Client and AP connection problem

[P3T3R]

Hello,

i have problem with my AP and client on Mikrotik AX.

AP

[admin@AP5] > /export show-sensitive

2026-06-13 12:39:32 by RouterOS 7.23

software id = NFRB-3TI0



model = L22UGS-5HaxD2HaxD

serial number = HGY0A85J846

/interface bridge
add name=bridgeLAN protocol-mode=none
/interface wifi security
add authentication-types=wpa2-psk disabled=no name=wifi-security passphrase=
cinrasen2
/interface wifi configuration
add country=Slovakia mode=ap name=cfg-ap5 security=wifi-security ssid=5GHz-AP5
/interface wifi
set [ find default-name=wifi2 ] channel.band=5ghz-ax .frequency=5180 .width=20mhz 
comment="5Ghz AX: Liesek, smer Trsten" configuration=cfg-ap5 
configuration.country=Uzbekistan .mode=ap disabled=no interworking.realms-raw="" 
security=wifi-security security.authentication-types=wpa2-psk .passphrase=
cinrasen2
/interface bridge port
add bridge=bridgeLAN interface=ether1
add bridge=bridgeLAN interface=wifi2
/ip address
add address=192.168.114.7/24 interface=bridgeLAN network=192.168.114.0
/ip dns
set servers=1.1.1.1,1.0.0.1
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.114.1 routing-table=main
/system clock
set time-zone-name=Europe/Bratislava
/system identity
set name="AP5 Smer Trstena(terasa)"
/system ntp client
set enabled=yes
/system ntp client servers
add address=sk.pool.ntp.org
add address=0.sk.pool.ntp.org
add address=1.sk.pool.ntp.org
add address=2.sk.pool.ntp.org
add address=3.sk.pool.ntp.org

And my client LGH 5ax

admin@lgh] > /export show-sensitive

2026-01-07 11:02:10 by RouterOS 7.20.7

software id = AACM-IVVN



model = LHG-5axD

serial number = HM50BFVPM6V

/interface list
add name=WAN
add name=LAN
/interface wifi security
add authentication-types=wpa2-psk disabled=no name=sec1 passphrase=cinrasen2
/interface wifi
set [ find default-name=wifi1 ] channel.band=5ghz-ax .width=20mhz 
configuration.country=Uzbekistan .mode=station .ssid=5GHz-AP5 disabled=no 
security=sec1 security.authentication-types=wpa2-psk .passphrase=cinrasen2
/ip pool
add name=dhcp ranges=192.168.100.100-192.168.100.200
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface list member
add interface=ether1 list=WAN
add interface=wifi1 list=LAN
/ip address
add address=192.168.114.239/24 interface=wifi1 network=192.168.114.0
add address=192.168.100.252/24 interface=ether1 network=192.168.100.0
/ip dhcp-server

Interface not running

add address-pool=dhcp interface=wifi1 lease-time=3d30m name=dhcp1
/ip dhcp-server network
add address=192.168.100.0/24 dns-server=192.168.100.252 gateway=
192.168.100.252 netmask=24
/ip dns
set servers=8.8.8.8,1.1.1.1
/ip firewall nat
add action=masquerade chain=srcnat
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.114.1
/system identity
set name=lhg5ax

The client still won't connect to my app. What's the problem?

[tadawson]

If you run scan on the client, does it see the AP? Also not sure why you have a DHCP server setup on a wireless client and not on the AP. In this config, it would appeat that the client could never get an IP (no DHCP seen on the AP to offer), and the client can't come up without getting an IP, and it's DHCP can't start until the link is up (as noted by the error in the config dump).

If the goal is to link a second physical network segment, either devices thereon would need to pull an address via DHCP from the server, or you SNAT and have the client offer it's own different block from the AP.

(Or did I misread something?)

[P3T3R]

Yes, if I run a scan I see the AP. I set DHCP for the client on the device. That's fine. The access point does not have DHCP enabled.

I'll leave it to this for the most part
[admin@lgh] > /interface wifi monitor wifi1 once
state: scanning
channel-priorities: 5180/ax
5200/ax
5220/ax
5240/ax
5260/ax/D
5280/ax/D
5300/ax/D
5320/ax/D

but once I got into the state, but not connected

[admin@lhg] > /interface wifi monitor wifi1 once
state: connecting
ap-address: F4:1E:57:2C:3F:9D
channel-priorities: 5180/ax
5200/ax
5220/ax
5240/ax
5260/ax/D
5280/ax/D
5300/ax/D
5320/ax/D

AP5 = RouterOS 7.23

LHG = RouterOS 7.23

Any idea on a solution to get LHG to connect to Mantbox 15s ax?

[erlinden]

At least you would have to unset the value "": interworking.realms-raw=""

Furthermore, set properties on one place and don´t override them.
Instead of:

/interface wifi security
add authentication-types=wpa2-psk disabled=no name=sec1 passphrase=cinrasen2
/interface wifi
set [ find default-name=wifi1 ] channel.band=5ghz-ax .width=20mhz 
configuration.country=Uzbekistan .mode=station .ssid=5GHz-AP5 disabled=no 
security=sec1 security.authentication-types=wpa2-psk .passphrase=cinrasen2

Use:

/interface wifi security
add authentication-types=wpa2-psk disabled=no name=sec1 passphrase=cinrasen2
/interface wifi
set [ find default-name=wifi1 ] channel.band=5ghz-ax .width=20mhz 
configuration.country=Uzbekistan .mode=station .ssid=5GHz-AP5 disabled=no 
security=sec1

[P3T3R]

Thank you, but not working... Any other solution? Or is the AP set up incorrectly?

I have devices on version 6.49 and it works fine there. I only have a problem with AX devices on version 7.

[Naecken]

First problem that I see is in a config

add interface=ether1 list=WAN
add interface=wifi1 list=LAN

Then you have DHCP server on WiFi interface. So is the LHG router for L22? I don't think so.

[P3T3R]

I don't understand this one bit either...

Is it bad in quick set?

The local IP should be 192.168.100.252 and on the WAN side 192.168.114.237