DHCP Server Issues

I have two desktop computers, both running Win 10 that have problems getting an IP from my RB3011 (v6.44).
Currently I can see 8 leases on the router to the various devices around the house. Those systems have internet access, so server is running. (IP pool is /24 so I’m not out of addresses)
On the affected machine(s) the ethernet reports no default gateway and the subnet mask of 255.0.0.0. They are setup for DHCP, not with fixed addresses.
I can ping the gateway from the machine so I now the wires are working.
If I run ipconfig /release and then ipconfig /rewnew most of the the time it does not receive an address.
Sometimes if I turn the Wi-Fi on, I can log into the wireless router in the house. But the connection is too weak to do anything useful. But when I turn the Wi-Fi off and run /release and /renew most of the time the ethernet gets an IP address.

What is stopping these machines from consistently getting an IP?

Cable problems?

Hmmm did you try rebooting the PCs and the router?

The computer pings the gateway without any issues. I also have gotten the RB3011 to give it an address and when that happens everything is fine.

I have rebooted the PC twice this morning and didn’t get an IP. I read your reply and decided to do it a 3rd time, and this time I got an IP.

Since I have at two computers having these random issues I’m skeptical that it the problem lies in the PC.

I dont blame you.
Can you post your config.
/export hide-sensitive file=yourconfigmar01

/interface detect-internet snoops and sets up dynamic dhcp-server in interfaces. This might be confusing some computers.

If you have it configured and you are not using it, which usually only is worth in very dynamic situations, you might disable it to see if it helps.

Thats not a default setting is it…

feb/11/2019 14:35:44 by RouterOS 6.43.11

software id = QSEQ-N8CZ

model = RouterBOARD 3011UiAS

serial number = 71A0065DE59E

/interface bridge
add admin-mac=6C:3B:6B:1C:E9:DC auto-mac=no comment=defconf name=bridge
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=ether9
add bridge=bridge comment=defconf interface=ether10
add bridge=bridge comment=defconf interface=sfp1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether2 network=
192.168.88.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=
ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment=
“defconf: accept established,related,untracked” connection-state=
established,related,untracked
add action=drop chain=input comment=“defconf: drop invalid” connection-state=
invalid
add action=accept chain=input comment=“defconf: accept ICMP” protocol=icmp
add action=drop chain=input comment=“defconf: drop all not coming from LAN”
in-interface-list=!LAN
add action=accept chain=forward comment=“defconf: accept in ipsec policy”
ipsec-policy=in,ipsec
add action=accept chain=forward comment=“defconf: accept out ipsec policy”
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment=“defconf: fasttrack”
connection-state=established,related
add action=accept chain=forward comment=
“defconf: accept established,related, untracked” connection-state=
established,related,untracked
add action=drop chain=forward comment=“defconf: drop invalid”
connection-state=invalid
add action=drop chain=forward comment=
“defconf: drop all from WAN not DSTNATed” connection-nat-state=!dstnat
connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment=“defconf: masquerade”
ipsec-policy=out,none out-interface-list=WAN
/system clock
set time-zone-name=America/Los_Angeles
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN

/ip address
add address=192.168.88.1/24 comment=defconf interface=ether2 network=\

should be
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\

You didn’t noob this enough. I tried to enter what you said to change it to. But got into an edit (?) mode where it wanted more information I think, I got a line with “...” (without the quotes)
I then entered the command without the network=\

However when I looked at the /ip address I get:

ADDRESS NETWORK INTERFACE

0 ;;; defconf
192.168.88.1/24 192.168.88.0 ether2
1 D 73.118.217.10/23 73.118.216.0 ether1
2 ;;; defconf
192.168.88.1/24 192.168.88.0 bridge

I suspect that having the ether2 interface still there won’t fix the problem. How do I get rid of it?

I was in WinBox and saw in Address List that I could delete ether2. I did that and thought I’d really screwed up everything. All of the computers lost internet connection but after a reboot of the computers and router, things seem to work and I have:
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK INTERFACE

0 ;;; defconf
192.168.88.1/24 192.168.88.0 bridge
1 D 73.118.217.10/23 73.118.216.0 ether1

Too funny.
I was merely pointing out that ether2 needed to be replaced by bridge in your rule.
Yes I didn’t include the last line of the rule but it should be
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=
192.168.88.0

It should work.
(I normally use winbox to enter rules but using cli is good practice as well).

Things have not gotten any better, in fact worse when i tried to add a hAP ac^2. I think the problems I’m seeing are in the RB3011. I have the RB set up as a router. But I think something is wrong with the DHCP server. I have two desktop computers that shut off at night and they almost always need 1 or 2 ipconfig /release & /renew commands before they get an IP assigned to them. Now I look at the DHCP server panel and there are 8 devices who’s status is waiting. Waiting for what? Is it really likely that all of them have failed to accept an offered IP address? I really need some help here. I tend to use Winbox but I think I can handle the terminal as well. Here is my current configuration:

mar/30/2019 19:12:14 by RouterOS 6.44.1

software id = QSEQ-N8CZ

model = RouterBOARD 3011UiAS

serial number = 71A0065DE59E

/interface bridge
add admin-mac=6C:3B:6B:1C:E9:DC auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether1 ] comment=“To Internet”
set [ find default-name=ether2 ] comment=“To Switch”
set [ find default-name=ether3 ] disabled=yes
set [ find default-name=ether4 ] disabled=yes
set [ find default-name=ether7 ] disabled=yes
set [ find default-name=ether8 ] disabled=yes
set [ find default-name=ether9 ] disabled=yes
set [ find default-name=ether10 ] comment=“To wAP”
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge lease-time=1h name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=ether9
add bridge=bridge comment=defconf interface=ether10
add bridge=bridge comment=defconf interface=sfp1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=
192.168.88.0
/ip cloud
set update-time=no
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=
ether1
/ip dhcp-server lease
add address=192.168.88.11 client-id=1:3c:28:6d:d1:27:21 comment=“Pixel 3 XL”
mac-address=3C:28:6D:D1:27:21 server=defconf
add address=192.168.88.100 client-id=1:84:d6:d0:c:f:64 comment=
“Echo (1st Gen)” mac-address=84:D6:D0:0C:0F:64 server=defconf
add address=192.168.88.2 client-id=1:e4:8d:8c:be:14:e3 comment=wAP
mac-address=E4:8D:8C:BE:14:E3 server=defconf
add address=192.168.88.101 comment=“Echo Spot” mac-address=24:4C:E3:F9:36:75
server=defconf
add address=192.168.88.102 client-id=1:cc:f7:35:da:93:93 comment=“Echo Show”
mac-address=CC:F7:35:DA:93:93 server=defconf
add address=192.168.88.18 comment=“Fire TV” mac-address=B0:FC:0D:F6:AD:34
server=defconf
add address=192.168.88.5 client-id=1:3c:2a:f4:27:87:88 comment=
“Brother Printer” mac-address=3C:2A:F4:27:87:88 server=defconf
add address=192.168.88.30 client-id=1:2c:e:3d:3:e8:42 comment=“Lisa’s S7”
mac-address=2C:0E:3D:03:E8:42 server=defconf
add address=192.168.88.3 client-id=1:b8:69:f4:f0:52:e6 comment=“hAP ac2”
mac-address=B8:69:F4:F0:52:E6 server=defconf
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall address-list
add address=192.168.88.2-192.168.88.254 list=allowed_to_router
/ip firewall filter
add action=accept chain=input comment=
“defconf: accept established,related,untracked” connection-state=
established,related,untracked
add action=drop chain=input comment=“defconf: drop invalid” connection-state=
invalid
add action=accept chain=input comment=“defconf: accept ICMP” protocol=icmp
add action=drop chain=input comment=“defconf: drop all not coming from LAN”
in-interface-list=!LAN
add action=accept chain=forward comment=“defconf: accept out ipsec policy”
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment=“defconf: fasttrack”
connection-state=established,related
add action=accept chain=forward comment=
“defconf: accept established,related, untracked” connection-state=
established,related,untracked
add action=drop chain=forward comment=“defconf: drop invalid”
connection-state=invalid
add action=drop chain=forward comment=
“defconf: drop all from WAN not DSTNATed” connection-nat-state=!dstnat
connection-state=new in-interface-list=WAN
add action=accept chain=input comment=“default configuration”
connection-state=established,related
add action=accept chain=input src-address-list=allowed_to_router
add action=accept chain=input protocol=icmp
add action=drop chain=input
add action=accept chain=forward comment=“defconf: accept in ipsec policy”
ipsec-policy=in,ipsec
/ip firewall nat
add action=masquerade chain=srcnat comment=“defconf: masquerade”
ipsec-policy=out,none out-interface-list=WAN
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh port=2200
set api disabled=yes
set winbox address=192.168.88.0/24
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes
/system clock
set time-zone-name=America/Los_Angeles
/system ntp client
set enabled=yes server-dns-names=time.google.com
/tool bandwidth-server
set enabled=no
/tool mac-server
set allowed-interface-list=none
/tool mac-server mac-winbox
set allowed-interface-list=LAN
/tool mac-server ping
set enabled=no

A quick perusal doesnt seem to have any show stoppers.
I would look at DNS
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.88.1 name=router.lan

Go to the IP DNS static setting right hand menu click on STATIC button and then delete the above static entry from the quickset config.
I would then add the DNS server on your dhcp network if you want to use the router to cache DNS put in the IP of the gateway as your DNS server, or put in DNS servers direct.
Can you poste your hapac config as well.

I’ve rebooted the RB and suddenly it is providing IPs to the devices directly attached to it. Now my problem is in the next item in the chain the wAP. It seems that with the latest ROS (6.44.1) I am forced to use CAPsMAN. I’ve never used it before, just the Quick Set for Home AP Dual. But now any change I make to the Wireless in Quick Set just returns to the defaults when I hit Apply. Is that because in Wireless Tables > WiFi Interfaces it says “managed by CAPsMAN”? I think I now I just need to understand how to configure things with CAPsMAN.

Here is the configuration of the wAP:

mar/31/2019 20:04:34 by RouterOS 6.44.1

software id = 6KYP-463Y

model = RouterBOARD wAP G-5HacT2HnD

serial number = 774A0585CA7B

/interface bridge
add name=bridge1
add admin-mac=E4:8D:8C:BE:14:E1 auto-mac=no comment=defconf name=bridgeLocal
/interface wireless

managed by CAPsMAN

set [ find default-name=wlan1 ] ssid=MikroTik

managed by CAPsMAN

set [ find default-name=wlan2 ] ssid=MikroTik
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge=bridge1 comment=defconf interface=ether1
add bridge=bridge1 interface=wlan2
add bridge=bridge1 interface=wlan1
/interface list member
add interface=bridgeLocal list=LAN
add interface=wlan2 list=WAN
add interface=ether1 list=LAN
add interface=wlan1 list=LAN
/interface wireless cap

set bridge=bridgeLocal discovery-interfaces=bridgeLocal enabled=yes
interfaces=wlan1,wlan2
/ip address
add address=192.168.88.1/24 disabled=yes interface=wlan2 network=192.168.88.0
/ip dhcp-client

DHCP client can not run on slave interface!

add comment=defconf dhcp-options=hostname,clientid disabled=no interface=
ether1
add dhcp-options=hostname,clientid disabled=no interface=bridge1
/system clock
set time-zone-name=America/Los_Angeles
/system identity
set name=“MikroTik wAP”

After you configure something outside quickset, don’t ever use quickset again. Quickset is actually not intelligent at all, it blindly sets things according to basic rules, overwriting whatever advanced setup is done outside quickset possibilities.

There is no need for capsman If you don’t want to use it. In other words, nothing forces one to use it. I have two capACs and you would have to beat me with a spoon for a long long time for me to add complexity to my life unnecessarily.

Thing is, I didn’t setup CAPsMAN. I’d played with the config and screwed things up so bad I ended up resetting things. On the first boot it ran this script, which I snagged and don’t see it in files (see below), and I never saw it run on subsequent resets.I’d rather not use CAPsMAN but the current version of the RouterOS (6.44.1) seems to want you to do things its way.

By now, I’m a little fuzzy on exactly which router this scrip ran on either the RB3011 which I want to be the main router or the wAP which I want to be a wireless bridge back to the RB. Never having used CAPsMAN before I just don’t understand it. Nor do I know how to kill it. [edit; /interface wireless cap set enabled=no seems to have done that. But now the wAP isn’t getting an IP] My most important need ATM is to be able to change the SSID on the wAP so the existing devices can find it again. During the resets the SSIDs got changed to “MikroTik” and my normal way of changing the SSID is disabled because the interfaces are managed by CAPsMAN ]

#-------------------------------------------------------------------------------

Note: script will not execute at all (will throw a syntax error) if

dhcp or wireless-fp packages are not installed

#-------------------------------------------------------------------------------

#| CAP configuration
#|
#| Wireless interfaces are set to be managed by CAPsMAN.
#| All ethernet interfaces and CAPsMAN managed interfaces are bridged.
#| DHCP client is set on bridge interface.

bridge port name

:global brName “bridgeLocal”;
:global logPref “defconf:”;


:global action;

:log info $action

:if ($action = “apply”) do={

wait for ethernet interfaces

:local count 0;
:while ([/interface ethernet find] = “”) do={
:if ($count = 30) do={
:log warning “DefConf: Unable to find ethernet interfaces”;
/quit;
}
:delay 1s; :set count ($count + 1);
}

:local macSet 0;
:local tmpMac “”;

:foreach k in=[/interface ethernet find] do={

first ethernet is found; add bridge and set mac address of the ethernet port

:if ($macSet = 0) do={
:set tmpMac [/interface ethernet get $k mac-address];
/interface bridge add name=$brName auto-mac=no admin-mac=$tmpMac comment=“defconf”;
:set macSet 1;
}

add bridge ports

/interface bridge port add bridge=$brName interface=$k comment=“defconf”
}

try to add dhcp client on bridge interface (may fail if already exist)

:do {
/ip dhcp-client add interface=$brName disabled=no comment=“defconf”
} on-error={ :log warning “$logPref unable to add dhcp client”;}

\

try to configure caps (may fail if for example specified interfaces are missing)

:local interfacesList “”;
:local bFirst 1;

wait for wireless interfaces

:while ([/interface wireless find] = “”) do={
:if ($count = 30) do={
:log warning “DefConf: Unable to find wireless interfaces”;
/quit;
}
:delay 1s; :set count ($count + 1);
}

delay just to make sure that all wireless interfaces are loaded

:delay 5s;
:foreach i in=[/interface wireless find] do={
if ($bFirst = 1) do={
:set interfacesList [/interface wireless get $i name];
:set bFirst 0;
} else={
:set interfacesList “$interfacesList,$[/interface wireless get $i name]”;
}
}
:do {
/interface wireless cap
set enabled=yes interfaces=$interfacesList discovery-interfaces=$brName bridge=$brName
} on-error={ :log warning “$logPref unable to configure caps”;}

}

:if ($action = “revert”) do={
:do {
/interface wireless cap
set enabled=no interfaces=“” discovery-interfaces=“” bridge=none
} on-error={ :log warning “$logPref unable to unset caps”;}

:local o [/ip dhcp-client find comment=“defconf”]
:if ([:len $o] != 0) do={ /ip dhcp-client remove $o }

/interface bridge port remove [find comment=“defconf”]
/interface bridge remove [find comment=“defconf”]

}

Are you saying scripts are on your devices and you don’t know how they got there??