hAP ac bridge configuration with SFP as WAN

RouterOS Beginner Basics
1

I wanted to free up port for future use, so I’ve got RJ45 SFP module to use as WAN port. Supposedly it also should be a bit faster.
So what I want is to move from [eth1 - WAN][eth2-5 - LAN] to [SFP - WAN][eth1-5 - LAN]

I tried to replicate how other ports configuration looked like, and I’ve left ether1 unplugged for now, but I get these errors in firewall unless I remove it from bridge:

error - in/out-interface matcher not possible when interface (ether1) is slave - use master instead (bridge)

Apparently I do not grasp how bridge works. What should I do?

interface bridge port

looks like this

 #     INTERFACE                          BRIDGE                          HW  PVID PRIORITY  PATH-COST INTERNAL-PATH-COST    HORIZON
 0   H ;;; defconf
       ether2                             bridge                          yes    1     0x80         10                 10       none
 1   H ;;; defconf
       ether3                             bridge                          yes    1     0x80         10                 10       none
 2   H ;;; defconf
       ether4                             bridge                          yes    1     0x80         10                 10       none
 3   H ;;; defconf
       ether5                             bridge                          yes    1     0x80         10                 10       none
 4     ;;; defconf
       wlan1                              bridge                                 1     0x80         10                 10       none
 5     ;;; defconf
       wlan2                              bridge                                 1     0x80         10                 10       none
 6 XI   ;;; defconf
       ether1                             bridge                                 1     0x80         10                 10       none
2

Problem isn’t the bridge,
but the DHCP, Firewall, Mangel-Config referencing the “ether1” interface …

Check Everything and replace the “ether1” Reference to “sfp1”

3

Thanks, that was the case. Also UPnP, in particular.

4

Take a look at the /interface list feature in RouterOS.


I usually create a list called “WAN” and use it to create all my Firewall and Mangel rules.
I personally think it make it,

  • Easier to Export & Import Firewall and Mangel rules from 1 device to another
  • Easier to add, modify and Remove WAN interfaces on the Router
  • Easier / Clearer Firewall to manage and diagnose especially on Multi-Wan Routers