I’m configuring a Huawei E1820 on a hAP ac2 for to provide internet access to my LAN.
The MT has internet access pinging from a terminal, using Tools>Ping to 8.8.8.8 and also from Src address.
Steps that I followed are:
Reset the MT with no default config.
Create bridge1 and add IP address 192.168.88.1
Configure DHCP server on bridge1 pool 192.168.88.100 to 199
Added bridge1 ports eth1 to 5, wlan1 and wlan2
Connected Huawei 3G to the USB port.
Enable ppp-out1 with the following settings: USB1, Data channel 0, Info channel 3, APN internet, uncheck dial-on-demand.
Tools>Ping 8.8.8.8 gives replies; using src address 192.168.88.1 no replies.
No internet access when connecting a laptop to the MT ethernet or wlan. Laptop gets DHCP lease 192.168.88.1/24, GW 192.168.88.1, DNS 8.8.8.8. Laptop can ping 192.168.88.1, but no replies when pinging 8.8.8.8; URL’s not resolved like pinging gmail.com.
The USB modem also don’t connect again when I leave it plugged in and reboot the MT.
As you did not post full config export of partially working setup[*] it’s hard to guess what else might be wrong.
[*] If it doesn’t start to work for you, open terminal window, execute command /export hide-sensitive, copy-paste output into a text editor, redact sensitive data (such as WPA2 preshared key and PPPoE username/password) and post it here … between [__code] [/code] tags for better readability.
Thank you for the reply. wlan is still defaults since I figure when ethernet is working it should be fairly easy to configure wlan interfaces. Here is the config:
[admin@MikroTik] > /export hide-sensitive
Last word of caution: your router currently doesn’t have any firewall whatsoever. It is an easy target for hackers and you should really implement some.
My suggestion: check the default firewall filter rules, they are very decent starting point. However, before implementing those rules you have to prepare a few things
create interface lists named LAN and WAN (they are heavily referred to in firewall rules) and populate them with correct interfaces:
/interface list
add name=WAN comment="defconf"
add name=LAN comment="defconf"
/interface list member
add list=LAN interface=bridge1 comment="defconf"
add list=WAN interface=ppp-out1
print out default configuration using command /system default-configuration print (before hand make sure your terminal window is wide enough or else config lines will be truncated), scroll down to the line /ip firewall {
copy the following lines … up to the first closing curly brace (}) … on my RB its 11 lines.
As I already mentioned, make sure none of them end with character ‘>’ … it means that that line is truncated.
quit the pager of default config
enter safe mode by pressing CTRL-X
paste the config lines from bullet #3 above
if you still have management connectivity, exit safe mode by pressing CTRL-X again