Chateau lte7 ethernet ports seem not working

Dear forum,

Just bought a MT chateau lte7. (has LTE, wifi, 5 eth)

I thought: default config is probably running dhcp on wifi and ethernet ports. (also suggested by quickstart text).
But on ethernet my PC’s don’t get an IP address. On Wifi they do. I have no clue why not. Also winbox with MAC address over ETH has issues. One moment it seemed working, but when I disabled wifi on the PC with winbox, to make sure it was indeed over ETH, connection got lost.

(so over wifi I can connect, I can configure etc, I can configure LTE and get LTE network access, but ethernet ports: I don’t get them working)

Updated routeros to 7.22.2.
Factory reset done already more than 10 times.

Bottom line: I have no clue why this is not working. Default config has wifi and eth interfaces all on the one and only default bridge. Routeros DHCP working fine on the wifi interface.

Desperate for suggestions what to test/try next.

best regards,
Raf

Please provide your configuration.

On ethernet 1 it will most likely not provide DHCP. That's for most devices default WAN port when using factory config.

Have you tried ether2-5 as well ?

It might be useful to post your current config (minus serial, minus passwds, ...) so we can have a look what could be wrong.

I did try ether2-5 as well.


[admin@MikroTik] > /export compact  
# 2026-05-08 05:53:51 by RouterOS 7.22.2
# software id = Z446-AHY1
#
# model = D53G-5HacD2HnD
# serial number = < serial removed >
/interface bridge
add admin-mac=D0:EA:11:82:D8:31 auto-mac=no comment=defconf name=bridge
/interface lte
set [ find default-name=lte1 ] allow-roaming=yes band=""
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=MikroTik-82D836 wireless-protocol=\
    802.11
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-XXXX disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=MikroTik-82D836 \
    wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk comment=defconf disable-pmkid=yes mode=dynamic-keys supplicant-identity=MikroTik
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge name=defconf
/queue type
add fq-codel-ecn=no kind=fq-codel name=fq-codel-ethernet-default
/queue interface
set ether1 queue=fq-codel-ethernet-default
set ether2 queue=fq-codel-ethernet-default
set ether3 queue=fq-codel-ethernet-default
set ether4 queue=fq-codel-ethernet-default
set ether5 queue=fq-codel-ethernet-default
/system script
add comment=defconf dont-require-permissions=no name=dark-mode owner=*sys policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\r\
    \n   :if ([system leds settings get all-leds-off] = \"never\") do={\r\
    \n     /system leds settings set all-leds-off=immediate \r\
    \n   } else={\r\
    \n     /system leds settings set all-leds-off=never \r\
    \n   }\r\
    \n "
/disk settings
set auto-media-interface=bridge auto-media-sharing=yes auto-smb-sharing=yes
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf interface=wlan2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=lte1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan type=A
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" dst-port=33434-33534 protocol=udp
add action=accept chain=input comment="defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=input comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
add action=fasttrack-connection chain=forward comment="defconf: fasttrack6" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=forward comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
/ipv6 nd
set [ find default=yes ] advertise-dns=yes
/system clock
set time-zone-name=Europe/London
/system routerboard mode-button
set enabled=yes on-event=dark-mode
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
[admin@MikroTik] >  

Your settings (for DHCP server) look just fine.

Try configuring a port (let's say ether5) as an offbridge access one:
Once and for all COMPLETE Offbridge Port setup

add to it another DHCP server instance.

Verify that it works on the offbridge port.

Then delete and re-create the DHCP server on the bridge.

The one thing which strikes me as odd is this

/queue type
add fq-codel-ecn=no kind=fq-codel name=fq-codel-ethernet-default
/queue interface
set ether1 queue=fq-codel-ethernet-default
set ether2 queue=fq-codel-ethernet-default
set ether3 queue=fq-codel-ethernet-default
set ether4 queue=fq-codel-ethernet-default
set ether5 queue=fq-codel-ethernet-default

Is that default config ?
It also happens to be the difference between ethernet (included on interface queue) and wireless ports (not included), since otherwise all ports should be connected to bridge.
And the wireless ports do work as expected.

Can you remove those queue interface settings ?

20260509_13h43_chateau_export.txt (7.3 KB)

Tried the offbridge config on ether5 as suggested by jaclaz (but just the minimum for MAC winbox, no DHCP because I think mac should work fine, right?): but still no winbox connect on ether5. Discovery works, the device is listed, but on connect Winbox says ERR: Could not connect, MacConnection syn timeout.

(good suggestion anyhow, I should do this on my Mikrotik Hex as well in order to have access at all times)

Tried then to change ether5 queue settings to default (in which case the config shows it as queue=default), and also to hardware-only queue type (in which case the config shows it as removed from queue settings, as in attached config)

Same issue: cannot connect winbox via eth5. Wireshark shows that RouterOS sends MNDP messages, and the Winbox tries to initiate MAC-Telnet protocol. But RouterOS doesn't respond to MAC-Telnet.

Then I tried to set fixed IP on eth5 and on the PC connected to it. Still no Winbox connection. On wireshark the behaviour is different: no ARP response, but maybe I made a mistake in configuring IP. (this last test is not in the attached config)

Some questions I have:

  • Is it supposed to work at all? Anybody in the forum who has a Chateau LTE7?
  • Are there detailed logs possible in routerOS that could help me?

Of course other suggestions welcome, preferably based on a working theory of what could be wrong.

/tool mac-server
set allowed-interface-list=LAN

should be:

/tool mac-server
set allowed-interface-list=MGMTandLAN

Or, add ether5 to LAN also:

/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=lte1 list=WAN
add comment=OffBridge interface=ether5 list=MGMT
add comment=OffBridge interface=ether5 list=LAN

Spent many hours trying to understand what was happening, and … it turned out that the following hardware setup has problems (no DHCP, no winbox on L2, …):

my laptop ↔ USB-C ethernet dongle ↔ UTP cable ↔ Chateau eth port

Whereas:

  • adding an ethernet switch in between the setup: all is working fine.
  • using a laptop with built-in ethernet: all is working fine.

Anybody who can explain why an ethernet dongle triggers these problems?

Speed negotation problem.

This is default configuration for LTE devices.

Yes .

So It Is either the USB-C single or the driver/ settings on your laptop OS...

Setting eth speed fixed to 100Mbps on both sides and the dongle works with the Chateau, putting back to auto/negotation and the link has problems even though it's reported as “OK”. Seems OS independent, same problem happens on windows/linux/mac laptop.

I have been punished for being cheap on eth-usb dongles (< 5 euro), haha.

Thanks everybody for your help.

Maybe that dongle is a 100 Mbit one that suffers from delusions of grandeur and believes to be a Gbit one :wink:.

But don't be too harsh against these low cost devices.

Anecdotally, a few years ago I setup for a friend a workaround to connect his (smart) TV and some other stuff related to his modem (only a few meters away but with a very thick stone wall between the router and the TV) through a couple powerline adapters and - I don't remember the exact details - there was one of those USB to ethernet adapters involved.
I got all the stuff from a "reliable" local shop, the adapter labeled 1 Gb.
There was no way to have that stuff work reliably.
My suspects were on the powerline adapters, so I got another couple of them (reknown brand) but same issues.
I had by pure chance a no-name/no-brand/el-cheapo 100 Mb adapter that I had bought on Aliexpress only to reach the minimum for free shipping, so I must have paid it less than or around 2 Euro, and out of disperation I used it in that setup and lo and behold everything started working just fine (and continued working for at least a couple of years.