Clients cannot access Internet. Using RB450

Greetings.
I have a RB450 running RouterOS 3.13, with a T1 on Ether1, and local lan on Ether2
Local Lan is connected to An Access Point configured in Bridge mode to which customers connect to. (Simple WISP)

I can’t seem to pin point where I am going wrong. I can Ping the T1 line, DNS, and all the Customer IP’s from the RB450. However, the clients cannot pull any Internet. I thought maybe it was DNS issues, but I entered the DNS and yet still no joy. I would appreciate any hints to get me in the right direction. TIA.

Ether1
Address 12.XX.XX.9/28
Netmask 12.XX.XX.0
Broadcast 12.XX.XX.10
Interface Bridge 1

Ether2
Address 192.168.2.1/24
Netmask 192.168.2.0
Broadcast 192.168.2.254
Interface Bridge 2

DNS configured via /ip dns settings

what’s with bridge1 and bridge2?? Names only I hope.

Personally I’d rename them Lan and Wan…whatever floats your boat.

Are your customers ip addresses static or dhcp?
Make sure the correct dns server is set on customer or dhcp server.

Are you using nat?
/ip firewall nat
add action=masquerade chain=srcnat comment=“” disabled=no out-interface=“Bridge 1”

Whenever trying to troubleshoot IP problems start by tossing DNS out the window. Disable any firewall rules. Use ping and see whats happening.

Make sure your router can ping upstream gateway. Then beyond the gateway. i.e. 4.2.2.1.


You can ping the clients. Great. From a client can you ping its gateway, then ping the public interface of the router. If so great, go to the gateway of the router, next the intertubes i.e. 4.2.2.1.


After you have determined this is all successful trying pinging by using DNS. If not, you have routing working properly and it is a DNS issue.


As Aug suggested check your NAT as well.

Edit. Also if you really have a /28 network your broadcast AND netmask addresses are wrong on Ether1. Just clear those out and enter the full CIDR address and let the router do that for you… 12.x.x.9/28 and then pick the interface and apply.

good eye knects

the broadcast and network are wrong in post.

Ah, yes indeed. Thank you all for catching what I’ve been missing.

I forgot to NAT the darn thing.

Thank you all for helping me solve my problems.

I’m sure I’ll be back soon.
Kind regards

Grandma