Hellow I have a connection router board uses sector antennas (ubnt) to route the internet and I have got ubnt nanostation m series stations and now I have got a nanobridge M and it gets the signal everything is ok but I don’t wont to have an interface for this antenna all of the clients on this nanobridge M shouldn’t see any interface they must directly go to the internet how can I do it ? I tried ip bindign but as I did it before this time i cant I also tried to set e router after bridge but again not 
whyyyy noone answers my questionss!!!??? isn’t here any administrator on this website? :S:S there isn’t support at all so why should we use mikrotik ?? please answer me
this is not a support forum! your question is chaotic, has no punctuation, and mostly talks about competing products.
to get answers, read this: http://forum.mikrotik.com/t/getting-the-most-out-of-this-forum/40983/1
Ok,so now.I want to give an internet connection to a static known which is a UBNT Nanobridge antenna how can I do it ?
there isn’t support at all so why should we use mikrotik ??
So if nobody gives you support about how to eat, you’ll probably finish not eating at all.
And in your case, where is needed support from mikrotik users since you are trying
to connect ubnt devices. You’re description is pretty vague and nowhere there I read about
a mikrotik device.
ethernet or wireless?
wireless
My antennas are ubnt devices my router boards are all mikrotik and there isn’t mikrotik antennas sold at anywhere if you can provide I get
Also http://www.mikrotik.com/mfm
@boldness
the point is not only on the product you are using, but as I said, you are not providing a detailed information.
What is the config on AP, what is the config on CPE, IP addresses, firewall rules, what are you trying to achieve?
And yet, you shouldn’t complain why nobody is helping you.
Ok im explaining the situation,
ISP(MY REAL IP:31.x.x.x)
|
v
RB450->192.168.88.x->UBNT Devices(SECTORS)->192.168.1.x <-wireless clients 192.168.1.x --and some of them are in bridge mode
– some of them are in router mode(192.168.254.x)
so everyone gets a hotspot interface when they login they can use the internet but I want the nanobridge antenna(192.168.1.72) which routs (192.168.254.x)block to it’s inrernal block to not to get any interface and all the clients which will connect to that antenna by switch should be able to go to the internet directly
So I think I can do it by using the queue in mikrotik but I dont know how to do.
so who is going to answer now ?
by your description i do not understand what is the connection between the router you are using, networks you are using and one 3rd party device where you want some configuration that is unrelated to the RouterOS or RouteBOARD.
draw an network schema and check what is you want to do. Check out some documentation of the products you use, maybe answer is already there.
Ok I see just tell me this I did research a lot but I couldn’t do
just tell me I have a router board ok and a ubnt device is used as an acces point and another ubnt device is in station mode and gets the internet from that accespoint so I don’t want the clients which will connect to that ubnt device which is in station mode to see an interface I want them to go to the internet directly I tried to make an ip binding but it’s not possible I couldn’t what can I do else
If I understand you, you dont want some clients to see hotspot page. If yes, cont…
Option1. Use PPPoE by setting up a pppoe server on your existing mikrotik router running hotspot. That way the internet will always be on as the nanostation at the clients place will do the authentication thereby bypassing the clients from seeing the hotspot page. This is your best bet if you want to effectivly control their speed (bandwidth).
Option2. Use the ip-binding option under the ip/hotspot/ip binding to bypass the clients mac address or ip address. this will however give the clients total access to your bandwidth except if you are using a mikrotik cpe or if the nanostation has the features for limiting their bandwidth from their radio.
Let us know if this solve your problem.
Thankkk youuu fourtanetely one understand me firstly thank you a lot I understund everything you told me I will now try to make a ppoe to do it but u should know a thing that I tried to do it by bypassing a mac adress using the ip binding section but I couldnt do it I can do it when I use a router connectod to the ubnt device and bypassing the mac adress of that router but I try to bypass the ubnt device the connection disconnect itseflf I dont know why anyway thank you very much I will try ppoe now but if you can solve my other problem also I will thank you much much more.. by the way ubn devices have got bandwidth limitations so it’s not a problem but controling it on the radius is the only problem anyway thanks a lot again
go with the binding option, that way you will not add any overhead to your devices. And while following manual, there should not be any problems adding bindings.
p.s. you finally wrote something that other could actually understand 
I think when Set the ubnt device to the router mode that time we can not do ipbinding I don’t know why but it disconnects and I have got another questions I want to ask them also I don’t want to make a lot of posts in the form
First:I’m trying to set a nat to acces the internal router board by handling this
Add rule allowing access to the internal server from external networks:
/ip firewall nat add chain=dstnat dst-address=10.5.8.200 action=dst-nat
to-addresses=192.168.0.109
this is in the mikrotik manual I did everything correct but it doesn’t forward me to the ip I wanted im writing it in details
My real ip:31.209.110.x
my internal:192.168.88.x
ip firewall nat add chain=dstnat dst-address=31.209.110.x action=dst-nat
to-addresses=192.168.88.100
and I also set the dst port:100 and source port :80 so is this ok ? when I write 31.209.110.x:100 to the browser it should open the page of 192.168.88.100 isn’t this ok ? it doesn’t work
and the second question is
I usually get some attacks from some real ips out the network How can I prevent my server against them ? the attacks are like this for ex :
system error critical login failure for user verwalter from 210.71.234.65 and it’s always shown on my log
for NAT to work you should have a rule like this:
/ip firewall nat
add chain=dstnat action=dst-nat to-addresses=192.168.88.x to-ports=80 protocol=tcp
dst-address=31.209.110.x dst-port=8888
So if you send a request to IP=31.209.110.x to port=8888, you should be able to access
your internat IP=192.168.88.x on port=80
As for the attacks from outside, have a look at these filters rules:
http://wiki.mikrotik.com/wiki/Bruteforce_login_prevention
thank you very much I prevented the attacks but even i did the dst nat it doesnt work