-client remove $o }
/ip dns {
set allow-remote-requests=no
:local o [static find comment="defconf"]
:if ([:len $o] != 0) do={ static remove $o }
}
/ip address {
:local o [find comment="defconf"]
:if ([:len $o] != 0) do={ remove $o }
}
:foreach iface in=[/interface ethernet find] do={
/interface ethernet set $iface name=[get $iface default-name]
}
/interface bridge port remove [find comment="defconf"]
/interface bridge remove [find comment="defconf"]
/interface bonding remove [find comment="defconf"]
/interface wifi reset wifi1
/interface wifi reset wifi2
}
:log info Defconf_script_finished;
:set defconfMode;
:set ssid;
In WinBox, Quick Set I have only Home AP.
Here, I can’t enter in Local Network the IP Address: 192.168.88.1 or other IP with their Netmask and check DHCP Server and the range, after Apply and OK button mANTbox lose the network, unable to connect to mANTbox. I tried at least 30-40 times, it’s the same.
Every time I must make a hard reset on the mANTbox to try again with, with another values, settings.
If I do not complete the Local Network section, and I close the window (this means that it is my DecoM5 router that distributes the IP addresses for mANTbox clients), I can change settings in Interfaces, WiFi, etc. WiFi 2.4 and 5GHz works but the tx-power is verry poor, 20-40 meters.
If I fiddle with WiFi settings in the Configuration tab, I can increase the tx-power, but either WiFi 2.4 or WiFi 5GHz does not work anymore.
I need a distance of about 250m practically free of any obstacles, no neighbors.
My first question: how to configure the mANTbox in AP mode to working in a separate network from my DecoM5 router, DHCP in 192.168.88.0/24 for example.
Others questions later, for range adjustments (what are variables Chains, Tx Chains, Tx Power, Antenna Gain, etc.)
Thanks for your help
, what you report is pretty much normal, it is very easy (and common enough) to get locked out of a Mikrotik device the first few times, particularly with devices like the Mantbox with only one ethernet port, as an example if the port is characterized as WAN there may be a firewall rule that prevent connection and another one allowing Winbix only to connect only from LAN.