a little help with eth-wlan bridge and port forward

Hello!

I have a 951-2n upgraded to 6.27 and a 951ui-2hnd 6.27 i exporeted the settings from the 1st to import them to the 2nd but only half of the settings was imported so i started from the beggining.

I have at port 3 a network 192.168.3.x and at port 4 10.0.0.x everything works but i have some problems and i don't know how to do some things.

My problems are:

  1. internet hangs some times on both networks and when i make diagnose it gives DNS error.
    (i am getting internet at port 1 from a modem/router from provider 192.168.1.x with DHCP)

  2. i dont know how to bridge wlan1 with ether3 and share the same DHCP

  3. port forward is setup correct but i cant connect to my ip camera

my config is this:

apr/10/2015 17:22:34 by RouterOS 6.27

software id =xxxxxx

/interface bridge
add admin-mac=xx:xx:xx:xx:xx:xx auto-mac=no name=bridge-local
/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether2 ] name=ether2-master-local
set [ find default-name=ether3 ] name=ether3-orders
set [ find default-name=ether4 ] name=ether4-clients
set [ find default-name=ether5 ] master-port=ether2-master-local name=
ether5-slave-local
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=greece disabled=no
distance=indoors frequency=2422 l2mtu=2290 mode=ap-bridge ssid=
"WIRELESS" wireless-protocol=802.11
/ip neighbor discovery
set ether1-gateway discover=no
/ip pool
add name=dhcp ranges=10.0.0.2-10.0.0.252
add name=orders ranges=10.0.0.2-10.0.0.252
add name=clients ranges=192.168.3.2-192.168.3.252
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge-local name=default
add address-pool=orders disabled=no interface=ether3-orders
lease-time=1d name=orders
add address-pool=clients disabled=no interface=ether4-clients lease-time=1d
name=clients
/interface bridge port
add bridge=bridge-local interface=ether2-master-local
add bridge=bridge-local interface=wlan1
/ip address
add address=192.168.88.1/24 comment="default configuration" interface=
ether2-master-local network=192.168.88.0
add address=10.0.0.254/24 interface=ether3-orders network=10.0.0.0
add address=192.168.3.254/24 interface=ether4-clients network=192.168.3.0
add address=10.0.0.253/24 disabled=yes interface=ether2-master-local network=
10.0.0.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid disabled=
no interface=ether1-gateway
/ip dhcp-server network
add address=10.0.0.0/24 dns-server=10.0.0.254 gateway=10.0.0.254
add address=192.168.3.0/24 dns-server=192.168.3.254 gateway=192.168.3.254
add address=192.168.88.0/24 comment="default configuration" gateway=
192.168.88.1 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=
established,related
add action=drop chain=input comment="default configuration" in-interface=
ether1-gateway
add chain=forward comment="default configuration" connection-state=
established,related
add action=drop chain=forward comment="default configuration"
connection-state=invalid
add action=drop chain=forward comment="default configuration"
connection-nat-state=!dstnat connection-state=new in-interface=
ether1-gateway
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration"
out-interface=ether1-gateway
add action=dst-nat chain=dstnat dst-port=3999 in-interface=ether1-gateway
protocol=tcp to-addresses=192.168.3.3 to-ports=3999
/system clock
set time-zone-name=Europe/Athens
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-orders
add interface=ether4-clients
add interface=ether5-slave-local
add interface=wlan1
add interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-orders
add interface=ether4-clients
add interface=ether5-slave-local
add interface=wlan1
add interface=bridge-local

ok everything solved with a little help of a friend.

DNS errors was from wlan1 wrong configuration that solves question 2 as well.
For 3 we made a route in providers modem/router
destination ip 192.168.3.0
subnet 255.255.255.0
gateway ip 192.168.1.x (what ever ip mikrotik got from providers modem/router DHCP in my case it was .13)

and in mikrotik
add chain=dstnat dst-address=192.168.1.13 protocol=tcp dst-port=3999 action=dst-nat to-addresses=192.168.3.3 to-ports=3999

in next reboot it will probably change and it will… so in addresses i added a new address
address 192.168.1.13/24
network 192.168.1.0
interface ether1-gateway