MikroTik RouterOS • View topic

costasppc · **Posted:** Wed May 25, 2011 2:14 pm

Hello,

We have a Mikrotik RB450 (no miniPCI). I need to add wireless capability in order to use the hotspot function. I have been told that I can use a regular wireless AP in bridge mode with one of the ethernet ports.

Can someone help me how can I bridge one of the en interfaces with an AP?

Regards
Kostas

fewi · **Posted:** Wed May 25, 2011 3:23 pm

If your Hotspot is configured on ether2, and ether3 is available, set the master-port of ether3 to ether2. The two are now bridged via the built in chipset at wire speed. Now plug a LAN port of the AP into ether3, give the AP an IP on the Hotspot network (yuck), and turn off the DHCP server on the AP. That's it.

costasppc · **Posted:** Wed May 25, 2011 3:50 pm

fewi wrote:

If your Hotspot is configured on ether2, and ether3 is available, set the master-port of ether3 to ether2. The two are now bridged via the built in chipset at wire speed. Now plug a LAN port of the AP into ether3, give the AP an IP on the Hotspot network (yuck), and turn off the DHCP server on the AP. That's it.

Thank you. How can i set the master-port?

Kostas

fewi · **Posted:** Wed May 25, 2011 3:52 pm

Code:

/interface ethernet { set [find name=ether3] master-port=ether2 };

Or double click it in winbox and set that dropdown.

laithmikrotik · **Posted:** Wed May 25, 2011 8:30 pm

nice continuation

costasppc · **Posted:** Thu Jun 09, 2011 4:43 pm

Thanks for the answers, it works fine.

How can I set firewall in order to permit access only to common "surfing" ports (like 80, 443, 25, 143 etc).

Regards

Kostas

fewi · **Posted:** Thu Jun 09, 2011 4:47 pm

http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter

Configure filters in the forward chain that take into account the destination port, protocol, and in-interface.

Code:

/ip firewall filter
add chain=forward connection-state=established action=accept
add chain=forward connection-state=related action=accept
add chain=forward connection-state=invalid action=accept
add chain=forward in-interface=LAN protocol=tcp dst-port=80,443
add chain=forward in-interface=LAN protocol=udp dst-port=53
add chain=forward action=drop

Not to be snippy, but all of these questions are answered in the manual.

costasppc · **Posted:** Thu Jun 09, 2011 5:12 pm

Thank you!

Yes, they are on the manual....

Can I use Winbox for that?

fewi · **Posted:** Thu Jun 09, 2011 5:19 pm

Yes. Just click the "New Terminal" button to get a command line interface.

Or translate it into GUI actions. It translates 1:1:

Code:

/ip firewall filter
add chain=forward connection-state=established action=accept

Click on the IP button, select the Firewall button. Go to the Filter tab. Click + to add a rule. Set the Chain dropdown to 'forward', the Connection State dropdown to 'established', and the Action drop down to 'accept'. Rinse and repeat for the other rules.

costasppc · **Posted:** Thu Jun 09, 2011 5:36 pm

Thank you! I will try it.

Who is online