Hap AX Lite LTE6, use Ether1 as primary

Hi. Totally new with Mikrotik. I plugged my internet to Ether1, and couldn’t get internet to work. When I inserted SIM, internet works immediately. Am I right to assume there is config to be done, to have Ether1 as primary WAN and have LTE as secondary? Will Quickset work?

I don’t think Quickset will help here. Not much to choose from.

Config to be changed:

  • remove ether1 from bridge
  • remove ether1 from LAN and add to WAN interface list
  • add DHCP client to ether1, set distance to lower value then LTE (check APN settings)

And that should be it.

When ether1 is not connected but LTE is, LTE will take over.
When ether1 is connected again and gets valid IP address, that connection will take over again because of the lower distance value set earlier.

Does it also mean that if I want to have fallback (if Ether1 is down, LTE takes over), there is nothing else to be done except what you mentioned? I don’t need load balancing.

Correct.

Because of the way routing and distance works.
Routing engine will try to find where to send a packet to, if multiple options are present (in this case for 0.0.0.0/0) , the one with the lowest distance will be taken.
If an interface is not usable, it will simply not be used by routing. So no multiple options anymore.

Load balancing is a bit more complex to setup (but still no rocket-science) but uses underneath the same principles (since also for load balancing, it is possible an interface goes down and then everything has to keep on working).

When I got my unit, and had a look at the webfig, was surprised that it isn’t as easy even when compared to the oldest Linksys WRT series I know :smiley: In a way though, it’s exciting as the possibilities seem endless for such a small device.

Thank you for the help!

Quickset setups for this specific version are rather limited, I agree (as for most AX devices).
Then again, I never use Quickset :smiley:

But make no mistake, this is a rather powerful device for it’s price range !
And all the goodies you get with ROS, make you can do an incredible amount of things where you would otherwise pay quite a bit of money for with other vendors.
A very steep learning curve, be warned, but take it step by step and the puzzle pieces will fall together.

Seems to me the OS forces you to do it step by step, and no 1 click enable/ disable.

I am excited to get the BTH feature working. Relative going to China. I wonder if this can bypass the great wall…

SAFE MODE will be your friend when testing/configuring.
https://help.mikrotik.com/docs/display/ROS/Configuration+Management#:~:text=Safe%20mode%20can%20be%20used,hit%20[CTRL]%2B[D].

I am at this step:

add DHCP client to ether1, set distance to lower value then LTE (check APN settings)

But status says stopped. Invalid

DHCP
Interface- ether1
Use Peer DNS- checked
Use Peer NTP- checked

ADVANCED
DHCP options
Hostname
Clientid

Default route distance=1




EDIT: Turns out, with settings above, as soon as I plugged in WAN to ether1, I got internet. Why does the instruction say add DHCP client to ether1? What does that mean/ do?

When cable is not connected, interface will not work.

As soon as it is connected, the DHCP client will make sure to get an IP address from the router upstream.
And it should then also provide a route and DNS settings for internet access to work.

Thank you @holvoetn!

Follow-up question. I mentioned that everything is already working, where Ether1 is WAN, and LTE is WAN backup whenever Ether1 is down. I used my TP-link LTE router to plug into my Ether1 and act as modem provided by my ISP. The TP-link has NAT enabled. It works. I then used another LTE router, and plugged it into my Mikrotik Ether1, it worked again. (NAT also). When I use my ISP provided modem (in bridge mode), I don’t have internet access. Is it because it’s in bridge mode? What should be done?

Does the ISP modem work in normal ethernet mode or PPOE ?

When you plug PC directly to ISP modem, I get a public IP address.

When you plug ISP modem in AX Lite ether 1, does that port get a public IP address as well ?

Can you provide export of AX Lite ?
terminal: export file=anynameyouwish
move file to PC, remove serial, public IP (if fixed), passwds.
Post edited config between [ __code] quotes for easier readability.

Still having a hard time figuring out how to get to the exported file :slight_smile:

But wait… Since I was so slow in figuring out how to download the exported file from another PC, I suddenly got internet on this AX Lite device. So does this mean it’s just slow to connect? I didn’t change anything.

In WInbox, it should be visible in the section Files.
You can simply drag-n-drop it to your computer.

If you did your tests pretty fast (within 10 minutes or so) it is possible the firewall connections still had the old situation remembered.
That’s what connection tracking partially is for, to avoid an existing connection needs to pass all “new” steps each and every time, but it can also work against you. Like here.

When you do such tests, best to make sure no active connections are present anymore (clear connections in firewall, CTRL-A and delete).
Or reboot router and then plug in ether 1.

Thank you holvoetn, Next time I know.