If I connect my mikrotik sxtsq 5ac to a LinkNYC Free Wifi, with the following config:
The router shows that it has connected, and that it has acquired an IP. It seems to have a correct Netmask and Gateway.
However, the router does not send packets to the remote station.

How should I go about debugging this.

Using other wifi-routers, connecting to this same LinkNYC station, a ping of 8.8.8.8 works correctly (packets are going and coming).

Thanks in advance,

Tim

Are the routes set correctly?
IP -> Routes

Ok, when the mikrotik is connected to the LinkNYC Free Wifi (doesn't work):

Quickset connection info:
IP Address 100.76.165.133
Netmask 255.240.0.0 (/12)
Gateway 10.64.0.1

IP Routes:

Row #1
DS
Dst Address: 0.0.0.0/0
Gateway: 10.64.0.1 unreachable
Distance: 1

Row #2
DAC
Dst Address: 100.64.0.0/12
Gateway: wlan1 reachable
Distance: 0
Pref source: 100.76.165.133

Row #3
DAC
Dst Address: 192.168.88.0/24
Gateway: ether1 reachable
Distance: 0
Pref Source: 192.168.88.1




When I connect to a LinkNYC Private (works) (but other unrelated problems)

Quickset connection info:
IP Address 100.98.34.84
Netmask 255.240.0.0 (/12)
Gateway 100.96.0.1

IP Routes:

Row #1
DAS
Dst Address: 0.0.0.0/0
Gateway: 10.96.0.1 reachable wlan1
Distance: 1

Row #2
DAC
Dst Address: 100.96.0.0/12
Gateway: wlan1 reachable
Distance: 0
Pref source: 100.98.34.84

Row #3
DAC
Dst Address: 192.168.88.0/24
Gateway: ether1 reachable
Distance: 0
Pref Source: 192.168.88.1




When I connect from an openwrt archer c7 (works)

Open WRT:
Address: 100.74.7.26/12
Gateway: 10.64.0.1

Ok, if I manually go into IP/Routes
And remove the 10.64.0.1
and put in 100.64.0.1

It works.

Why would this be happening?
Is there some way this configuration is being incorrectly remembered? Or is it coming from remote?
On the openwrt, I see this:

10.64.0.1
00:00:00:00:01:20
(wlan0)

100.64.0.1
00:00:00:00:01:20
(wlan0)

192.168.1.174
E0:C7:67:89:1D:02
lan

192.168.1.241
D4:61:9D:07:16:2A
lan

192.168.1.181
4C:57:CA:36:A3:A3
lan

So it seems remote is broadcasting both 10.64.0.1 and 100.64.0.1
???

Any hints?

If anyone knows how to have the mikrotik try both broadcasted gateways, instead of just one (it is incorrect).

My openwrt router somehow handles this.

Very strange DHCP lease (2 subnets), maybe a switch of subnet after some portal login or welcome page?
I don't have the certified answer, just have a wild guess.

Anyway you can always add static Ip routes for 0.0.0.0/0 to each of the two gateways. Give them the same "distance", MKT will not use the one that is not reachable.
If the distance for the default route via DHCP is higher, these static routes will be used if available.

This here as a DHCP lease will not work as such (gateway is not in subnet):
IP Address 100.76.165.133
Netmask 255.240.0.0 (/12)
Gateway 10.64.0.1

This should work like your replacement of the one route via 10.64.01. by the one via 100.64.0.1 . But now you don't have to redo it every time.

Just one step further, in case you really need 10.64.0.1 ...

Still you might need 10.64.0.1 to get to the internet. (Deduction from the other examples) Maybe the 100.64.0.1 is the path (nexthop) to that 10.64.0.1 gateway.
In that case (!??? don't know how LinkNYC is layed out !???) then the default route via 100.64.0.1 should have scope=10, and target scope=10 to be used as next hop for the recursive default route defined via 10.64.0.1 . A normal static route has "scope=30, target scope=10" and will not be used for resolving recursive routes.
Here we are in "nexthop" and "recursive routes" not the easiest matter in IP route as described in the wiki.

Hello all,
I just purchased a MKT sxtsq 5ac with the hope of harnessing a LinkNYC Free / Private from a kiosk directly below my apartment. It's been slow going but thanks to this thread I now have a connection to the free version (I had exactly the same "Gateway: 10.64.0.1 unreachable" problem, solved by changing it to 100.64.0.1.) Without even a direct aim at the kiosk (which is possible) I'm getting a speed of 68.6/70.8 mbps. However connection to the private version of the kiosk is still tharting my attempts. When scanning signals I find the strongest private signal, but after clicking "connect" it requires a password. If I manually enter the password shown in the script below, it accepts it, but then hangs with the message "connecting to network". Is it a password problem or is it timing out?. Connecting to the free version is immediate (it then displays "connected to ess"). The config I'm using is the three-line code provided on the nymesh site...

/interface wireless security-profiles
add authentication-types=wpa-eap,wpa2-eap eap-methods=eap-ttls-mschapv2 group-ciphers=tkip,aes-ccm mode=dynamic-keys mschapv2-password=5fsOpxER mschapv2-username=anonymous@citybridge.com name=linknyc supplicant-identity=anonymous@citybridge.com tls-mode=dont-verify-certificate unicast-ciphers=tkip,aes-ccm

/interface wireless
set [ find default-name=wlan1 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-Ceee country="united states2" default-authentication=no disabled=no frequency=auto security-profile=linknyc ssid="LinkNYC Private" wireless-protocol=802.11

/interface wireless connect-list
add interface=wlan1 security-profile=linknyc ssid="LinkNYC Private" wireless-protocol=802.11

Thank you in advance for any tips you can provide.

Getting a connection with the Private config from meshnet after going through menus wireless/WiFi Interface double click wlan1 select wireless tab and checked Default Authenticate box, but the connection is disabled after a few seconds, searches for the signal reconnects and disables repeatedly. I’ve been at this for a year after having it connected with no issues from 2020-2022. I don’t know what I’m doing wrong or if maybe linknyc is no longer accessible by this method anymore.

When it was working 2020-2021 were you using Private or Free? And now? And is your setup: computer - ethernet - SXT - kiosk?

Starting with a clean slate (resetting SXT to factory, importing nyc mesh config, "spoofing" wlan1 with MAC address from device/computer, I get a similar result as you, it constantly searches for a network, connects for a split second then disconnects, it does it every 7 seconds, it's recorded in the log. That it actually connects with tx and rx values can be verified in a screenshot. Underscore: this is Private network. When I go into wlan1 profile and alter SSID to "LinkNYC Free Wi-Fi" or simply scan for the strongest Free signal, it connects in 7 seconds (displaying: "connected to ess") and stays connected. But no internet, until you change the gateway to 100.64.0.1. For me the connection to Free works and seems dependable, but I'd prefer to be on Private. Members on the Slack group report similar problems with Private.

Unclear what you did to get it to work what menu tabs do you go to. Winbox menus have tabs you click to get to more menus with tabs, it’s confusing for my feeble brain, what are the steps? Do I need a different Application ? Do I use the private/free configuration? Would you be more specific?

I'll be happy to provide the details (I'm not at the Mikrotic at the moment), however, first let me ask if you got a "sign-on page" from LinkNYC? It's just a welcoming page that shows up on your browser where you enter your email and submit. Once submitted the connection is allowed. It doesn't last forever (I've repeated had to sign on in the last couple of weeks). Anyway, perhaps that's what is preventing your connection.

Yeah it’s the common problem. What’s the solution since it’s not going to pop up without the unit itself having a web browser to click the log in. Private config connections been staying linked for minutes at a time with out being deauthorized but I’m getting 0db Tx. The chart shows the Rx -61bd in blue nd Tx is 0db in red and it’s covering the whole chart. Does this mean I’m being deliberately booted and blocked or is it just on my end. I really have no clue how most of anything does and why.

It seems that LinkNYC has changed the credentials for Private, making the nycmesh config and configen credentials obsolete. For the time being the workaround is to use Free with a VPN . The gateway needs to be set to 100.64.0.1. Your browser should display an error message if the logon page is required. There may be differences between your mesh connection and my non-mesh connections. Can you from QuickSet or Webfig scan signals and connect to the (strongest) Free? Webfig is nice because you can toggle "strength" so strongest signals appear at top. Quickset is more of a shooting gallery to find the strongest signal.