Hi MikroTik community, I am quite new with MikroTik world, and I have a question, I searched in the forum but the answers do not fit my problem.
I have two houses, I need to connect these two homes with a MikroTik wireless system for outdoor. However, only House A has an internet connection. I want to share my internet connection from house A to house B. Also, I want to secure the connection at the maximum possible to avoid problems with people entering my network.
I thought to place two “MikroTik LHG 5 ac” in each house at the roof near to tv antennas to avoid obstacles (and maybe I will have some houses in between the house A and B), the distance is near to 200m or even less with some obstacles. Also, the router in house A that has an internet connection is a MikroTik.
Now my problems are:
I do not know how to create a point to point connection between these two antennas.
I do not know how to configure these two antennas to avoid intruders.
I do not know how to secure all the connections.
I tough to put the “MikroTik LHG 5 ac” in the house A as a wireless access point with a DHCP server different to the DCHP range of the MikroTik in house A that provides the connection. And then, in house B use the second “MikroTik LHG 5 ac” to connect to the house and take an attach an ethernet wire to this second antenna and put another router to provide the internet to this house (B) to connect multiple devices. I do not know if this approach is the optimum one for my purpose, new ideas are welcome and advice too.
My first advice is to establish a connection! A conection is undefined.
My second advice is not to piss around with crappy solutions and go straight to the ideal solution that will blow your socks off.
Two tin cans with a string joining them (running from house to house). Works great and dont need electricity even.
Thanks for your suggestion @anav, but my question is enough serious to answer in the proper manner no with an answer joking. That is the first thing that I need to tell you. And the second thing is that the link of Mikrotik product that you provided is for working indoor and I wrote that I need outdoor hardware, if not why do I want to place the antennas in the roof of the houses?
I wrote in this forum to get help and learn about MikroTik devices, if you are more worried to try to be funny, then avoid to answer and do not lose your time.
Those devices (wAP) are outdoor devices, they are weatherproof.
The alternative indeed is to use directive devices like the LHG 5ac, which might be overkill for this distance. (There are other smaller ones, even the SXTsq 5 ac might already do)
Setting them up requires something more than Quickset, but is straightforward and simple.
Set one device as “bridge” (no need for AP bridge, as there is only one client), set bandwidth and channel, with SSID en WPA2-AES strong password. In that device connect both the WLAN interface and ethernet interface to one bridge. Give that bridge an IP address for management (that IP address will not be used for data transfer over that device). Put the bridge in the “LAN interface list” to bypass any firewall rules that may still be there.
The second device is setup as “station bridge”, “scan” and connect to that previous SSID with the same WPA2-AES password. Here also connect ethernet and WLAN to the bridge, give the bridge an IP address for management of the device, set the bridge in the “LAN interface list”.
Now your ethernet ports on both devices are transparently connected (as with the wireless wire).
Now you can hide the SSID for convenience and a little bit more security (by obscurity).
You are right and apologize for the misunderstanding with the devices @anav because I did not see that the specifications of the wAP were on another page (indeed in the individual device).
Now about your answer @bpwl, I would like to thank you for your detailed answer. I understand that the “bridge” mode is suitable when you want to connect another wireless device to him. So imagine that is the house A which has the router with internet and we connect to this router the first LHG 5ac (for example), I am going to name this LHG_A. Then LHG_A should be in “bridge” mode to allow one connection to him. On the other side, in house B we have the LHG_B in “station bridge”. LHG_B will connect as the client of LHG_A and will be in the same network.
Now, what happens if I want to securing this connection even more than only hiding the SSID or WPA2-AES password, mac-address filter is possible too, but there is another way to secure this even more?
Also, I know that 60GHz provides a layer of security because is not usually used by multiple devices like computers, so intruders are less frequent because it is more difficult if they do not know that we are using a 60GHz band. However, I know too that if we increase the GHz we have problems with walls because these elements occlude the signal even more than in lower frequencies Am i right?
To secure even more. After the connection is established, you copy the registration in LHG_B of the LHG_A into the “connect list”, and copy the registration in the LHG_A of the LHG_B into the “access list”. Then you remove the “default authentication” from the LHG_A WLAN interface wireless setting. (Now only LHG_B can ever authenticate, and LHG_B will only connect to LHG_A)
One extra step : switch to NV2 protocol. (prepare LHG_B first to allow for 802.11/nstreme/nv2 , then you can switch with the LHG_A setting. Nv2 needs a password on both sides. Only Mikrotik devices know about NV2. No other device will see or recognise the NV2 signal.
And there is an endless list of (encrypted) VPN tunnels that could be used over the WLAN link as well.
60GHz has a much smaller Fresnel zone (and Fresnel must be clear for 40%). No experience with 60GHz but it will not penetrate any obstruction. (Even rain could be some obstruction)
I’m not sure if it is allowed in my country. Distributors claim it is. But in the Quick Guide I read:
You need to get a life and a sense of humour, or just accept you are going to die young from unnecessary stress.
The main benefits of the wireless wire are:
a. 60Hz is free from all the interference of common home frequencies and consumer WIFI
b. Its a gigabit link whereas most wifi links are going to be piss poor in comparison
c. They state through glass may be possible, but clear LOS is best (tis why they have both outdoor wall and pole mount options)?
d. The fact that your are using a non-common frequency, in a pt to pt scenario, already provides a decent start in terms of security but as per the linked page, the wifi link is already AES256 encrypted
Note: Really admire bpwl for his amazing knowledge and ability to provide excellent advice!
