Hello,
I have one mikrotik as Internet router with DHCP/NAT/firewall/etc.
second mikrotik is working just only like AP.
i’m trying to reate virtual AP like:
/interface wireless add disabled=no mac-address=6E:3B:6B:13:01:31 master-interface=wlan1 mode=ap-bridge name=wlan3 ssid=MikroTik-G1 wds-default-bridge=bridge wps-mode=disabled
Full config looks like:
[apl@MikroTik-AP] > export compact
# nov/11/2016 13:21:25 by RouterOS 6.37.1
# software id = J6C8-IBFX
#
/interface bridge
add admin-mac=6C:3B:6B:13:01:2B auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether3 ] master-port=ether2-master
set [ find default-name=ether4 ] master-port=ether2-master
set [ find default-name=ether5 ] master-port=ether2-master
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=MikroTik-G wireless-protocol=802.11
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40mhz-Ce disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=MikroTik-5G wireless-protocol=802.11
add disabled=no mac-address=6E:3B:6B:13:01:31 master-interface=wlan1 mode=ap-bridge name=wlan3 ssid=MikroTik-G1 wds-default-bridge=bridge wps-mode=disabled
/ip neighbor discovery
set ether1 discover=no
set bridge comment=defconf
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk group-ciphers=tkip,aes-ccm mode=dynamic-keys supplicant-identity=MikroTik unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=SiskiYou2013 \
wpa2-pre-shared-key=WifiPWD2016
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
# DHCP server can not run on slave interface!
add address-pool=dhcp disabled=no interface=ether2-master name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf interface=wlan2
add bridge=bridge interface=ether1
/ip address
add address=192.168.1.251/24 comment=defconf interface=ether2-master network=192.168.1.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid interface=bridge
/ip dhcp-relay
add dhcp-server=192.168.1.1 disabled=no interface=wlan3 name=relay1
/ip dhcp-server network
add address=192.168.1.0/24 comment=defconf gateway=192.168.1.251 netmask=24
/ip dns
set allow-remote-requests=yes servers=192.168.1.1
/ip dns static
add address=192.168.1.251 name=router
/ip firewall filter
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept establieshed,related" connection-state=established,related
# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (bridge)
add action=drop chain=input comment="defconf: drop all from WAN" in-interface=ether1
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related" connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (bridge)
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface=ether1
/ip firewall nat
# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (bridge)
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=ether1
/ip route
add distance=1 gateway=192.168.1.1
/ip service
set telnet disabled=yes
set www-ssl disabled=no
/system clock
set time-zone-name=America/Los_Angeles
/system identity
set name=MikroTik-AP
/system leds
set 1 interface=wlan2
/system routerboard settings
# Firmware upgraded successfully, please reboot for changes to take effect!
set cpu-frequency=720MHz protected-routerboot=disabled
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=bridge
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=bridge
[apl@MikroTik-AP] >
notebook successfully auth in the network, but not able to get IP address. on the router i see reply with DHCP.
so how can I fix it?