hAP ac as wifi repeater - Gateway / Router issue

Hey Guys,

I’m new to RouteOS and have a issue with my network configuration that I cannot solve.

Following setup:

RB3011UiAS-RM → as Main Router
EnGenius EWS350AP → wired to eth2 to create a WiFi AP
Raspberry Pi with OpenVPN → wired to eth3 (running some advanced VPN Configuration)
[*] Network 10.0.0.0/24

hAP AC → as a wifi repeater
[*] Network 10.1.0.0/24

If I setup the hAP AC as a wifi repeater, I’m creating a new DHCP server and gateway and so a “new network”.
In general not really a problem as I can access through the extended “new network” the all devices on my main router and everything seems to run smooth.

But If I’m accessing my network over the hAP AC extended/repeated wifi, I’m not able anymore to use the IP of my Raspberry Pi as the gateway/router on my mobile device.
If I’m connected to the wifi network created by the EnGenius box it’s working.

I guess it’s a kind of Firewall / Nat rule but I really don’t know how to start solving this issue.
Is the hAP AC or my Main Router blocking this?


I don’t know if this is the best way to repeat a wireless network, I tried all other methods I found in google and the wiki but nothing been working for me.
Here is a step by step how I setup my hAP AC as a wifi repeater:

### Setup

We are going to repeate a 5GHz Network with a hAP ac.

Wifi network name to repeate "aNET"
Interface: wlan2 

* Selcet wlan2 interface
* Click on "Scan..."
* Select Network you like to repeate

* back in wlan interface:
* rename "wlan2-5G"
* Set the mode to "ap bridge"
* Set SSID same as repeater network (aNET)
* apply
* Wireless -> Security Profiles
	* Add new security profile that matching settings to repeating wifi
* back in wlan2-5G interface:
	* Select your Security Profile and click "apply"
* Wait until "running ap"
	* If not something is worong with the Wifi settings

* Click on wireless, then on the interfaces tab again, and add a virtual interface.
* Name it "client-5G"
* Set the mode to "station"
* Set SSID same as repeater network (aNET)
* Master Interface: "wlan2-5G"
* Select your created Security Profile for aNET
* Click Apply and wait for "connected to ess" (Can take a while with 5GHz)
	* Try to connect to this wirless interface, it helps to connect faster.

* If its connected!
* IP -> DHCP_Client -> Add new
* Interface: client-5G
* Add Default Route: yes

Now the interface should get a IP address from your Router your are repeating.

* Go to: Bridge -> Add New
* Name: bridge-AP
* Apply

* Go to Bridge -> Ports -> Add New
* Interface: "wlan2-5G"
* Bridge: "bridge-AP"
* Apply

* Go to: IP -> Addresses -> Add New
* Address: 10.1.0.1/24
	* NOT THE SAME AS THE NETWORK YOUR REPEATING!
* Interface: "bridge-AP"
* Apply

* IP -> DHCP Server -> "DHCP Setup" (top navigation)
	* DHCP Server Interface: "bridge-AP" 
	* DHCP Address Space: 10.1.0.1/24

* Go to: IP -> Firewall -> NAT -> Add New
* Chain: srcnat
* Action: masquerade
* Apply

DONE!

### Add 2.4GHz Network

* Selcet wlan1 interface
* Click on "Scan..."
* Select Network you like to repeate

* back in wlan interface:
* rename "wlan1-2G"
* Select your Security Profile
* Mode: bridge
* Set SSID same as repeater network (aNET 2G)
* WDS Mode: dynamic
* WDS Default Bridge: "bridge-AP"

* apply

* Wait until "running ap"
	* If not something is worong with the Wifi settings

* Go to Bridge -> Ports -> Add New
* Interface: "wlan1-2G"
* Bridge: "bridge-AP"
* Apply

DONE!