Cannot DHCP from CenturyLink IPoE

RouterOS Beginner Basics
1

Hello,

I bought a Mikrotik hex because the netgear wifi6e device I have doesn’t support VLAN tagging on the WAN interface, as required by CenturyLink. However, I’m unable to get a DHCP address with the hex device. According to CenturyLink, the router just need to be configured with VLAN id 201 and is IPoE, not PPPoE. So, with an up to date version of RouterOS, I’ve created a VLAN interface, assigned it to ethernet1 (which is the one connected to the fiber device in my house), and set the DHCP client to use the VLAN. However, it’s not receiving an IP address. Any ideas on what could be wrong here? Here is the config export:

# 2023-11-05 14:57:55 by RouterOS 7.11.2
# software id = GENI-YT7H
#
# model = RB750Gr3
# serial number = 12345
/interface bridge
add admin-mac=18:FD:74:FC:D4:8E auto-mac=no comment=defconf name=bridge
/interface vlan
add interface=ether1 name=QuantumFiber vlan-id=201
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge lease-time=10m name=defconf
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge comment=defconf ingress-filtering=no interface=ether2
add bridge=bridge comment=defconf ingress-filtering=no interface=ether3
add bridge=bridge comment=defconf ingress-filtering=no interface=ether4
add bridge=bridge comment=defconf ingress-filtering=no interface=ether5
/ip neighbor discovery-settings
set discover-interface-list=LAN
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/interface ovpn-server server
set auth=sha1,md5
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
    192.168.88.0
/ip dhcp-client
add comment=defconf interface=QuantumFiber
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related hw-offload=yes
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
    ipsec-policy=out,none out-interface-list=WAN
/routing bfd configuration
add disabled=no interfaces=all min-rx=200ms min-tx=200ms multiplier=5
/system clock
set time-zone-name=America/Los_Angeles
/system identity
set name=nwrye
/system note
set show-at-login=no
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN

I’m doing all the configs through the web UI, not the terminal.

2

You need to add the “QuantumFiber” VLAN interface to your WAN interface list.

/interface list member add interface=QuantumFiber list=WAN

While VLAN201 is on ether1, they are different IP/Layer3 interfaces… and NAT/firewall depend on the interface being in the right interface-list for them to work.

Also are you sure PPPoE isn’t just on VLAN 201? e.g. if you have username/password, it may be PPPoE is on VLAN 201.

3

Thanks it’s working now. I added the vlan to the wan list and at first it didn’t work but after unplugging the fiber device and rebooting the hex it pulled an address from the ISP. Thank you!