Ok so i have a bridge 192.168.1.1/24 with dhchp server for 1 port and wifi, everything is ok except i can only ping the router 192.168.1.1 and not clients like 192.168.1.xxx, what i am missing?
Windows firewall may be enabled on the clients
Too much generic,
supposing you use a RB951G-2HnD,
supposing you use RouterOS 6.7+
supposing you have update the BIOS [firmware] to 3.12,
supposing you have set the address not on ethernet or wireless interface, but rightly on bridge,
supposing your client all can obtain correctly the ip from DHCP server,
supposing on your firewall/filters are no rule,
supposing the client also not have a firewall,
supposing on wireless you leave checked the default settings of “Default Forward”,
supposing on wireless you leave checked the default settings of Multicast Helper to value “default”,
you can not ping 192.168.1.xxx from WHERE?
Yes i have latest ros and firmware, for ex 1 laptop to ether4 and another to ether5 where both ports are in the same bridge, laptops can’t ping each other and the same thing if the laptop is connected through wifi(same bridge also)
at this point, put “/export compact” results on the forum, if you want help
Maybe i’m missing a fw rule
/interface bridge
add admin-mac=4C:5E:0C:43:AC:80 auto-mac=no l2mtu=1598 name=bridge-claudiu
add admin-mac=4C:5E:0C:43:AC:86 auto-mac=no l2mtu=1598 name=bridge-local
add l2mtu=2286 name=bridge_wlan
/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether3 ] master-port=ether2
set [ find default-name=ether6 ] name=ether6-master-local
set [ find default-name=ether7 ] master-port=ether6-master-local name=
ether7-slave-local
set [ find default-name=ether8 ] master-port=ether6-master-local name=
ether8-slave-local
set [ find default-name=ether9 ] master-port=ether6-master-local name=
ether9-slave-local
set [ find default-name=ether10 ] master-port=ether6-master-local name=
ether10-slave-local
/interface pptp-server
add name=pptp-in1 user=“”
/ip neighbor discovery
set ether1-gateway discover=no
/interface vlan
add interface=ether2 l2mtu=1594 name=vlan1 vlan-id=10
add interface=ether2 l2mtu=1594 name=vlan2 vlan-id=20
/interface ethernet switch port
set 2 default-vlan-id=10 vlan-header=always-strip vlan-mode=secure
set 3 default-vlan-id=20 vlan-header=always-strip vlan-mode=secure
set 11 vlan-mode=secure
/interface vlan
add interface=wlan1 l2mtu=2286 name=vlan3 vlan-id=30
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
mac-cookie-timeout=3d
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp_pppoe_pool ranges=192.168.1.100-192.168.1.200
add name=vpn_pool ranges=192.168.1.200-192.168.1.255
add name=dhcp_vlan1_pool ranges=192.168.10.100-192.168.10.200
add name=dhcp_vlan2_pool ranges=192.168.20.100-192.168.20.200
add name=dhcp_vlan3_pool ranges=192.168.30.100-192.168.30.200
/ip dhcp-server
add address-pool=default-dhcp interface=bridge-local name=default
add address-pool=dhcp_pppoe_pool disabled=no interface=bridge-claudiu name=
dhcp_pppoe
add address-pool=dhcp_vlan1_pool disabled=no interface=vlan1 name=dhcp_vlan1
add address-pool=dhcp_vlan2_pool disabled=no interface=vlan2 name=dhcp_vlan2
add address-pool=dhcp_vlan3_pool disabled=no interface=vlan3 name=dhcp_vlan3
/port
set 0 name=serial0
set 1 baud-rate=9600 data-bits=8 flow-control=none name=usb2 parity=none
stop-bits=1
/ppp profile
set 0 dns-server=192.168.88.1
add dns-server=8.8.8.8,8.8.4.4 local-address=192.168.1.1 name=vpn
remote-address=vpn_pool
/queue simple
add disabled=yes max-limit=512k/512k name=queue1 target=ppp-out1
add disabled=yes max-limit=2M/2M name=queue2 target=
/interface bridge port
add bridge=bridge-local disabled=yes interface=ether3
add bridge=bridge-claudiu interface=ether4
add bridge=bridge-claudiu interface=ether5
add bridge=bridge-claudiu interface=ether6-master-local
add bridge=bridge-local interface=sfp1
add bridge=bridge-claudiu interface=wlan1
add bridge=bridge-local disabled=yes interface=ether2
add bridge=bridge_wlan interface=vlan3
/interface ethernet switch vlan
add independent-learning=no ports=ether2,switch1-cpu switch=switch1 vlan-id=
10
add independent-learning=no ports=ether3,switch1-cpu switch=switch1 vlan-id=
20
/interface pptp-server server
set authentication=pap,chap,mschap1,mschap2 enabled=yes
/ip address
add address=192.168.88.1/24 comment=“default configuration” disabled=yes
interface=wlan1 network=192.168.88.0
add address=192.168.1.1/24 interface=bridge-claudiu network=192.168.1.0
add address=192.168.10.1/24 interface=vlan1 network=192.168.10.0
add address=192.168.20.1/24 interface=vlan2 network=192.168.20.0
add address=192.168.30.1/24 interface=vlan3 network=192.168.30.0
/ip dhcp-client
add comment=“default configuration” dhcp-options=hostname,clientid interface=
ether1-gateway
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=192.168.1.1
add address=192.168.10.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=192.168.10.1
add address=192.168.20.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=192.168.20.1
add address=192.168.30.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=192.168.30.1
add address=192.168.88.0/24 comment=“default configuration” dns-server=
8.8.8.8,8.8.4.4 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
add address=192.168.1.1 name=gw
/ip firewall filter
add chain=input comment=“default configuration” protocol=icmp
add chain=input comment=“default configuration” connection-state=established
add chain=input comment=“default configuration” connection-state=related
add action=drop chain=input comment=“default configuration” in-interface=
ether1-gateway
add chain=forward comment=“default configuration” connection-state=
established
add chain=forward comment=“default configuration” connection-state=related
add action=drop chain=forward comment=“default configuration”
connection-state=invalid
add action=drop chain=input dst-port=22 in-interface=pppoe-out1 protocol=tcp
add action=drop chain=input dst-port=23 in-interface=pppoe-out1 protocol=tcp
add action=drop chain=input dst-port=21 in-interface=pppoe-out1 protocol=tcp
add action=drop chain=input dst-port=80 in-interface=pppoe-out1 protocol=tcp
/ip firewall nat
add action=masquerade chain=srcnat comment=“default configuration” disabled=
yes out-interface=ether1-gateway
add action=masquerade chain=srcnat out-interface=pppoe-out1
add action=masquerade chain=srcnat out-interface=ppp-out1
/ip traffic-flow
set enabled=yes
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=bridge-claudiu type=external
add interface=vlan1 type=external
add interface=vlan2 type=external
the bridge-claudiu must have the ether4 admin MAC address
bridge-local must have the spf admin MAC address
I not see other errors in this configurations, about your problem.
From wifi/lan bridge i can ping my vpn, from vpn i can only ping lan
2laptops, 1 laptop in wifi can’t ping another only if the second one it’s in lan and vice versa 1 laptop in lan can’t ping another only if the second one it’s in wifi.. what could be the problem?
/interface bridge
add admin-mac=4C:5E:0C:43:AC:86 auto-mac=no disabled=yes name=bridge-local
add admin-mac=4C:5E:0C:43:AC:89 auto-mac=no l2mtu=1598 name=bridge_lan
add admin-mac=4C:5E:0C:43:AC:8F auto-mac=no l2mtu=2290 name=bridge_wlan
/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether6 ] name=ether6-master-local
set [ find default-name=ether7 ] master-port=ether6-master-local name=
ether7-slave-local
set [ find default-name=ether8 ] master-port=ether6-master-local name=
ether8-slave-local
set [ find default-name=ether9 ] master-port=ether6-master-local name=
ether9-slave-local
set [ find default-name=ether10 ] master-port=ether6-master-local name=
ether10-slave-local
/ip neighbor discovery
set ether1-gateway discover=no
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=vpn_pool ranges=192.168.30.100
add name=dhcp_lan_pool ranges=192.168.10.100-192.168.10.200
add name=dhcp_wlan_pool ranges=192.168.20.100-192.168.20.200
/ip dhcp-server
add address-pool=default-dhcp interface=bridge-local name=default
add address-pool=dhcp_lan_pool disabled=no interface=bridge_lan name=dhcp_lan
add address-pool=dhcp_wlan_pool disabled=no interface=bridge_wlan name=
dhcp_wlan
/port
set 0 name=serial0
set 1 baud-rate=9600 data-bits=8 flow-control=none name=usb2 parity=none
stop-bits=1
/ppp profile
set 0 dns-server=192.168.88.1
add dns-server=8.8.8.8,8.8.4.4 local-address=192.168.30.1 name=vpn
remote-address=vpn_pool
/interface bridge port
add bridge=bridge_lan interface=ether3
add bridge=bridge_lan interface=ether4
add bridge=bridge_lan interface=ether5
add bridge=bridge-local disabled=yes interface=ether6-master-local
add bridge=bridge-local disabled=yes interface=sfp1
add bridge=bridge_wlan interface=wlan1
add bridge=bridge_lan interface=ether2
/ip address
add address=192.168.88.1/24 comment=“default configuration” disabled=yes
interface=wlan1 network=192.168.88.0
add address=192.168.10.1/24 interface=bridge_lan network=192.168.10.0
add address=192.168.20.1/24 interface=bridge_wlan network=192.168.20.0
/ip dhcp-client
add comment=“default configuration” dhcp-options=hostname,clientid interface=
ether1-gateway
/ip dhcp-server network
add address=192.168.10.0/24 comment=lan gateway=192.168.10.1
add address=192.168.20.0/24 comment=wlan gateway=192.168.20.1
add address=192.168.88.0/24 comment=“default configuration” gateway=
192.168.88.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.88.1 name=router
add address=192.168.1.1 name=gw
/ip firewall filter
add chain=input comment=“default configuration” protocol=icmp
add chain=input comment=“default configuration” connection-state=established
add chain=input comment=“default configuration” connection-state=related
add action=drop chain=input comment=“default configuration” in-interface=
ether1-gateway
add chain=forward comment=“default configuration” connection-state=
established
add chain=forward comment=“default configuration” connection-state=related
add action=drop chain=forward comment=“default configuration”
connection-state=invalid
add action=drop chain=input dst-port=22 in-interface=pppoe-out1 protocol=tcp
add action=drop chain=input dst-port=23 in-interface=pppoe-out1 protocol=tcp
add action=drop chain=input dst-port=21 in-interface=pppoe-out1 protocol=tcp
add action=drop chain=input dst-port=80 in-interface=pppoe-out1 protocol=tcp
/ip firewall nat
add action=masquerade chain=srcnat comment=“default configuration” disabled=
yes out-interface=ether1-gateway
add action=masquerade chain=srcnat out-interface=pppoe-out1
add action=masquerade chain=srcnat out-interface=ppp-out1
/ip traffic-flow
set enabled=yesLE. w7 damn firewall, by default icmp it;s blocked