I’m setting up a network under the 10.1.1.0/24 subnet behind a 192.168.0.1/24 network. The clients connecting to my network are offered ip’s from the parent network instead of my configured dhcp server. This seems to work, but I’d rather get it right and have the local network operate independently from the connection.
I’ve got four sxt’s configured as 10.1.1.21-24, with the 21 box connected to the parent network. Please see my setup below:
My dhcp server is configured on 10.1.1.22/msf-ap2, but clients are offered leases from msf-uplink.. Should I block broadcast packets in msf-ap1 firewall?
the current configuration:
caching dns server on msf-ap1 and nat masquerading from 10.1.1.0/24 to 192.168.0.1. dhcp server on msf-ap2. all ap’s have ethernet and wlan ports bridged.
[admin@msf-ap1] > export
# jun/16/2016 22:56:57 by RouterOS 6.35.4
# software id = 0FDY-HZPM
#
/interface bridge
add name=msf-ap1-br1
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-onlyac channel-width=20/40/80mhz-Ceee country=norway disabled=no frequency=auto mode=bridge name=msf-lnk1 nv2-preshared-key=password nv2-security=enabled ssid=msf-lnk1 wds-default-bridge=msf-ap1-br1 wds-mode=dynamic-mesh wireless-protocol=nv2
/interface wireless nstreme
set msf-lnk1 enable-nstreme=yes
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/queue interface
set msf-lnk1 queue=only-hardware-queue
/interface bridge port
add bridge=msf-ap1-br1 interface=ether1
add bridge=msf-ap1-br1 interface=msf-lnk1
/ip address
add address=10.1.1.21/24 interface=msf-lnk1 network=10.1.1.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip firewall nat
add action=masquerade chain=srcnat out-interface=msf-ap1-br1
/system identity
set name=msf-ap1
/system leds
set 0 interface=msf-lnk1
[admin@msf-ap2] > export
# jun/16/2016 22:59:26 by RouterOS 6.35.2
# software id = MTQ1-0LQF
#
/interface bridge
add name=msf-ap2-br1
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-onlyac channel-width=20/40/80mhz-Ceee country=norway disabled=no frequency=auto mode=station-wds nv2-preshared-key=password nv2-security=enabled ssid=msf-lnk1 wds-default-bridge=msf-ap2-br1 wds-mode=dynamic-mesh wireless-protocol=nv2
/interface wireless nstreme
set wlan1 enable-nstreme=yes
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=msf-client-pool ranges=10.1.1.100-10.1.1.250
/ip dhcp-server
add add-arp=yes address-pool=msf-client-pool always-broadcast=yes disabled=no interface=msf-ap2-br1 name=msf-ap2-dhcp-srv
/queue interface
set wlan1 queue=only-hardware-queue
/interface bridge port
add bridge=msf-ap2-br1 interface=ether1
add bridge=msf-ap2-br1 interface=wlan1
/ip address
add address=10.1.1.22/24 interface=ether1 network=10.1.1.0
/ip dhcp-server network
add address=10.1.1.0/24 dns-server=10.1.1.21,8.8.8.8 gateway=10.1.1.22 netmask=24 ntp-server=80.89.32.121
/ip dns
set servers=8.8.8.8
/ip route
add distance=1 gateway=10.1.1.21
/system identity
set name=msf-ap2
/system leds
set 0 interface=wlan1
[admin@msf-ap3] > export
# jun/16/2016 23:01:10 by RouterOS 6.35.2
# software id = 9JXK-VTPL
#
/interface bridge
add name=msf-ap3-br1
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-onlyac channel-width=20/40/80mhz-Ceee country=norway disabled=no frequency=auto mode=bridge name=msf-lnk2 nv2-preshared-key=password nv2-security=enabled ssid=msf-lnk2 wds-default-bridge=msf-ap3-br1 wds-mode=dynamic-mesh wireless-protocol=nv2
/interface wireless wds
add disabled=no master-interface=msf-lnk2 name=wds1
/interface wireless nstreme
set msf-lnk2 enable-nstreme=yes
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=msf-ap3-br1 interface=ether1
add bridge=msf-ap3-br1 interface=msf-lnk2
/ip address
add address=10.1.1.23/24 interface=ether1 network=10.1.1.0
/ip dns
set servers=10.1.1.21
/ip route
add distance=1 gateway=10.1.1.22
/system identity
set name=msf-ap3
/system leds
set 0 interface=msf-lnk2
[admin@msf-ap4] >> export
# jun/16/2016 23:06:39 by RouterOS 6.35.2
# software id = 0IP9-RZSY
#
/interface bridge
add name=msf-ap4-br1
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-Ceee disabled=no frequency=5260 name=msf-lnk2-rcv nv2-preshared-key=password nv2-security=enabled ssid=msf-lnk2
/interface wireless nstreme
set msf-lnk2-rcv enable-nstreme=yes
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=msf-ap4-br1 interface=msf-lnk2-rcv
add bridge=msf-ap4-br1 interface=ether1
/ip address
add address=10.1.1.24/24 interface=ether1 network=10.1.1.0
/ip dns
set servers=10.1.1.21
/ip route
add distance=1 gateway=10.1.1.23
/system identity
set name=msf-ap4
/system leds
set 0 interface=msf-lnk2-rcv