Bridging interfaces?

RouterOS Beginner Basics
1

I’m trying to setup a test network to see if I can get it to work the way I want it before I put it into action.

I have a 411AR that has an additional wireless card.

  • ether1 has a static ip of 192.168.11.201 (this is also connected to the internet via a low cost router)


  • wlan 1 is disabled


  • wlan2 is enabled with dhcp running giving ip range of 192.168.15.1/24

I can ping out using the built in ping tool (winbox), but any client that is connected to wlan2 has no access. I’m a little stumped on what’s happening.

Relevant info:

[admin@MikroTik] /interface> wireless print
Flags: X - disabled, R - running 
 0 X  name="wlan1" mtu=1500 mac-address=00:0C:42:DF:51:A4 arp=enabled 
      interface-type=Atheros AR5212 mode=station ssid="MikroTik" frequency=2412 
      band=2ghz-b channel-width=20mhz scan-list=default 
      wireless-protocol=unspecified antenna-mode=ant-a wds-mode=disabled 
      wds-default-bridge=none wds-ignore-ssid=no bridge-mode=enabled 
      default-authentication=yes default-forwarding=yes default-ap-tx-limit=0 
      default-client-tx-limit=0 hide-ssid=no security-profile=default 
      compression=no 

 1  R ;;; LAN
      name="wlan2" mtu=1500 mac-address=00:0C:42:6C:73:6D arp=enabled 
      interface-type=Atheros 11N mode=ap-bridge ssid="MikroTik" frequency=2462 
      band=2ghz-b/g/n channel-width=20mhz scan-list=default 
      wireless-protocol=unspecified wds-mode=disabled wds-default-bridge=none 
      wds-ignore-ssid=no bridge-mode=enabled default-authentication=yes 
      default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0 
      hide-ssid=no security-profile=default compression=no




[admin@MikroTik] /interface> ethernet print 
Flags: X - disabled, R - running, S - slave 
 #    NAME          MTU MAC-ADDRESS       ARP        MASTER-PORT      SWITCH     
 0 R  ;;; WAN
      ether1       1500 00:0C:42:DF:51:A3 enabled




[admin@MikroTik] > /ip address print
Flags: X - disabled, I - invalid, D - dynamic 
 #   ADDRESS            NETWORK         INTERFACE                                
 0 X ;;; default configuration
     192.168.88.1/24    192.168.88.0    ether1                                   
 1   192.168.11.201/24  192.168.11.0    ether1                                   
 2   192.168.15.0/24    192.168.15.0    wlan2




[admin@MikroTik] > /interface bridge  print            
Flags: X - disabled, R - running 
 0  R name="bridge1" mtu=1500 l2mtu=2290 arp=enabled 
      mac-address=00:0C:42:6C:73:6D protocol-mode=none priority=0x8000 
      auto-mac=yes admin-mac=00:00:00:00:00:00 max-message-age=20s 
      forward-delay=15s transmit-hold-count=6 ageing-time=5m




[admin@MikroTik] > /ip dhcp-server print
Flags: X - disabled, I - invalid 
 #   NAME       INTERFACE     RELAY           ADDRESS-POOL     LEASE-TIME ADD-ARP
 0   dhcp1      bridge1                       dhcp_pool1       3d




[admin@MikroTik] /ip firewall> nat print 
Flags: X - disabled, I - invalid, D - dynamic 
 0   ;;; Added by webbox
     chain=srcnat action=masquerade out-interface=bridge1




[admin@MikroTik] /ip firewall> filter print
Flags: X - disabled, I - invalid, D - dynamic 
 0   ;;; Added by webbox
 0   ;;; Added by webbox
     chain=input action=accept protocol=icmp 

 1   ;;; Added by webbox
     chain=input action=accept connection-state=established 
     in-interface=bridge1 

 2   ;;; Added by webbox
     chain=input action=accept connection-state=related in-int

 3   ;;; Added by webbox
     chain=input action=drop in-interface=bridge1 

 4   ;;; Added by webbox
     chain=forward action=jump jump-target=customer in-interfa

 5   ;;; Added by webbox
     chain=customer action=accept connection-state=established

 6   ;;; Added by webbox
     chain=customer action=accept connection-state=related 

 7   ;;; Added by webbox
     chain=customer action=drop

Any help would be appreciated.

2

You have a bridge, but you have IP addresses on interfaces? That is wrong.

If you have a bridge, and if you have interfaces in the bridge, then IP addresses go on the bridge itself, NOT the interfaces.

If you don’t have any ports in the bridge, then whatever rules you put on the bridge, like masquerade, will NOT be used.

Why are you tryit to use a bridge? I’m not sure you have any ports in the bridge, yet your masq rule is on the bridge.