Hello All I have a RB2011UiAS-2HnD on my network. I have a 10Mbps up and down link. To Port #2 of the router is connected a webcam that streams live pictures to a streaming server in another part of the world that can be viewed by anyone. My problem is how can I dedicate 5Mbps all the time to the we...

Wow!
What a simple solution.
pe1chl I renamed the wlan interface back to its default and the error went away!
Thank you all so much for your feedback

Thank you CZFan for your feedback.
Correct, the error started to occur after I updated to ROS 6.47 from 6.46.
Oddly, I have 3 other RB2011UiAS-2Hnd in other locations, and upgraded them to the same ROS version, but they have no errors.

Hopefully, someone will be kind enough to help me find the source of this error. Router: RB2011UiAS-2Hnd The following error is logged each time the router boots Buffer: Memory Topic: system, error, critical, 54288, 53832, 54288 Message: error while running customized default configuration script: n...

Sindy Took a step back Sunday so I could try your suggestions this morning when I was fresh. Sadly the last recommendation you made to insert src-address =!192.168.0.0/16 instead of in-interface sadly did not work. On the positive side, I did however note that the counters on the slave did change wh...

TDW With your suggestions, I believe the routers are much better configured and secure now. Thank you I have two questions though: 1. Managed to update all the interface with the correct MAC address. However, the Admin MAC Address on the Bridge is still incorrect. Will it effect the network in any w...

Hello again Sindy
No, have not converted the slave (inner) router as yet to bridge.
When I tried to create rule, you just suggested, on the slave, I get the following error message:
Couldn't add New NAT Rule - incoming interface matching not possible in output and postrouting chains (6)

Thank you for the feedback. I believe all are very appropriate. Router 1 1. Correct, I loaded a backup from another configuration. Have 5 similar sites, same router model, same ISP and configuration, only difference is the public IP and VLAN ID. Any suggestion to remove the MAC addresses? 2. Sock mu...

Sindy, you are a star What you suggest makes a lot of sense. I will make the changes you suggested, though need one clarification: Why disable DHCP servers from both routers? Where will the clients obtain an IP address? Again, excuse my ignorance. On a negative note, I created a NAT rule for one AP,...

So appreciate your feedback. Your comment about the dst-nat rule on the outer ("master") router, add action=dst-nat chain=dstnat comment="WiFI AP Access" dst-port=50021-50024 in-interface-list=WAN protocol=tcp to-addresses=192.168.2.1 was merely something I was trying. It did not...

Herewith are the configuration files Router 1 # aug/18/2019 08:02:03 by RouterOS 6.45.3 # software id = VERF-DUV5 # # model = 2011UiAS-2HnD # serial number = B9070AA4FA9D /interface bridge add admin-mac=CC:2D:E0:39:D0:7E auto-mac=no name="Bridge Nyika Master" /interface ethernet set [ find...

Herewith are the configuration files Router 1 # aug/18/2019 08:02:03 by RouterOS 6.45.3 # software id = VERF-DUV5 # # model = 2011UiAS-2HnD # serial number = B9070AA4FA9D /interface bridge add admin-mac=CC:2D:E0:39:D0:7E auto-mac=no name="Bridge Nyika Master" /interface ethernet set [ find...

TDW
I am trying to accessing the AP's from outside the LAN1 and LAN2 networks.
And yes, the counters did change.

Let me re-state the network setup Internet ---> Router 1 (LAN=192.168.1.0/24) ---> Router 2 ---> (LAN2=192.168.2.0/24) --->PoE Switch ---> WiFi AP1 (192.168.2.21) Router 1 (LAN1) Ether1 connected to the ISP with a static IP 41.x.x.x Local network 192.168.1.0/24 Ether2 removed from LAN bridge and has...

TDW When I first read and understood your suggestion, I was pretty sure that it would work. Sadly it did not. Question:In your suggestion for Router 1, was it intentional that you did not have a setting for To Ports? Let me re-state the network setup Internet ---> Router 1 (LAN=192.168.1.0/24) ---> ...

You want the full dump of both the routers?

Weird, when I connect through WebFig, I stay on without any disconnections

The NAT rule I created was on Router 1 Does not give me access to the AP with the local address specified with 41.x.x.x:21443 The manufacturers of the AP suggested this: 1. First port forwarding needs to be done on Router2 for example to use tcp port 10 to access AP on tcp port 443 2. Second port fo...

Created NAT rule as follows to test connectivity to one AP:
Chain dstnat
Dst. Address 41.XX.XXX.XXX
Protocol tcp
Dst. Port 21443
To Address 192.168.2.21
To Port 443

Do I put in the NAT rules on both routers?

Sindy
I kinda like your suggestion.
On which router should I put in the port forwarding rule?
Can you give me a simple example for one?

My apologies for using this as a round-about way of sending you a message. Your solution for connecting two Mikrotik router worked like a dream, exactly what I was seeking. A God sent solution! I have some 10 wireless AP's connected to Router 2 via a POE switch and they have internet access via Rout...

The AP's have port 443

Were you able to solve the problems of accessing the camera?
I believe we have similar networks.
I want to be able to access the wireless AP's that are connected via a POE switch on Router 2

This is how my network is setup Router 1--->Router 2--->POE Switch--->Wireless AP's Router 1 is connected to the ISP via a Static Public IP 41.XX.XXX.XXX on Port 1 Router 1 has a local network address of 192.168.1.0/24 Port 2 of Router 1 has an IP address 192.168.255.1/30 and is not part of the LAN ...

This is how my network is setup Router 1--->Router 2--->POE Switch--->Wireless AP's Router 1 is connected to the ISP via a Static Public IP 41.XX.XXX.XXX on Port 1 Router 1 has a local network address of 192.168.1.0/24 Port 2 of Router 1 has an IP address 192.168.255.1/30 and is not part of the LAN ...

xvo You are a star! The script will work perfectfly for me. I have a Mikrotik router connected to the internet with a static IP and is also a DHCP server. I want to set up 16 WAP ac around a large area. I want each WAP to have a static IP (easier to manage/maintain) I want the WAP clients to obtain ...

XVO, much appreciate you reply.
I will go with the "worse" option.
Please excuse my ignorance, could you advise how I could do that?
I cannot see the option to forward the port on the hEX router.
Port 5 on the hEX is connected to Port 1 of the switch.

I have the following setup: Internet ---->hEX PoE (with a static Public IP) --->RB260G (with a static local IP) I am able to connect remotely via the Internet to the hEX PoE via Winbox. I also want to be able to connect to the RB260G from remotely via the Internet. Any solutions/suggestions will be ...