I bought hAP ax Lite 6 for mobile router. I configure it but there is very strange problem with internet. I can ping google from router terminal but there is no internet on connected clients. I’ve checked firewall rules but I can’t find solution. Anyone can help me??
Couple of quick comments
Disable detect internet. Really.
Adjust lease time of dhcp server. 10 minutes is really too short. 30m is default, I use 1hr or even 4hr.
Set in APN use default route.
Although it look like APN is wrong. Wth LTE, you should make sure the /system/routerboard firmware is updated too. In winbox, you can check this in System > RouterBoard and hit “Update”. Also, that the LTE modem firmware is updated, which can be check on the LTE interface in winbox.
You need EITHER to set an APN, or check the “Use Network APN” button. If you google your carrier and country, you should be able to find the APN settings - e.g. Tmobile in US be fast.tmobile.com but not sure in Germany, etc. If you check the “Use network APN” box that essentially mean “read APN from SIM card” - some SIM/carrier support this, other do not (or APN on SIM is wrong for plan, etc., etc.). In general, it’s better to leave network APN uncheck and use the carrier-provided APN information.
You have an authentication method set (“chap”) but no user or password. So you should likely set this to “none” unless you’re sure of carrier’s APN information suggest you need it - in which case there are typically also a user/password too.
APN settings are correct - I checked it with T-Mobile website.
I can upgrade ROS, ping to google webiste from ROS terminal so internet connection should be ok. But I cannot ping google webiste from PC connected to hAP ax. DNS seems work because google.pl address is translated to IP address but ping doesn’t reply any packages.
Did you upgrade the lte modem firmware to 16121.1034.00.01.01.08 version?
The LTE is a second WAN or only main?
Have you added a static route for 0.0.0.0/0 via lte1?
What does /interface bridge port print show? It makes me slightly nervous that you have a datapath configured for wifi1 and at the same wifi1 has been added as a port to the bridge manually, but it may be harmless, I just have nowhere to test right now.
Other than that, I cannot spot any misconfiguration, so there may be some MTU issue or a contract/account settings issue, or something wrong at the PC side.
So please run /tool sniffer quick ip-address=9.9.9.9 in the command line window on the router (Winbox-Terminal or ssh) and start pinging 9.9.9.9 from the PC, limited for 2 attempts (-n 2 on Windows). What does the sniffer show?
