Hi guys,
I own a RB2011UiAS-2HnD.
I have the current setup and it was working until 2 days ago - and for some reason, I started to have problems with the bridge connections. What happens is that an IP gets assigned via DHCP on my Home Computer - I can ping the router but can’t go past it. I need to ping the Home Computer IP from the router in order to get the connection going - which is really odd. What happened? ![]()
Here’s the current configuration I have:
/interface bridge
add name=bridge-Home
/interface ethernet
set [ find default-name=ether1 ] name=ether1-ISP1
set [ find default-name=ether2 ] name=ether2-ISP2
set [ find default-name=ether3 ] name=ether3
set [ find default-name=ether4 ] name=ether4
set [ find default-name=ether5 ] name=ether5
set [ find default-name=ether6 ] name=ether6
/interface pppoe-client
add add-default-route=yes comment=ISP2 default-route-distance=2 \
disabled=no interface=ether2-ISP2 max-mru=1480 max-mtu=1480 mrru=\
1600 name=pppoe-ISP2 password=**** use-peer-dns=yes user=\
isp_user
/ip neighbor discovery
set pppoe-ISP2 comment=ISP2
/interface wireless security-profiles
add authentication-types=wpa2-psk eap-methods="" group-ciphers=tkip \
management-protection=allowed mode=dynamic-keys name=HomeWLAN \
supplicant-identity="" unicast-ciphers=tkip wpa2-pre-shared-key=\
****
add authentication-types=wpa2-psk eap-methods="" group-ciphers=tkip mode=\
dynamic-keys name=WLAN-Guests supplicant-identity="" unicast-ciphers=tkip \
wpa2-pre-shared-key=****
/interface wireless
set [ find default-name=wlan1 ] disabled=no hide-ssid=yes l2mtu=2290 mode=\
ap-bridge name=wlan-Home security-profile=wlan-Home ssid=\
HomeWLAN
add disabled=no l2mtu=2290 mac-address=4E:5E:0C:E9:29:89 master-interface=\
wlan-Home name=wlan-Guests security-profile=WLAN-Guests ssid=\
WLAN-Guests wds-cost-range=0 wds-default-cost=0
/ip pool
add name=pool-Home ranges=192.168.1.100-192.168.1.120
add name=pool-Neighbour ranges=192.168.2.100-192.168.2.150
add name=pool-Guests ranges=192.168.3.100-192.168.3.110
/ip dhcp-server
add address-pool=pool-Home disabled=no interface=bridge-Home lease-time=3d \
name=server-Home
add address-pool=pool-Guests disabled=no interface=wlan-Guests \
lease-time=1h name=dhcp-Guests
add address-pool=pool-Neighbour disabled=no interface=ether3-Neighbour lease-time=3d \
name=server-Neighbour
/port
set 0 name=serial0
/ppp profile
set [ find name=default ] name=default
set [ find name=default-encryption ] name=default-encryption
/interface bridge port
add bridge=bridge-Home interface=ether4
add bridge=bridge-Home interface=ether5
add bridge=bridge-Home interface=wlan-Home
add bridge=bridge-Home interface=ether6
add bridge=bridge-Home interface=ether7
add bridge=bridge-Home interface=ether8
add bridge=bridge-Home interface=ether9
add bridge=bridge-Home interface=ether10
/ip address
add address=192.168.1.1/24 interface=bridge-Home network=192.168.1.0
add address=192.168.2.1/24 interface=ether3-Neighbour network=192.168.2.0
add address=192.168.3.1/24 interface=wlan-Guests network=192.168.3.0
/ip dhcp-client
add comment=ISP1 default-route-distance=10 dhcp-options=hostname,clientid \
disabled=no interface=ether1-ISP1
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=95.76.94.1,193.231.100.130,8.8.8.8 \
gateway=192.168.1.1
add address=192.168.2.0/24 dns-server=95.76.94.1,193.231.100.130,8.8.8.8 \
gateway=192.168.2.1
add address=192.168.3.0/24 dns-server=95.76.94.1,193.231.100.130,8.8.8.8 \
gateway=192.168.3.1
/ip dns
set servers=8.8.8.8,4.4.4.4
/ip firewall filter
add chain=input in-interface=ether1-ISP1
add chain=forward in-interface=ether1-ISP1
add chain=output out-interface=ether1-ISP1
add chain=forward out-interface=ether1-ISP1
/ip firewall mangle
add action=mark-connection chain=prerouting connection-state=new \
in-interface=bridge-Home new-connection-mark=Conn1 nth=2,1
add action=mark-routing chain=prerouting connection-mark=Conn1 in-interface=\
bridge-Home new-routing-mark=Conn1 passthrough=no
add action=mark-connection chain=prerouting connection-state=new \
in-interface=bridge-Home new-connection-mark=Conn2 nth=1,1
add action=mark-routing chain=prerouting connection-mark=Conn2 in-interface=\
bridge-Home new-routing-mark=Conn2 passthrough=no
/ip firewall nat
add action=masquerade chain=srcnat src-address=192.168.1.0/24
add action=masquerade chain=srcnat src-address=192.168.2.0/24
add action=masquerade chain=srcnat src-address=192.168.3.0/24
add chain=srcnat connection-mark=Conn1 out-interface=ether1-ISP1
add action=masquerade chain=srcnat connection-mark=Conn2 out-interface=\
ether2-ISP2
add chain=dstnat in-interface=ether1-ISP1
add chain=srcnat
add chain=dstnat
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
/system clock
set time-zone-autodetect=no time-zone-name=Europe/Bucharest
/system scheduler
add interval=1h name="Check ISP1 for Connectivity" on-event=\
"/ip dhcp-client set [ find comment=ISP1 ] default-route-distance=1\r\
\n" policy=ftp,reboot,read,write,policy,password,sniff,sensitive \
start-date=feb/03/2014 start-time=01:18:07
/tool netwatch
add comment=ISP1 disabled=yes down-script="/ip dhcp-client set [ find comment=U\
PC ] default-route-distance=10\r\
\n\r\
\n/tool netwatch set [find comment=\"ISP2\"] disabled=no\r\
\n/tool netwatch set [find comment=\"ISP1\"] disabled=yes" host=8.8.8.8 \
interval=10s timeout=3s
add comment=ISP2 down-script="/ip dhcp-client set [ find comment=ISP1 ] d\
efault-route-distance=1\r\
\n\r\
\n/tool netwatch set [find comment=\"ISP2\"] disabled=yes\r\
\n/tool netwatch set [find comment=\"ISP1\"] disabled=no" host=8.8.8.8 \
interval=10s timeout=3s
/tool romon port
add disabled=no
Can anyone help with the config? What might be wrong?
Also, I’d like to add WLANs for: Home, Neighbour and Guests. I added them in the Interface, configured them in IP/Addresses, IP/DHCP Server - but it doesn’t work. What am I missing? ![]()
Thanks in advance.