CPE unit.

RouterOS Wireless Networking
1

Hi,

I have setup a CPE unit. The ethernet interface has a static address and the wlan has a dhcp client setup. The wlan has been allocated an ipaddress from the dhcp server. The problem I am having is that no traffic seems to be routing from the ethernet side. i.e I cannot browse the internet.

Please could someone tell me where I have gone wrong. should the ehternet be on dhcp and the wlan be on a static ?

client (dhcp) → ethernet (static) → wlan (dhcp)

Thanks Mark

2

Missing NAT?

3

I am just checking and NAT is not setup

Mark

4

Well, you need to NAT…

ip firewall nat add chain=src-nat out-interface=wlan1 action=masquerade
5

hi cibernet

OK …I can now ping the ethernet address through the wlan connection. So in theory the PC should now get an ipaddress from the DHCP server and they should be able to browse ..?

Wlan 192.168.2.26 → ether1 192.168.2.27 → Client PC dhcp

Mark

6

no! your client is masqueraded (hidden behind router). you need either to set up a DHCP server on your router, or give your client a static address. it should be on a different subnet by the way, your addresses are not correctly set up

7

Hi Normis

I am struggling with this client configuration. I have 3 other routers running fine. But I can’t seem to get this CPE unit to work correctly.

This is the current setup:

I have a dhcp server sitting on 192.168.2.7 which is a seperate server.

I want the Client PC that is using the CPE to be allocated an IP address from this server.

All the other routers have a Wlan ip address of 192.168.2.* and are bridged with a backhaule Wlan 10.0.0.* and this works fine. All the clients that connect to the AP’s get an ip address from the dhcp server on 192.168.2.7

Can you tell me what the config would look like.

I have it setup like this at the moment

client PC → eth1 (192.168.2.27) → bridge ← Wlan (10.0.0.4)

I cannot ping either address from outside the CPE unit even though it is connect to the wireless Lan

Thanks Mark

8

if you use masquerade, you will NOT be able to ping the client from outside. that is the whole point of this kind of setup. the client can get out, but nothing can get in. including your pings.

9

I can’t ping out from the unit either …I also cannot connect to the mac address either now :frowning:

Can you post a config please of how I should set it up …


Thanks Mark

10

this should be very simple. i think you are just complicating a simple setup.

public ip space ~~~~ public IP of router / local IP of router ~~~~ local IP of client

and on the router you have the masquerading rule. and in the client you specify the router as gateway.

simple!

11

Normis,

I agree it should be simple. I have now set it up as you suggested.

PC static address 10.2 → eth1-10.1-> wlan 192.168.2.26

My networks gateway is 192.168.2.7 DNS is 192.168.2.7 I can ping the gateway from the wlan interface but not from the client PC. The client PC’s gateway is 192.168.10.1.

Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf

DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE

0 ADC 192.168.2.0/24 192.168.2.26 wlan1
1 ADC 192.168.10.0/24 192.168.10.1 ether1
2 A S 0.0.0.0/0 r 192.168.2.7 wlan1

[admin@MikroTik] ip dhcp-server> lease print
Flags: X - disabled, R - radius, D - dynamic, B - blocked

ADDRESS MAC-ADDRESS HOST-NAME SERVER RATE-LIMIT STATUS

0 D 192.168.10.2 00:13:D3:BA:70:E3 vAsperen dhcp1 bound
[admin@MikroTik] ip dhcp-server> /ping 192.168.10.2
192.168.10.2 ping timeout
192.168.10.2 ping timeout
192.168.10.2 ping timeout
192.168.10.2 ping timeout
192.168.10.2 ping timeout


[admin@MikroTik] ip firewall> nat print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=src-nat out-interface=wlan1 action=masquerade




What am I missing here ? It’s as though it’s not forwarding

Thanks Mark

12

wait a second, on the client - the gateway should be the router eg. 10.1

13

Normis,

When you say client do you mean client PC if yes it’s is being allocated an ipaddress from the dhcp-server on ehter1.

Mark

14

No, I am saying that you should set the default gateway setting in his windows settings to the local address of the router.

15

Normis,

He has the default gateway of the router set in his PC …it is being allocated by the DHCP server on ether1

ipaddress 192.168.10.2
gateway 192.168.10.1

I ask him to do a tracert to 192.168.2.7 it gets as far as the 192.168.10.1 address and then times out. ??


Looks like the local network is not forwarding to the public network. How do I switch on debug logging for the interfaces ??


Thanks Mark

16

Question:

I the client PC to be allocted and ip address from the DHCP server on the network … Is this possible with the CPE unit. Maybe I shouldn’t us masquerade. Can you tell me how I would setup this up.

would this work … chain=srcnat src-address=192.168.2.26 src-address-list=“” action=accept


Thanks Mark

17

i suggest you to make a network drawing, with all the IP addresses and post configuration of IP addresses and routes

18

Hi Normis,

Please see diagram below. I need all traffic from the client to go through the proxy/dhcp server. I also require the Client PC to pick up an IP address from the dhcp server as well. All other clients on the network currently do this.

[/img]

Thanks Mark

19

client will never get that dhcp address from your dhcp server, because the server is behind that router. you should enable dhcp server on the CPE and let it give out it’s own address to the client. or just use other approach, not masquerading

20

OK,

The current setup does allocate an ipaddress from the CPE unit but I still cannot browse. What would be the alternative to masquerade. We are looking at buy 50 of these client units but we need to get the config right and I am struggling with this one ???

Mark