Hi there, I hope I can find here some help. First of all I set up this system two or three years ago. It was running smooth and stability. one day I had an issue withe the internet connection and I changed something I think I was mad I changed the Ip address from the WAN and saved it in “quick set” . Sins this day something is wrong. I double checked all but I dont know where is the problem.
The Thing is I have 3 bridges on is the Lan 10.2.2.X and I have a guest _wifi its running 192.16.1.X and a office wifi 192.168.9.X
So the issue is I get no internet on my office wifi ( 192.168.9.X ). it’s connecting, getting the right ip addresses but I have no internet access. The other two ip ranges have internet access somebody have an idea?
I can ping the ip 192.168.9.1 from the wifi_office client (10.2.2.72) but no access to the internet. I can not Ping my main Router under 10.10.10.1 whirr I connect my system to the WAN
add name=dhcp ranges=192.168.9.50-192.168.9.254
add name=dhcp_pool1 ranges=10.2.2.50-10.2.2.254
add name=dhcp_pool2 ranges=192.16.1.2-192.16.1.254
my wifi is managed with capsman the hotspot server is actually not enabled and was running only on the guest wifi
Her is my config…
# oct/28/2024 12:11:09 by RouterOS 6.49.14
# software id = Z22C-CBJ7
#
# model = RB951G-2HnD
/caps-man channel
add band=2ghz-g/n control-channel-width=20mhz extension-channel=disabled \
frequency=2412 name=channel1 tx-power=17
add band=2ghz-g/n control-channel-width=20mhz extension-channel=disabled \
frequency=2437 name=channel6 tx-power=17
add band=2ghz-g/n control-channel-width=20mhz extension-channel=disabled \
frequency=2462 name=channel11 tx-power=17
/caps-man configuration
add channel.band=5ghz-n/ac channel.control-channel-width=20mhz \
channel.extension-channel=XXXX country=turkey \
datapath.client-to-client-forwarding=yes datapath.local-forwarding=yes \
name=cfg-5ghz-ac ssid=""
add channel.band=5ghz-onlyn channel.control-channel-width=20mhz \
channel.extension-channel=XX country=turkey \
datapath.client-to-client-forwarding=yes datapath.local-forwarding=yes \
name=cfg-5ghz-an ssid=""
/interface bridge
add fast-forward=no name=bridgeLAN
add fast-forward=no name=bridge_WIFI_guest
add fast-forward=no name=bridge_WIFI_office
/interface wireless
# managed by CAPsMAN
# channel: 2447/20-Ce/gn(17dBm), SSID: office, CAPsMAN forwarding
set [ find default-name=wlan1 ] mode=ap-bridge ssid=MikroTik \
wireless-protocol=802.11
/interface ethernet
set [ find default-name=ether1 ] comment="-- WAN--"
set [ find default-name=ether5 ] comment="-- toCAP--"
/caps-man configuration
add datapath.bridge=bridge_WIFI_office datapath.client-to-client-forwarding=\
yes datapath.local-forwarding=no mode=ap name=office rates.basic=24Mbps \
rates.supported=12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps rx-chains=0,1 \
security.authentication-types=wpa2-psk security.encryption=aes-ccm \
security.passphrase=****** ssid=office tx-chains=0,1
add channel.band=2ghz-b country=turkey datapath.bridge=bridge_WIFI_guest \
datapath.bridge-horizon=10 mode=ap name=hotspot \
security.authentication-types=wpa2-psk security.encryption=aes-ccm \
security.passphrase=erendiz1234 ssid=erendiz
/caps-man interface
add configuration=office configuration.rx-chains=0,1 configuration.tx-chains=\
0,1 disabled=no l2mtu=1600 mac-address=C4:AD:34:4E:C7:DB \
master-interface=none name=cap1 radio-mac=C4:AD:34:4E:C7:DB radio-name=\
C4AD344EC7DB
add configuration=hotspot datapath.client-to-client-forwarding=yes disabled=\
no l2mtu=1600 mac-address=C4:AD:34:4E:C8:DB master-interface=cap1 mtu=\
1500 name=cap1-2 radio-mac=C4:AD:34:4E:C8:DB radio-name=C4AD344EC8DB
add configuration=office configuration.mode=ap disabled=no l2mtu=1600 \
mac-address=2C:C8:1B:1A:3F:4B master-interface=none name=cap2 radio-mac=\
2C:C8:1B:1A:3F:4B radio-name=2C:C8:1B:1A:3F:4B
add configuration=hotspot datapath.client-to-client-forwarding=yes disabled=\
no l2mtu=1600 mac-address=2C:C8:1B:1A:3F:4C master-interface=cap2 mtu=\
1500 name=cap2-2 radio-mac=2C:C8:1B:1A:3F:4C radio-name=2C:C8:1B:1A:3F:4C
add configuration=office configuration.mode=ap disabled=no l2mtu=1600 \
mac-address=08:55:31:7F:82:F1 master-interface=none name=cap3 radio-mac=\
08:55:31:7F:82:F1 radio-name=0855317F82F1
add configuration=hotspot disabled=no l2mtu=1600 mac-address=\
08:55:31:7F:83:F1 master-interface=cap3 name=cap3-2 radio-mac=\
08:55:31:7F:83:F1 radio-name=0855317F83F1
add configuration=office configuration.mode=ap disabled=no l2mtu=1600 \
mac-address=74:4D:28:A3:43:7C master-interface=none name=cap4 radio-mac=\
74:4D:28:A3:43:7C radio-name=744D28A3437C
add configuration=hotspot disabled=no l2mtu=1600 mac-address=\
74:4D:28:A3:44:7C master-interface=cap4 name=cap4-2 radio-mac=\
74:4D:28:A3:44:7C radio-name=744D28A3447C
add configuration=office configuration.mode=ap disabled=no l2mtu=1600 \
mac-address=2C:C8:1B:1A:5C:B1 master-interface=none name=cap5 radio-mac=\
2C:C8:1B:1A:5C:B1 radio-name=2CC81B1A5CB1
add configuration=hotspot configuration.mode=ap disabled=no l2mtu=1600 \
mac-address=2C:C8:1B:1A:6C:B1 master-interface=cap5 name=cap5-2 \
radio-mac=2C:C8:1B:1A:6C:B1 radio-name=2CC81B1A6CB1
add configuration=office configuration.country=turkey \
configuration.installation=indoor configuration.mode=ap disabled=no \
l2mtu=1600 mac-address=E4:8D:8C:D9:EF:ED master-interface=none name=cap6 \
radio-mac=E4:8D:8C:D9:EF:ED radio-name=E48D8CD9EFED
add configuration=hotspot disabled=no l2mtu=1600 mac-address=\
E4:8D:8C:D9:EF:ED master-interface=cap6 name=cap6-2 radio-mac=\
E4:8D:8C:D9:EF:ED radio-name=E48D8CD9EFED
add configuration=office configuration.country=turkey configuration.mode=ap \
datapath.bridge=bridge_WIFI_office disabled=no l2mtu=1600 mac-address=\
E4:8D:8C:51:58:EC master-interface=none name=cap7 radio-mac=\
E4:8D:8C:51:58:EC radio-name=E48D8C5158EC
add configuration=hotspot configuration.country=turkey configuration.mode=ap \
disabled=no l2mtu=1600 mac-address=E4:8D:8C:51:58:ED master-interface=\
cap7 name=cap7-2 radio-mac=E4:8D:8C:51:58:ED radio-name=E48D8C5158EC
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
add dns-name=hot.spot hotspot-address=192.16.1.1 http-cookie-lifetime=4w2d \
login-by=mac,cookie,http-chap,trial mac-auth-mode=\
mac-as-username-and-password name=hsprof2 trial-uptime-limit=4h30m \
trial-uptime-reset=1w use-radius=yes
/ip hotspot user profile
set [ find default=yes ] on-login="local a \$user\r\
\nif ([len [/system scheduler find name=\$a]] = 0) do={[/system scheduler \
add name=\$a interval=\"30d 00:00:00\" start-time=\"03:00:00\" on-event=\"\
if ([len [/ip hotspot user find name=\$a]] = 1) do={[/ip hotspot user remo\
ve [find name=\$a]]}\r\
\n/system scheduler remove [find name=\$a]\"\r\
\n]}" rate-limit=5M/512k
/ip pool
add name=dhcp ranges=192.168.9.50-192.168.9.254
add name=dhcp_pool1 ranges=10.2.2.50-10.2.2.254
add name=dhcp_pool2 ranges=192.16.1.2-192.16.1.254
/ip dhcp-server
add address-pool=dhcp interface=bridgeLAN lease-time=1d10m name=dhcp1
add address-pool=dhcp_pool1 disabled=no interface=bridge_WIFI_office \
lease-time=1d10m name=dhcp2
add address-pool=dhcp_pool2 disabled=no interface=bridge_WIFI_guest \
lease-time=30m name=dhcp3
/ip hotspot
add address-pool=dhcp_pool2 addresses-per-mac=unlimited idle-timeout=none \
interface=bridge_WIFI_guest name=hotspot1 profile=hsprof2
/ip hotspot user profile
add address-pool=dhcp_pool2 !keepalive-timeout mac-cookie-timeout=4w2d name=\
"1 MB" on-login="local a \$user\r\
\nif ([len [/system scheduler find name=\$a]] = 0) do={[/system scheduler \
add name=\$a interval=\"30d 00:00:00\" start-time=\"03:00:00\" on-event=\"\
if ([len [/ip hotspot user find name=\$a]] = 1) do={[/ip hotspot user remo\
ve [find name=\$a]]}\r\
\n/system scheduler remove [find name=\$a]\"\r\
\n]}" rate-limit=5M/512k
/queue simple
add max-limit=128k/1M name=leni target=10.2.2.252/32
/snmp community
set [ find default=yes ] addresses=10.10.10.1/32
/tool user-manager customer
set admin access=\
own-routers,own-users,own-profiles,own-limits,config-payment-gw password=\
******
/tool user-manager profile
add name=guest name-for-users="" override-shared-users=2 owner=admin price=0 \
starts-at=logon validity=0s
/tool user-manager profile limitation
add address-list="" download-limit=0B group-name="" ip-pool="" ip-pool6="" \
name=guest owner=admin rate-limit-min-rx=524288B rate-limit-min-tx=\
5242880B rate-limit-rx=1048576B rate-limit-tx=10485760B transfer-limit=0B \
upload-limit=0B uptime-limit=0s
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=office name-format=\
prefix slave-configurations=hotspot
add action=create-dynamic-enabled hw-supported-modes=gn master-configuration=\
hotspot name-format=prefix-identity name-prefix=2ghz
add action=create-dynamic-enabled hw-supported-modes=ac master-configuration=\
cfg-5ghz-ac name-format=prefix-identity name-prefix=5ghz-ac
add action=create-dynamic-enabled hw-supported-modes=an master-configuration=\
cfg-5ghz-an name-format=prefix-identity name-prefix=5ghz-an
/interface bridge port
add bridge=bridgeLAN interface=ether2
add bridge=bridgeLAN interface=ether3
add bridge=bridgeLAN interface=ether4
add bridge=bridgeLAN interface=ether5
add bridge=bridgeLAN interface=wlan1
add bridge=bridgeLAN interface=WAN
/interface list member
add interface=ether1 list=WAN
add interface=bridgeLAN list=LAN
/interface wireless cap
#
set bridge=bridgeLAN caps-man-addresses=192.168.9.1 enabled=yes interfaces=\
wlan1
/ip address
add address=10.10.10.2/24 comment=WAN interface=ether1 network=10.10.10.0
add address=192.168.9.1/24 comment=LAN interface=bridgeLAN network=\
192.168.9.0
add address=10.2.2.1/24 comment="OFFICE WIFI" interface=bridge_WIFI_office \
network=10.2.2.0
add address=192.16.1.1/24 comment="GUEST WIFI" interface=bridge_WIFI_guest \
network=192.16.1.0
/ip dhcp-client
add interface=ether1
/ip dhcp-server network
add address=10.2.2.0/24 dns-server=10.10.10.1,192.168.9.1 gateway=10.2.2.1
add address=192.16.1.0/24 dns-server=10.10.10.1,192.168.9.1 gateway=\
192.16.1.1
add address=192.168.9.0/24 dns-server=10.10.10.1,192.168.9.1 gateway=\
192.168.9.1 netmask=24
/ip dns
set servers=195.175.39.50,195.175.39.49
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat disabled=yes out-interface=ether1 \
out-interface-list=WAN
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
src-address=192.16.1.0/24
/ip route
add distance=1 gateway=10.10.10.1
/radius
add address=192.168.9.1 secret=****** service=hotspot
/snmp
set trap-target=10.10.10.1
/system clock
set time-zone-name=Europe/Istanbul
/system identity
set name=CAP1
/system logging
add topics=wireless,debug
add topics=firewall,debug
/system routerboard settings
set auto-upgrade=yes
/tool user-manager database
set db-path=user-manager
/tool user-manager profile profile-limitation
add from-time=0s limitation=guest profile=guest till-time=23h59m59s weekdays=\
sunday,monday,tuesday,wednesday,thursday,friday,saturday
/tool user-manager router
add coa-port=1700 customer=admin disabled=no ip-address=192.168.9.1 log=\
auth-fail name=hotspot shared-secret=****** use-coa=no
/tool user-manager user
add customer=admin disabled=no ipv6-dns=:: password=ellen shared-users=1 \
username=ellen wireless-enc-algo=none wireless-enc-key="" wireless-psk=""
add customer=admin disabled=no ipv6-dns=:: password=gurban shared-users=2 \
username=gurban wireless-enc-algo=none wireless-enc-key="" wireless-psk=\
""
add customer=admin disabled=no ipv6-dns=:: password=aykut shared-users=2 \
username=aykut wireless-enc-algo=none wireless-enc-key="" wireless-psk=""
add customer=admin disabled=no ipv6-dns=:: password=leni10a shared-users=2 \
username=leni10a wireless-enc-algo=none wireless-enc-key="" wireless-psk=\
""
add customer=admin disabled=no ipv6-dns=:: password=sk11 shared-users=2 \
username=sk11 wireless-enc-algo=none wireless-enc-key="" wireless-psk=""
add customer=admin disabled=no ipv6-dns=:: password=uwe2022 shared-users=2 \
username=uwe2022 wireless-enc-algo=none wireless-enc-key="" wireless-psk=\
""
add customer=admin disabled=no ipv6-dns=:: password=Nedim shared-users=2 \
username=Nedim wireless-enc-algo=none wireless-enc-key="" wireless-psk=""
add customer=admin disabled=no ipv6-dns=:: password=robert12 shared-users=2 \
username=robert12 wireless-enc-algo=none wireless-enc-key="" \
wireless-psk=""
add customer=admin disabled=no ipv6-dns=:: password=osman19 shared-users=2 \
username=osman19 wireless-enc-algo=none wireless-enc-key="" wireless-psk=\
""
add customer=admin disabled=no ipv6-dns=:: password=tom20 shared-users=2 \
username=tom20 wireless-enc-algo=none wireless-enc-key="" wireless-psk=""
add customer=admin disabled=no ipv6-dns=:: password=aliya20 shared-users=2 \
username=aliya20 wireless-enc-algo=none wireless-enc-key="" wireless-psk=\
""
add customer=admin disabled=no ipv6-dns=:: password=andreas12 shared-users=2 \
username=andreas12 wireless-enc-algo=none wireless-enc-key="" \
wireless-psk=""
add customer=admin disabled=no ipv6-dns=:: password=barbara13 shared-users=2 \
username=barbara13 wireless-enc-algo=none wireless-enc-key="" \
wireless-psk=""
add customer=admin disabled=no ipv6-dns=:: password=dorn13 shared-users=2 \
username=dorn13 wireless-enc-algo=none wireless-enc-key="" wireless-psk=\
""
add customer=admin disabled=no ipv6-dns=:: password=dorn14 shared-users=2 \
username=dorn14 wireless-enc-algo=none wireless-enc-key="" wireless-psk=\
""
add customer=admin disabled=no ipv6-dns=:: password=tom78 shared-users=2 \
username=tom78 wireless-enc-algo=none wireless-enc-key="" wireless-psk=""
add customer=admin disabled=no ipv6-dns=:: password=alla78 shared-users=2 \
username=alla78 wireless-enc-algo=none wireless-enc-key="" wireless-psk=\
""
add customer=admin disabled=no ipv6-dns=:: password=sandor16 shared-users=2 \
username=sandor16 wireless-enc-algo=none wireless-enc-key="" \
wireless-psk=""