Hi,
I am trying to configure a TPLink dsl modem router (9660) set up as VDSL with Vlan using PPPoE to act as a bridge so i can dial out using PPPoE from Mikrotik. Is there any particular setting I need to do on the Mikrotik that will let it dial out to connect to internet? At present putting the TPlink in bridge with or without VLAN ID does not enable internet connectivity or PPPoE dialout on Mikrotik.
Thank in advance and regards,
Other than configuring PPPoE client and enabling it? Not really.
Check that the TPlink has PPPoE passthrough enabled… Otherwise the PPPoE packets will never reach your Mikrotik…
You can ass well go to PPPoE scan, select the interface connected to your TPlink and check if any server is discovered…
As for the VLANs, first try the above without any VLAN settings on either on Mikrotik or the TPlink…
I probably did not clarify it properly in the post. This is the current setup. TPlink is setup as a VDSL with a PPPoE dialout with enabled VLAN with a VLAN Id. This connects automatically and there is no problem with internet connectivity. What I am trying to achieve is set it to bridge mode and use the Mikrotik to dialout using PPPoE. But when I set up the TPLink in bridge mode i am uanble to dialout using either dialup networking with the given pppoe id and password from windows or from mikrotik. So I was wondering if there is some setting that I am missing. Will check with the PPPoE scan when i get a chance. Thanks for the tip Zacharias.
Thanks and regards,
But when I set up the TPLink in bridge mode i am uanble to dialout using either dialup networking with the given pppoe id and password from windows or from mikrotik
Do the PPPoE scan… If nothing is discovered then your TP-Link does not allow PPPoE packets to pass through to Mikrotik, meaning PPPoE Passthrough is disabled on the TP-Link…
On the TPlink configured bridge mode with VLAN id, disabled Lan dhcp server and firewall. IP is set to 192.168.1.1
On Mikrotik set lan ip to 192.168.1.2, set dhcp server, nat and on PPPOE using quick set it is automatically coonecting without a user id and password with an IP address of 10.50.X.X and gw 10.50.x.x
Have dns servers to the ones give by isp. From MIktrotik am able to ping google, youtube, etc with replies, but on PC while it shows connected not browsing to any sites and from Mikrotik terminal unable to ping the modem. While on the PPPOE connection using TPLINK ip recieved was in the 172 range. I think i am missing some setting. Any suggestions.
I have also tried cloning the mac id of the tplink to mikrotik but not much change.
Also no internet activity light on modem, not sure if this is normal in bridge mode.
Thanks and regards
Cloning the TP-Link WAN ethernet address should only necessary if the PPPoE client fails to establish a connection, it sounds as though that is not the case here although it is odd that you are seeing a different IP address.
Post the output of /export hide-sensitive after obfuscating public IPs, etc. (if there are any)
PPPOE using quick set it is automatically coonecting without a user id and password
This does not seem normal to me in any way… thats why you do not get correct addresses…
It is obvious you have to provide a username and a password so that you get authenticated and assigned the correct profile by your ISP…
[admin@MikroTik] > /export hide-sensitive
/interface bridge
add admin-mac=74:4D:28:9E:92:02 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=MikroTik-9E9206
wireless-protocol=802.11
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether1 name=pppoe-out1 use-peer-dns=yes user=1725005306tho
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.1.10-192.168.1.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface bridge vlan
add bridge=bridge disabled=yes tagged=ether1 vlan-ids=1885
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=pppoe-out1 list=WAN
/ip address
add address=192.168.1.2/24 comment=defconf interface=ether2 network=192.168.1.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid interface=ether1
/ip dhcp-server network
add address=192.168.1.0/24 comment=defconf gateway=192.168.1.2 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.1.2 name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/system clock
set time-zone-name=Asia/Kolkata
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
[admin@MikroTik] >
What is the question ?
The LAN IP address should be set on the bridge, not one of the member interfaces (if you have not changed this it may be a bug in Quickset)
/ip address
add address=192.168.1.2/24 comment=defconf interface=bridge network=192.168.1.0
The DHCP client on ether1 appears to be disabled, if you wish to access the TP-Link web interface and have a PPPoE connection at the same time you can disable the default route option, however note that having the same subnet for LAN and WAN will break things in strange ways so you would have to change one of them. If changing the Mikrotik LAN update the DHCP server network, IP pool and static DNS entries to match.
/ip dhcp-client
add add-default-route=no comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
There is a disabled VLAN in the configuration, so the PPPoE client is not using a VLAN ID. What settings does the TP-Link use for its WAN connection?
Yes I disabled this VLAN. I had added to see if it would connect by setting the vlan id in bridge option.
The TPlink when using PPPoE option you select PPPOE → VLAN - Enable (tick) → VLAN ID - 1885 - enter user id and password. This connects.
When setting in bridge mode the same options VLAN - Enable (tick) → Vlan ID - 1885 - Bridge
On the tplink when enable brigde mode i am disabling the dhcp server and firewall on the tplink.
Please inform if you need anymore information.
So the TP-Link should be handling the VLAN encapsulation:
[ DSL WAN – VLAN1885 – TP-Link bridge ] ==== [ Mikrotik ether1 – PPPoE client ]
To implement the VLAN on the Mikrotik:
[ DSL WAN – TP-Link bridge ] ==== [ Mikrotik ether1 – VLAN1885 – PPPoE client ]
/interface vlan
add interface=ether1 name=vlan-ether1-1885 vlan-id=1885
/interface pppoe-client
add add-default-route=yes disabled=no interface=vlan-ether1-1885 name=pppoe-out1 use-peer-dns=yes user=XXXX password=XXXX
/interface bridge vlan
add bridge=bridge disabled=yes tagged=ether1 vlan-ids=1885
This doesn’t explain why you can ping external hosts from the Mikrotik but not a local computer. What are the outputs of the following commands:
/ip address print
/ip route print
/ip dhcp lease print
Hi tdw,
I have followed your instructions and done the following.
TPLINK - Setup dsl without vlan
I reset the Mikrotik to default configuration. Then using the commands you gave add the vlan interface and the pppoe client. I had to clone the tplink mac id on the mikrotik as I was getting pppoe,ppp,info pppoe-outl: terminating... - failed to authenticate ourselves to peer in teh logs. Upon cloning the mac was able to connect and it got auto assigned a 172 ip and dns was automatically populated. But no internet connectivtiy from PC.
Upon pinging from terminal to google.co.in resolves to a 172.X.X.X ip instead of 216.58.196.67,
Here are the output of the commands that you wanted me to execute on the terminal
[admin@MikroTik] > /ip address print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; defconf
192.168.1.2/24 192.168.1.0 ether2
1 D 172.24.110.176/32 172.24.108.1 pppoe-outl
[admin@MikroTik] > /ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
0 ADS 0.0.0.0/0 pppoe-outl 1
1 ADC 172.24.108.1/32 172.24.110.176 pppoe-outl 0
2 ADC 192.168.1.0/24 192.168.1.2 bridge 0
[admin@MikroTik] > /ip dhcp lease print
Flags: X - disabled, R - radius, D - dynamic, B - blocked
0 D 192.168.1.254 AC:16:2D:09:A3:3A USV120046 defconf bound
[admin@MikroTik] > /export hide-sensitive
/interface bridge
add admin-mac=74:4D:28:9E:92:02 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=MikroTik-9E9206
wireless-protocol=802.11
/interface ethernet
set [ find default-name=ether1 ] mac-address=C0:25:E9:9E:DB:AF
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether1 name=pppoe-out1 use-peer-dns=yes
/interface vlan
add interface=ether1 name=vlan-ether1-1885 vlan-id=1885
/interface pppoe-client
add add-default-route=yes disabled=no interface=vlan-ether1-1885 name=pppoe-outl use-peer-dns=yes user=1725005306tho
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.1.10-192.168.1.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=pppoe-out1 list=WAN
/ip address
add address=192.168.1.2/24 comment=defconf interface=ether2 network=192.168.1.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid interface=ether1
/ip dhcp-server network
add address=192.168.1.0/24 comment=defconf gateway=192.168.1.2 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.1.2 name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
Any help is apprecitated.
Thanks and regards,
You appear to have two PPPoE client interfaces name=pppoe-out1 and name=pppoe-outl, remove the unused one and correct the /interface list membership entry - it appears to be the wrong PPPoE client, so NAT will not work
As mentioned before the /ip address is incorrectly specified on interface=ether2, it should be interface=bridge
Okay. Will try this and get back shortly.
Thanks and regards,
Have made the appropriate changes but still no internet. Ping is also not resolving domain to correct ip.
[admin@MikroTik] > export hide-sensitive
/interface bridge
add admin-mac=74:4D:28:9E:92:02 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=MikroTik-9E9206
wireless-protocol=802.11
/interface ethernet
set [ find default-name=ether1 ] mac-address=C0:25:E9:9E:DB:AF
/interface vlan
add interface=ether1 name=vlan-ether1-1885 vlan-id=1885
/interface pppoe-client
add add-default-route=yes disabled=no interface=vlan-ether1-1885 name=pppoe-outl use-peer-dns=yes user=1725005306tho
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.1.10-192.168.1.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add list=WAN
/ip address
add address=192.168.1.2/24 comment=defconf interface=bridge network=192.168.1.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid interface=ether1
/ip dhcp-server network
add address=192.168.1.0/24 comment=defconf gateway=192.168.1.2 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.1.2 name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/system clock
set time-zone-name=Asia/Kolkata
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
[admin@MikroTik] >
Any suggestions.
Thanks and regards,
You have removed the /interface list member entry for the PPPoE client completely, not changed it as suggested.
No idea why the DNS resolves as you describe, it could be your ISP blocking access to that site. Do other sites resolve correctly?
Hi tdw,
No the dns does not resolve to any valid ip for a given domain.
Also i reset the Mikrotik and tried using its default configuration and tried configuring as per your instruction.
Here are some of the outputs
Export before configuring
[admin@MikroTik] > export hide-sensitive
# jan/02/1970 00:03:27 by RouterOS 6.42.12
# software id = FNY8-7T22
#
# model = RB941-2nD
# serial number = A1C30AA95180
/interface bridge
add admin-mac=74:4D:28:9E:92:02 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=MikroTik-9E9206 \
wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
[admin@MikroTik] >
export after configuring
[admin@MikroTik] > export hide-sensitive
# apr/14/2020 13:24:26 by RouterOS 6.42.12
# software id = FNY8-7T22
#
# model = RB941-2nD
# serial number = A1C30AA95180
/interface bridge
add admin-mac=74:4D:28:9E:92:02 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=MikroTik-9E9206 \
wireless-protocol=802.11
/interface ethernet
set [ find default-name=ether1 ] mac-address=C0:25:E9:9E:DB:AF
/interface vlan
add interface=ether1 name=vlan-ether1-1885 vlan-id=1885
/interface pppoe-client
add add-default-route=yes disabled=no interface=vlan-ether1-1885 name=pppoe-out1 use-peer-dns=yes user=1725005306tho
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether2 network=192.168.88.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
[admin@MikroTik] >
The moment i configure it and clone the MAC there is this change
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether2 network=192.168.88.0
while before configuring it was
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
So after adding the bridge interface using
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
i get two items in the /ip address option
add address=192.168.88.1/24 comment=defconf interface=ether2 network=192.168.88.0
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
I then remove the first using
/ip address remove number=0
The system then loses it ip address becomes 0.0.0.0 but upon restart the mikrotik router again hands out dhcp leases
Here is the output after address change
[admin@MikroTik] > export hide-sensitive
# apr/14/2020 19:34:38 by RouterOS 6.46.5
# software id = FNY8-7T22
#
# model = RB941-2nD
# serial number = A1C30AA95180
/interface bridge
add admin-mac=74:4D:28:9E:92:02 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=0 band=2ghz-b/g/n channel-width=20/40mhz-Ce country=no_country_set disabled=no distance=indoors frequency=auto \
frequency-mode=manual-txpower mode=ap-bridge ssid=MikroTik-9E9206 wireless-protocol=802.11
/interface ethernet
set [ find default-name=ether1 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full mac-address=C0:25:E9:9E:DB:AF
set [ find default-name=ether2 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether3 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether4 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface vlan
add interface=ether1 name=vlan-ether1-1885 vlan-id=1885
/interface pppoe-client
add add-default-route=yes disabled=no interface=vlan-ether1-1885 name=pppoe-out1 use-peer-dns=yes user=1725005306tho
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/user group
set full policy=local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api,romon,dude,tikapp
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
/ip dhcp-client
add comment=defconf disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/system clock
set time-zone-name=Asia/Kolkata
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
[admin@MikroTik] >
So now at a loss as to what could be the issue. Is there and configuration issues at ISP end or am I missing some particular setting?
Is it possible for the PPPoE connection to be on the TPLink but configure a VPN client on the mikrotik so that the PC can connect via the VPN?
Thanks and regards
Please put your config inside code tags → [ code ] [ /code ]
It is so difficult to read…