Community discussions

MikroTik App
 
User avatar
PCNetworks
newbie
Topic Author
Posts: 35
Joined: Tue Feb 19, 2013 7:57 am
Location: California

MESH Configuration AP to AP Connection Issue Error on 2 of 5 Link's

Wed Apr 01, 2015 5:21 am

Routerboard 435G / Mikrotik R52HN Mini-PCI Adapter Dual band IEEE 802.11a/b/g/n standard
ROS Version: 6.27
License Level: 5

I have a small distribution system I am working on which has a total of 5 links.

They are all configured identically short of the fact that all links beyond the main utilize the IP of the primary link's DNS (DNS should have nothing to do with this issue however)...

Utilizing: http://wiki.mikrotik.com/wiki/Wireless_WDS_Mesh

All Link's are configured as:
AP Bridge
Same Frequency: 2412
Channel Width: 20Mhz
Same SSID: PFRP
Same Security Profile
2Ghz B/G
WDS Mode: Dynamic Mesh
Mesh: Mesh-Interface
Mesh Port: wlan1

I have this identical configuration in other sites and they work flawlessly.

I have configured a DHCP server on the primary link to hand IP's to all other link's wireless interfaces VIA the Mesh-Interface.
The first 3 links after configuration acquired their wireless adapter IP's successfully and each device has full connectivity to the world and to other connected devices.

The last 2 links for some reason WILL NOT acquire an IP address!
To verify connectivity I can place the 2 problem routers into either "station" OR "station bridge" and they successfully connect to their neighbors, acquire a WLAN IP and gain full communications to the world and to other devices within the network.

On each router I have the following Access & Connect Rules; Connect or Access rules are disabled or deleted which would otherwise possibly create some form of connection to or access issues TO themselves.

In the Access Rules... I have tried "interface=wlan1" && "interface=all" with identical outcome.
/interface wireless access-list
add comment="AP-MESH-1 Access Rule" interface=all mac-address=D4:CA:6D:11:B0:69
add comment="AP-MESH-2 Access Rule" interface=all mac-address=D4:CA:6D:11:B0:53
add comment="AP-MESH-3 Access Rule" interface=all mac-address=D4:CA:6D:11:B0:59
add comment="AP-MESH-4 Access Rule" interface=all mac-address=D4:CA:6D:11:B0:4D
add comment="AP-MESH-5 Access Rule" interface=all mac-address=D4:CA:6D:11:B0:1E

/interface wireless connect-list
add comment="AP-MESH-1 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:69 security-profile=Private ssid=PFRP
add comment="AP-MESH-2 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:53 security-profile=Private ssid=PFRP
add comment="AP-MESH-3 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:59 security-profile=Private ssid=PFRP
add comment="AP-MESH-4 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:4D security-profile=Private ssid=PFRP
add comment="AP-MESH-5 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:1E security-profile=Private ssid=PFRP
I will say that I do utilize this configuration successfully in other sites, this anomaly ONLY exists within these two links.
All antennas are identical alike.

UPDATE: Today more disconnections occurred on links which were connecting trouble-free, I ran a scan of the frequencies and 2412Mhz is clean.

Exports from 4 of the 5 links

Links 2 & 5 each display the identical situation: WLAN DHCP is always searching and never acquires, the Mesh interface is in a searching state continually alike. Link 4 began disconnecting today alike.

Link 2
/interface mesh
add comment="WLAN MESH" name=Mesh-Intefrace
/ip neighbor discovery
set Mesh-Intefrace comment="WLAN MESH"
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=tkip

management-protection=allowed mode=\
    dynamic-keys name=Private supplicant-identity="" unicast-ciphers=tkip wpa-pre-shared-key=\
    "6HVRG#LbS#9LkZ\\hP+C%axSp,F7R2nR8"

wpa2-pre-shared-key="6HVRG#LbS#9LkZ\\hP+C%axSp,F7R2nR8"
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g country="united states" disabled=no frequency=2412

l2mtu=2290 mode=\
    ap-bridge radio-name=LK-MESH-2 security-profile=Private ssid=PFRP

wds-default-bridge=Mesh-Intefrace wds-mode=\
    dynamic-mesh
/interface wireless nstreme
set wlan1 enable-nstreme=yes
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name=pool1 ranges=192.168.89.100-192.168.89.106
/ip dhcp-server
add add-arp=yes address-pool=pool1 always-broadcast=yes bootp-support=dynamic disabled=no

interface=ether1 lease-time=3d \
    name=server1 src-address=192.168.89.1
/port
set 0 name=serial0
/system logging action
set 0 memory-lines=100
set 1 disk-lines-per-file=100
/interface mesh port
add comment="WLAN MESH Port" interface=wlan1 mesh=Mesh-Intefrace
/interface wireless access-list
add comment="LK-MESH-1 Access Rule" mac-address=D4:CA:6D:11:B0:69
add comment="LK-MESH-2 Access Rule" disabled=yes mac-address=D4:CA:6D:11:B0:53
add comment="LK-MESH-3 Access Rule" mac-address=D4:CA:6D:11:B0:59
add comment="LK-MESH-4 Access Rule" mac-address=D4:CA:6D:11:B0:4D
add comment="LK-MESH-5 Access Rule" mac-address=D4:CA:6D:11:B0:1E
/interface wireless connect-list
add comment="LK-MESH-1 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:69

security-profile=Private ssid=PFRP
add comment="LK-MESH-2 Connect Rule" disabled=yes interface=wlan1

mac-address=D4:CA:6D:11:B0:53 security-profile=Private \
    ssid=PFRP
add comment="LK-MESH-3 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:59

security-profile=Private ssid=PFRP
add comment="LK-MESH-4 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:4D

security-profile=Private ssid=PFRP
add comment="LK-MESH-5 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:1E

security-profile=Private ssid=PFRP
/ip accounting
set account-local-traffic=yes enabled=yes
/ip accounting web-access
set accessible-via-web=yes
/ip address
add address=192.168.89.1/24 comment="DHCP    eth1" interface=ether1 network=192.168.89.0
add address=10.0.0.50/24 interface=Mesh-Intefrace network=10.0.0.0
/ip dhcp-client
add comment="MESH DHCP Client" default-route-distance=0 dhcp-options=hostname,clientid

disabled=no interface=\
    Mesh-Intefrace
/ip dhcp-server network
add address=192.168.89.0/24 comment="LAN DHCP Network" dns-server=192.168.89.1

gateway=192.168.89.1 netmask=24 \
    ntp-server=64.6.144.6,64.147.116.229
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=10.0.0.1 name=router
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat out-interface=Mesh-Intefrace
/ip packing
add interface=ether1
add interface=wlan1
/ip proxy
set cache-path=web-proxy1
/ip service
set api disabled=yes
/ip smb
set enabled=yes
/ip traffic-flow
set cache-entries=4k enabled=yes
/ip traffic-flow target
add address=10.10.10.0:1234 version=5
add address=10.0.0.0:1234 version=5
add address=192.168.88.0:1234 version=5
add address=192.168.10.0:1234 version=5
add address=192.168.11.0:1234 version=5
add address=192.168.12.0:1234 version=5
add address=192.168.13.0:1234 version=5
add address=192.168.1.1:1234 version=5
/system clock
set time-zone-autodetect=no
/system identity
set name=LK-MESH-2
/system ntp client
set enabled=yes primary-ntp=64.6.144.6 secondary-ntp=64.147.116.229
/system watchdog
set automatic-supout=no no-ping-delay=0ms watchdog-timer=no
/tool graphing interface
add
/tool graphing queue
add
/tool graphing resource
add

Link 3
/interface mesh
add comment="WLAN MESH" name=Mesh-Interface
/ip neighbor discovery
set Mesh-Interface comment="WLAN MESH"
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk,wpa-eap,wpa2-eap group-ciphers=tkip management-protection=allowed mode=dynamic-keys name=Private supplicant-identity="" unicast-ciphers=\
    tkip wpa-pre-shared-key="6HVRG#LbS#9LkZ\\hP+C%axSp,F7R2nR8" wpa2-pre-shared-key="6HVRG#LbS#9LkZ\\hP+C%axSp,F7R2nR8"
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g country="united states" disabled=no frequency=2412 l2mtu=2290 mode=ap-bridge radio-name=LK-MESH-3 security-profile=Private ssid=PFRP \
    wds-default-bridge=Mesh-Interface wds-mode=dynamic-mesh
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name=pool1 ranges=192.168.92.100-192.168.92.106
/ip dhcp-server
add add-arp=yes address-pool=pool1 always-broadcast=yes bootp-support=dynamic disabled=no interface=ether1 lease-time=42w6d name=server1 src-address=192.168.92.1
/port
set 0 name=serial0
/system logging action
set 0 memory-lines=100
set 1 disk-lines-per-file=100
/interface mesh port
add comment="WLAN MESH Port" interface=wlan1 mesh=Mesh-Interface
/interface wireless access-list
add comment="LK-MESH-1 Access Rule" mac-address=D4:CA:6D:11:B0:69
add comment="LK-MESH-2 Access Rule" mac-address=D4:CA:6D:11:B0:53
add comment="LK-MESH-3 Access Rule" disabled=yes mac-address=D4:CA:6D:11:B0:59
add comment="LK-MESH-4 Access Rule" mac-address=D4:CA:6D:11:B0:4D
add comment="LK-MESH-5 Access Rule" mac-address=D4:CA:6D:11:B0:1E
/interface wireless connect-list
add comment="LK-MESH-1 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:69 security-profile=Private ssid=PFRP
add comment="LK-MESH-2 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:53 security-profile=Private ssid=PFRP
add comment="LK-MESH-3 Connect Rule" disabled=yes interface=wlan1 mac-address=D4:CA:6D:11:B0:59 security-profile=Private ssid=PFRP
add comment="LK-MESH-4 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:4D security-profile=Private ssid=PFRP
add comment="LK-MESH-5 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:1E security-profile=Private ssid=PFRP
/ip accounting
set account-local-traffic=yes enabled=yes
/ip accounting web-access
set accessible-via-web=yes
/ip address
add address=192.168.92.1/24 comment="LAN  PoE  eth1" interface=ether1 network=192.168.92.0
/ip dhcp-client
add comment="MESH DHCP Client" default-route-distance=0 dhcp-options=hostname,clientid disabled=no interface=Mesh-Interface
/ip dhcp-server network
add address=192.168.92.0/24 dns-server=192.168.92.1 gateway=192.168.92.1 netmask=24 ntp-server=64.6.144.6,64.147.116.229
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=10.0.0.1 name=router
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat out-interface=Mesh-Interface
/ip packing
add interface=ether1
add interface=wlan1
/ip proxy
set cache-path=web-proxy1 parent-proxy=0.0.0.0[admin@LK-MESH-5] > export
# apr/01/2015 20:20:45 by RouterOS 6.27
# software id = EZVF-FEL7
#
/interface mesh
add comment="WLAN MESH" name=Mesh-Interface
/ip neighbor discovery
set Mesh-Interface comment="WLAN MESH"
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=tkip management-protection=allowed mode=dynamic-keys name=Private supplicant-identity=\
    "" unicast-ciphers=tkip wpa-pre-shared-key="6HVRG#LbS#9LkZ\\hP+C%axSp,F7R2nR8" wpa2-pre-shared-key="6HVRG#LbS#9LkZ\\hP+C%axSp,F7R2nR8"
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g country="united states" disabled=no frequency=2412 l2mtu=2290 mode=ap-bridge radio-name=LK-MESH-5 \
    security-profile=Private ssid=PFRP wds-default-bridge=Mesh-Interface wds-mode=dynamic-mesh
/interface wireless nstreme
set wlan1 enable-nstreme=yes
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name=pool1 ranges=192.168.90.100-192.168.90.106
/ip dhcp-server
add add-arp=yes address-pool=pool1 always-broadcast=yes bootp-support=dynamic disabled=no interface=ether1 lease-time=42w6d name=server1
/port
set 0 name=serial0
/system logging action
set 0 memory-lines=100
set 1 disk-lines-per-file=100
/interface mesh port
add comment="WLAN MESH Port" interface=wlan1 mesh=Mesh-Interface
/interface wireless access-list
add comment="LK-MESH-1 Access Rule" mac-address=D4:CA:6D:11:B0:69
add comment="LK-MESH-2 Access Rule" mac-address=D4:CA:6D:11:B0:53
add comment="LK-MESH-3 Access Rule" mac-address=D4:CA:6D:11:B0:59
add comment="LK-MESH-4 Access Rule" mac-address=D4:CA:6D:11:B0:4D
add comment="LK-MESH-5 Access Rule" disabled=yes mac-address=D4:CA:6D:11:B0:1E
/interface wireless connect-list
add comment="LK-MESH-1 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:69 security-profile=Private ssid=PFRP
add comment="LK-MESH-2 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:53 security-profile=Private ssid=PFRP
add comment="LK-MESH-3 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:59 security-profile=Private ssid=PFRP
add comment="LK-MESH-4 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:4D security-profile=Private ssid=PFRP
add comment="LK-MESH-5 Connect Rule" disabled=yes interface=wlan1 mac-address=D4:CA:6D:11:B0:1E security-profile=Private ssid=PFRP
/ip accounting
set account-local-traffic=yes enabled=yes
/ip accounting web-access
set accessible-via-web=yes
/ip address
add address=192.168.90.1/24 comment="LAN INTERFACE" interface=ether1 network=192.168.90.0
add address=10.0.0.5/24 interface=Mesh-Interface network=10.0.0.0
/ip dhcp-client
add comment="MESH DHCP Client" default-route-distance=0 dhcp-options=hostname,clientid disabled=no interface=Mesh-Interface
/ip dhcp-server lease
add address=192.168.11.253 client-id=1:4c:72:b9:d4:e9:60 mac-address=4C:72:B9:D4:E9:60 server=server1
/ip dhcp-server network
add address=192.168.90.0/24 comment="LAN DHCP" dns-server=192.168.90.1 gateway=192.168.90.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=10.0.0.1
/ip dns static
add address=10.0.0.1 name=router
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat out-interface=Mesh-Interface
/ip packing
add interface=ether1
add interface=wlan1
/ip proxy
set cache-path=web-proxy1
/ip service
set api disabled=yes
/ip traffic-flow
set cache-entries=4k enabled=yes
/system clock
set time-zone-autodetect=no
/system identity
set name=LK-MESH-5
/ip service
set api disabled=yes
/ip traffic-flow
set cache-entries=4k enabled=yes
/ip traffic-flow target
add address=192.168.88.0:1234 version=5
add address=10.0.0.0:1234 version=5
add address=10.10.10.0:1234 version=5
add address=192.168.1.0:1234 version=5
add address=192.168.10.0:1234 version=5
add address=192.168.11.0:1234 version=5
add address=192.168.12.0:1234 version=5
add address=192.168.13.0:1234 version=5
/system clock
set time-zone-autodetect=no
/system identity
set name=LK-MESH-3
/system ntp client
set enabled=yes primary-ntp=64.6.144.6 secondary-ntp=64.147.116.229
/system watchdog
set watchdog-timer=no
Link 4
/interface mesh
add comment="WLAN MESH" name=Mesh-Interface
/ip neighbor discovery
set Mesh-Interface comment="WLAN MESH"
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=tkip management-protection=allowed mode=\
    dynamic-keys name=Private supplicant-identity="" unicast-ciphers=tkip wpa-pre-shared-key=\
    "6HVRG#LbS#9LkZ\\hP+C%axSp,F7R2nR8" wpa2-pre-shared-key="6HVRG#LbS#9LkZ\\hP+C%axSp,F7R2nR8"
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g country="united states" disabled=no frequency=2412 l2mtu=2290 mode=\
    ap-bridge radio-name=LK-MESH-4 security-profile=Private ssid=PFRP wds-default-bridge=Mesh-Interface wds-mode=\
    dynamic-mesh
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name=pool1 ranges=192.168.91.100-192.168.91.106
/ip dhcp-server
add add-arp=yes address-pool=pool1 bootp-lease-time=lease-time bootp-support=dynamic disabled=no interface=ether1 \
    lease-time=42w6d10m name=server1 src-address=192.168.89.1
/port
set 0 name=serial0
/system logging action
set 0 memory-lines=100
set 1 disk-lines-per-file=100
/interface mesh port
add comment="WLAN MESH Port" interface=wlan1 mesh=Mesh-Interface
add disabled=yes interface=ether1 mesh=Mesh-Interface
/interface wireless access-list
add comment="LK-MESH-1 Access Rule" mac-address=D4:CA:6D:11:B0:69
add comment="LK-MESH-2 Access Rule" mac-address=D4:CA:6D:11:B0:53
add comment="LK-MESH-3 Access Rule" mac-address=D4:CA:6D:11:B0:59
add comment="LK-MESH-4 Access Rule" disabled=yes mac-address=D4:CA:6D:11:B0:4D
add comment="LK-MESH-5 Access Rule" mac-address=D4:CA:6D:11:B0:1E
/interface wireless connect-list
add comment="LK-MESH-1 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:69 security-profile=Private ssid=PFRP
add comment="LK-MESH-2 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:53 security-profile=Private ssid=PFRP
add comment="LK-MESH-3 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:59 security-profile=Private ssid=PFRP
add comment="LK-MESH-4 Connect Rule" disabled=yes interface=wlan1 mac-address=D4:CA:6D:11:B0:4D security-profile=Private \
    ssid=PFRP
add comment="LK-MESH-5 Connect Rule" interface=wlan1 mac-address=D4:CA:6D:11:B0:1E security-profile=Private ssid=PFRP
/ip accounting
set account-local-traffic=yes enabled=yes
/ip accounting web-access
set accessible-via-web=yes
/ip address
add address=192.168.91.1/24 comment="LAN Port PoE" interface=ether1 network=192.168.91.0
/ip dhcp-client
add comment="MESH DHCP Client" default-route-distance=0 dhcp-options=hostname,clientid disabled=no interface=\
    Mesh-Interface
/ip dhcp-server network
add address=192.168.91.0/24 dns-server=192.168.91.1 gateway=192.168.91.1 netmask=24 ntp-server=64.6.144.6,64.147.116.229
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip dns static
add address=10.0.0.1 name=router
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat out-interface=Mesh-Interface
/ip packing
add interface=Mesh-Interface
add interface=wlan1
/ip proxy
set cache-path=web-proxy1
/ip service
set api disabled=yes
/ip smb
set enabled=yes
/ip traffic-flow
set cache-entries=4k enabled=yes
/ip traffic-flow target
add address=192.168.13.0:1234 version=5
add address=10.0.0.0:1234 version=5
add address=10.10.10.0:1234 version=5
add address=192.168.1.0:1234 version=5
add address=192.168.88.0:1234 version=5
add address=192.168.10.0:1234 version=5
add address=192.168.11.0:1234 version=5
add address=192.168.12.0:1234 version=5
/system clock
set time-zone-autodetect=no
/system identity
set name=LK-MESH-4
/system ntp client
set enabled=yes primary-ntp=64.6.144.6 secondary-ntp=64.147.116.229
/system watchdog
set watchdog-timer=no

Link 5

Who is online

Users browsing this forum: No registered users and 42 guests