Configuring two routerboard RB411AH as transparent bridge

salemansab · December 1, 2014, 6:46pm

Hello,
I have two RB411AH that was working as transparent bridges for 7 years, but one of them broke a capacitor and I had no access.
I replaced the capacitor and now both are accesible but I forgot password.
Both have routerOS version 3.3 and I can´t upgrade because of licence.
I reset both and tried to configure as transparent bridge from herehttp://wiki.mikrotik.com/wiki/Transparently_Bridge_two_Networks
But it does not work properly.
This is how are they connected:
PC1 (ip: 192.168.1.10) ------> wired ------> RB411 bridge mode( ip: 192.168.1.250)-----> wireless ----> RB411 station wds mode( ip: 192.168.1.251) -----> wired -----> PC2 (ip: 192.168.1.11)

I´m able to ping from PC2 to 192.168.1.251 , 192.168.1.250 and 192.168.1.10 and from PC1 to 192.168.1.250 and 192.168.1.251 but i´m NOT able to ping from PC1(ip: 192.168.1.10) to PC2(ip: 192.168.1.10).

Both have routerOS version 3.3 and I can´t upgrade because of licence.

Can somebody help me?

Thanks.

bleblas · December 3, 2014, 8:06am

Hello

give so more info about this configuration.

on both site’s
/interface wireless print
/interface bridge print
/interface bridge port print
/ip address print

salemansab · December 4, 2014, 5:36pm

I finally managed to upgrade routerOS version 6.23 and firmware 3.18 on both RB.

After reset-configuration, this is the content of file configuracion saved with >export file=name of bridge:

jan/02/1970 00:56:19 by RouterOS 6.23

software id = BWUT-JBLI

/interface bridge
add name=wds-bridge
/interface wireless
set [ find default-name=wlan1 ] disabled=no l2mtu=2290 mode=bridge ssid=
MikroTik wds-default-bridge=wds-bridge wds-mode=dynamic
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
/interface bridge port
add bridge=wds-bridge interface=ether1
/ip firewall connection tracking
set enabled=no
/ip address
add address=192.168.1.250/24 interface=ether1 network=192.168.1.0
/system identity
set name=bridge

And this is print information for bridge:
[admin@bridge] > interface wireless print
Flags: X - disabled, R - running
0 R name="wlan1" mtu=1500 mac-address=00:0C:42:26:A1:54 arp=enabled interface-type=Atheros AR5413 mode=bridge ssid="MikroTik" frequency=5180 band=5ghz-a
channel-width=20mhz scan-list=default wireless-protocol=any antenna-mode=ant-a wds-mode=dynamic wds-default-bridge=wds-bridge wds-ignore-ssid=no bridge-mode=enabled
default-authentication=yes default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no security-profile=default compression=no
[admin@bridge] > interface bridge print
Flags: X - disabled, R - running
0 R name="wds-bridge" mtu=auto actual-mtu=1500 l2mtu=1526 arp=enabled mac-address=00:0C:42:13:B5:11 protocol-mode=rstp priority=0x8000 auto-mac=yes
admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m
[admin@bridge] > interface bridge port print
Flags: X - disabled, I - inactive, D - dynamic

INTERFACE BRIDGE PRIORITY PATH-COST HORIZON

0 ether1 wds-bridge 0x80 10 none
1 D wds1 wds-bridge 0x80 74 none
[admin@bridge] > ip address print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK INTERFACE

0 192.168.1.250/24 192.168.1.0 ether1
[admin@bridge] > interface wireless wds print
Flags: X - disabled, R - running, D - dynamic
0 RD name="wds1" mtu=1500 l2mtu=2290 mac-address=00:0C:42:26:A1:54 arp=enabled master-interface=wlan1 wds-address=00:0C:42:26:A1:62

And after reset-configuration, this is the content of file configuracion saved with >export file=name of station-wds:

jan/02/1970 00:36:01 by RouterOS 6.23

software id = CVWN-K2AG

/interface bridge
add name=wds-bridge
/interface wireless
set [ find default-name=wlan1 ] disabled=no l2mtu=2290 mode=station-wds
wds-default-bridge=wds-bridge wds-mode=dynamic
/port
set 0 name=serial0
/interface bridge port
add bridge=wds-bridge interface=wlan1
add bridge=wds-bridge interface=ether1
/ip firewall connection tracking
set enabled=no
/ip address
add address=192.168.1.251/24 interface=ether1 network=192.168.1.0

And this is print information for station-wds:
[admin@station-wds] > interface wireless print
Flags: X - disabled, R - running
0 R name="wlan1" mtu=1500 mac-address=00:0C:42:26:A1:62 arp=enabled interface-type=Atheros AR5413 mode=station-wds ssid="MikroTik" frequency=5180 band=5ghz-a
channel-width=20mhz scan-list=default wireless-protocol=any antenna-mode=ant-a wds-mode=dynamic wds-default-bridge=wds-bridge wds-ignore-ssid=no
bridge-mode=enabled default-authentication=yes default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no
security-profile=default compression=no
[admin@station-wds] > interface bridge print
Flags: X - disabled, R - running
0 R name="wds-bridge" mtu=auto actual-mtu=1500 l2mtu=1526 arp=enabled mac-address=00:0C:42:26:A1:62 protocol-mode=rstp priority=0x8000 auto-mac=yes
admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m
[admin@station-wds] > interface bridge port print
Flags: X - disabled, I - inactive, D - dynamic

INTERFACE BRIDGE PRIORITY PATH-COST HORIZON

0 wlan1 wds-bridge 0x80 10 none
1 ether1 wds-bridge 0x80 10 none
[admin@station-wds] > ip address print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK INTERFACE

0 192.168.1.251/24 192.168.1.0 ether1

With connection I said in my first post, I´m not able to ping from PC1 (192.168.1.10) to PC2(192.68.1.11) nor from PC2 to PC1
I´m able to ping from PC2 to PC1 if I connect PC1 and bridge station to my adsl-router with IP:192.168.1.1 and set gateway to 192.168.1.1 to bridge and wds station.
For give you more information, from terminal inside bridge, it is not able to ping to 192.168.1.10 nor wds station to 192.168.1.11.

Thanks for your support.

bleblas · December 8, 2014, 8:56am

hi

1.on master AP (disable wds on wireless configuration)
wireless mode=bridge ds-default-bridge=none wds-mode=none
on bridge add wireless card
(on bridge port you need ether1 and wlan1)
add bridge=wds-bridge interface=wlan1
2.on slave AP (disable wds on wireless configuration)
wireless mode=station-bridge ds-default-bridge=none wds-mode=none
(on bridge port you need ether1 and wlan1)
try this
bleblas

salemansab · December 30, 2014, 11:32am

Finally I got it.

I did the steps from this: https://www.spiderwebsolutions.com.au/point-to-point-p2p-link-mikrotik-routeros/ but the router couldn´t see each other by ping but when I enabled WDS in both, all it worked.

I have to say that perhaps also works with this steps: http://wiki.mikrotik.com/wiki/Transparently_Bridge_two_Networks because finally I realized that pings to PC it didn´t works because Windows XP firewall was enabled in PCs.
I can´t confirm this because I already haven´t got the routers.

After reset-configuration, this is the content of file configuracion saved with >export file=name of bridge:

/interface bridge
add mtu=1500 name=bridge1
/interface wireless
set [ find default-name=wlan1 ] country=spain disabled=no l2mtu=2290 mode=\
    bridge nv2-preshared-key=juanvalero nv2-security=enabled \
    wds-default-bridge=bridge1 wds-mode=dynamic wireless-protocol=nv2
/interface eoip
add clamp-tcp-mss=no mac-address=02:C3:41:CD:85:85 mtu=1500 name=eoip-tunnel1 \
    remote-address=10.8.8.2 tunnel-id=0
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge1 interface=eoip-tunnel1
add bridge=bridge1 interface=ether1
/ip address
add address=192.168.88.1/24 comment="default configuration" interface=ether1 \
    network=192.168.88.0
add address=10.8.8.1/30 interface=wlan1 network=10.8.8.0
add address=192.168.1.250/24 interface=bridge1 network=192.168.1.0
/ip firewall mangle
add action=set-priority chain=input new-priority=from-dscp passthrough=no
/system routerboard settings
set boot-device=flash-boot

And this in station:

/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] country=spain disabled=no l2mtu=2290 \
    nv2-preshared-key=juanvalero nv2-security=enabled wds-default-bridge=\
    bridge1 wds-mode=dynamic wireless-protocol=nv2
/interface eoip
add clamp-tcp-mss=no mac-address=02:EC:EE:EF:45:78 mtu=1500 name=eoip-tunnel1 \
    remote-address=10.8.8.1 tunnel-id=0
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge1 interface=eoip-tunnel1
add bridge=bridge1 interface=ether1
/ip address
add address=192.168.88.1/24 comment="default configuration" interface=ether1 \
    network=192.168.88.0
add address=10.8.8.2/30 interface=wlan1 network=10.8.8.0
add address=192.168.1.251/24 interface=bridge1 network=192.168.1.0
/ip firewall mangle
add action=set-priority chain=input new-priority=from-dscp passthrough=no
/system routerboard settings
set boot-device=flash-boot

Excuse me for my poor English.

Thanks to bleblas although I think WDS is necessary.

Regards