Help Configuring Point to Point Internet Extension :-)

I need help to configure 2 RBs to extend Internet to a site 10Kmts away.
This is the complete system:

Public Internet -DSL Modem (pppoe) - RB 133 - Ubiquity 5Ghz ----- Ubiquity 5Ghz- RB 133c- PC

  1. I already configured the RF part using NSTREME
  2. The Radio link no problem.
  3. However I need to configure all the details of IP routing or bridging so Internet can be accesed from the PC. (I prefer that the PC receives IP via DHCP and also receives DNS info).

Many thanks.
Maximo (Argentina)

configure AP with DHCP server.
add bridge in AP as well as in client and add ether & wlan interface in bridge port.

or - configure wireless link to operate in bridge mode with WDS on both sides.
Create a bridge, set WDS default bridge to this bridge on both sides, and add the ethernet to this bridge as a port.

You then do not need any IP’s on the routers, except for management access.

maximo64 -
If all you need is access to that one site then bridging is easier to do than routing…that being said, if you plan to extend things then going routed is the only way to go - better control, self documenting, easy to troubleshoot.

Pick your ‘poison’ (method - route or bridge) and I am sure we can help you out.

Galaxynet:

I prefer routing since I have some experience on old cisco routers and I know this “poison”.

Since my Internet access is a simple ADSL pppoe suscriber I dont have a fixed IP Address at the AP side, so I suppose all my routing should be on 192.168.xx.xx addresses and natting should work inside both (AP and station).

However Im confused when trying both things NSTREME and Routing (Is it possible?). Is NSTREME a good choice for this problem ? (Extend Internet a long range point to point). Up to this moment I couldnt have Internet access from the Station side.

Please Help. Thanks.

maximo64 -
Well then routing it is…

Nstreme/no Nstreme..if your link can maintain a 10% or better data load then it will work fine. If you can’t maintain that then using the ‘standard’ AP to Station mode will work just fine until you get enough traffic.

As to Nstreme, you just set the Wlan card in Nstreme mode, be sure to select the polling option, give the Wlan (AP) and Wlan (station) IP addresses. I typically use a /29 on these ‘private links’ so I have a few spare addresses - you of course can use any scheme you want…

The MT is a full featureed router/firewall…you can do all you nat’ing in the AP - and route whatever you need to your station. Nat’ing at the station is also possible but unless you do a one-to-one nat the you won’t be able to talk to anything behind the station (except via a VPN tunnel). Anything behind the station will be just fine when using , nat’ing or masqurade.

If you still don’t have it, then use the terminal mode in the MT and the appropriate top level, and mid level print commands to print out your config, copy and paste here on the forum - we’ll take a look…

(A top level / mid level print command in terminal mode looks like this) /ip route print or
/interface wireless print

Thom

galaxynet

Thanks !.
Finally I have it with routing !

For the rest of us who are trying to do something like this, the "hard route" way here is my solution:
Hardware:
Public Internet - AP RB 133 - RF UBIQUITY 5Ghz card - Antenna
Antenna - RF UBIQUITY 5Ghz card - STATION RB 133 - Client PC

RB 133 has 3 Ethernet interfaces and 1 Wlan
RB 133C has 1 Ethernet and 1 Wlan.
Public Internet is on ether2 interface of AP
Client PC is on ether1 interface on Station

I will show only the prints of the results not the actual commands to configure the RB.

  1. Set up IP Addresses and Networks
    on AP (In my case Internet ISP gave me a Public IP Address (Here I refer to it as PUBLIC_IP_ADD, with PUBLIC_IP_GW on
    Network PUBLIC_IP_NET you can change
    this to your Public IP Address, later I will try with dynamic PPPOE in case of DSL modem).
    ON AP:
    [admin@MikroTik] interface> print
    Flags: X - disabled, D - dynamic, R - running

NAME TYPE RX-RATE TX-RATE MTU

0 R ether1 ether 0 0 1500
1 R ether2 ether 0 0 1500
2 R ether3 ether 0 0 1500
3 AP wlan 0 0 1500

[admin@MikroTik] ip address> print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK BROADCAST INTERFACE

0 ;;; added by setup
192.168.3.1/28 192.168.3.0 192.168.3.15 ether1
1 192.168.3.49/28 192.168.3.48 192.168.3.63 AP
2 PUBLIC_IP_ADD/28 PUBLIC_IP_NET PUBLIC_IP_BROAD ether2
3 192.168.4.2/28 192.168.4.0 192.168.4.15 ether3


2. Set up IP addresses on Station (I used the same network for both Wlan interfaces AP and Station
192.168.3.48/28).
ON STATION:
[admin@MikroTik] interface> print
Flags: X - disabled, D - dynamic, R - running

NAME TYPE RX-RATE TX-RATE

MTU
0 R ether1 ether 0 0
1500
1 R To-AP wlan 0 0
1500

[admin@MikroTik] ip address> print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK BROADCAST INTERFACE

0 ;;; added by setup
192.168.3.50/28 192.168.3.48 192.168.3.63 To-AP
1 192.168.3.65/28 192.168.3.64 192.168.3.79 ether1


3. Configure Wireless interfaces compatible on AP and STATION, I used ap-bridge mode on
AP and station mode on STATION. (In my case since the link is long range I enabled only
rates up to 12 Mbps because of Ubiquity RF sensitivity is better, later will try more...).

ON AP:
[admin@MikroTik] interface wireless> print
Flags: X - disabled, R - running
0 name="AP" mtu=1500 arp=enabled
disable-running-check=no interface-type=Atheros AR5413
mode=ap-bridge ssid="test" area=""
frequency-mode=manual-txpower country=no_country_set antenna-gain=0
frequency=5805 band=5ghz scan-list=default rate-set=configured
supported-rates-a/g=6Mbps,9Mbps,12Mbps basic-rates-a/g=6Mbps
max-station-count=2007 ack-timeout=dynamic tx-power-mode=default
noise-floor-threshold=default periodic-calibration=default
periodic-calibration-interval=60 burst-time=disabled dfs-mode=none
antenna-mode=ant-a wds-mode=disabled wds-default-bridge=none
wds-default-cost=100 wds-cost-range=50-150 wds-ignore-ssid=no
update-stats-interval=disabled default-authentication=yes
default-forwarding=yes default-ap-tx-limit=0
default-client-tx-limit=0 proprietary-extensions=post-2.9.25
hide-ssid=no security-profile=default disconnect-timeout=3s
on-fail-retry-time=100ms preamble-mode=both compression=no
allow-sharedkey=no

ON STATION:
admin@MikroTik] interface wireless> print
Flags: X - disabled, R - running
0 R name="To-AP" mtu=1500 arp=enabled
disable-running-check=no interface-type=Atheros AR5413
mode=station ssid="test" area=""
frequency-mode=manual-txpower country=no_country_set
antenna-gain=0
frequency=5805 band=5ghz scan-list=default rate-set=configured
supported-rates-a/g=6Mbps,9Mbps,12Mbps basic-rates-a/g=6Mbps
max-station-count=2007 ack-timeout=dynamic tx-power-mode=default
noise-floor-threshold=default periodic-calibration=default
periodic-calibration-interval=60 burst-time=disabled
dfs-mode=none
antenna-mode=ant-a wds-mode=disabled wds-default-bridge=none
wds-default-cost=100 wds-cost-range=50-150 wds-ignore-ssid=no
update-stats-interval=disabled default-authentication=yes
default-forwarding=yes default-ap-tx-limit=0
default-client-tx-limit=0
proprietary-extensions=post-2.9.25 hide-ssid=no
security-profile=default disconnect-timeout=3s
on-fail-retry-time=100ms
preamble-mode=both compression=no allow-sharedkey=no
[admin@MikroTik] interface wireless>


4. Configure Routing tables on AP and STATION (here is the FUN) :
ON AP:
[admin@MikroTik] ip> route
[admin@MikroTik] ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf

DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE

0 ADC 192.168.3.0/28 192.168.3.1 ether1
1 ADC 192.168.3.48/28 192.168.3.49 AP
2 ADC 192.168.4.0/28 192.168.4.2 ether3
3 ADC PUBLIC_IP_NET/28 PUBLIC_IP_ADD ether2
4 A S 0.0.0.0/0 r PUBLIC_IP_GW ether2
5 S 0.0.0.0/0 PUBLIC_IP_ADD r PUBLIC_IP_GW ether2

ON STATION:
admin@MikroTik] ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf

DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE

0 ADC 192.168.3.48/28 192.168.3.50 To-AP
1 ADC 192.168.3.64/28 192.168.3.65 ether1
2 A S 0.0.0.0/0 r 192.168.3.49 To-AP
[admin@MikroTik] ip route>

  1. Configure NAT Masquerading on AP and STATION:
    ON BOTH AP AND STATION:
    [admin@MikroTik] ip firewall nat> print
    Flags: X - disabled, I - invalid, D - dynamic
    0 chain=srcnat action=masquerade

  2. If you like add DNS server address to both AP and STATION.
    [admin@MikroTik] ip dns> print
    primary-dns: xxx.xxx.xxx.xxx (Here is the DNS IP address given to you by your ISP)
    secondary-dns: 0.0.0.0
    allow-remote-requests: no
    cache-size: 2048KiB
    cache-max-ttl: 1w
    cache-used: 17KiB
    [admin@MikroTik] ip dns>

ENJOY IT, your client PC connected to STATION on ether1 should have an IP address on
the same network as ether1, I used IP address 192.168.3.67 Gateway 192.168.3.65 Mask
255.255.255.240 and enabled DNS with the DNS IP addr provided by your ISP.

What is next:
a. try to use Dynamic IP with PPOE on Public Internet
b. try to use DHCP on all the network.
c. RF part test long range with NSTREME instead of AP-Station mode.
d. Use DDNS to discover AP so can be managed remotely

Now PPOE is working !
AP: Internet - DSL Modem - (eth3)RB 133 - Ubiquity RF - Antenna
STATION : Antenna - Ubiquity RF - RB 133 C - Client PC
Changes were made on AP to access Internet via PPOE. No changes were made on STATION.
Here is the print of IP, routes and Interfaces on AP
ON AP:

[admin@MikroTik] interface> pppoe-client
[admin@MikroTik] interface pppoe-client> print
Flags: X - disabled, R - running
0 R name="pppoe-out1" max-mtu=1480 max-mru=1480 interface=ether3
user="YOURUSERTOISP" password="YOURPASSWORD" profile=default
service-name="" ac-name="" add-default-route=yes dial-on-demand=no
use-peer-dns=no allow=pap,chap,mschap1,mschap2
[admin@MikroTik] interface pppoe-client>

[admin@MikroTik] interface> print
Flags: X - disabled, D - dynamic, R - running

NAME TYPE RX-RATE TX-RATE MTU

0 R ether1 ether 0 0 1500
1 R ether2 ether 0 0 1500
2 R ether3 ether 0 0 1500
3 R AP wlan 0 0 1500
4 R pppoe-out1 pppoe-out 0 0 1480
[admin@MikroTik] interface>

[admin@MikroTik] ip address> print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK BROADCAST INTERFACE

0 ;;; added by setup
192.168.3.1/28 192.168.3.0 192.168.3.15 ether1
1 192.168.3.49/28 192.168.3.48 192.168.3.63 AP
2 D 201.252.25.151/32 200.3.60.4 0.0.0.0 pppoe-out1 /* THIS IS DYNAMIC AND GIVEN BY ISP */
[admin@MikroTik] ip address>

[admin@MikroTik] ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf

DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE

0 ADC 192.168.3.0/28 192.168.3.1 ether1
1 ADC 192.168.3.48/28 192.168.3.49 AP
2 ADC 200.3.60.4/32 201.252.25.151 pppoe-out1 /* Also depends on ISP pppoe */
3 AD 0.0.0.0/0 r 200.3.60.4 1 pppoe-out1
[admin@MikroTik] ip route>

I go now for more...

Now DDNS working to be able to “see” my AP from
any place of the Internet !!!

Just Installed the DDNS Script for ChangeIP.com that is in

http://forum.mikrotik.com/t/ddns-changeip/2418/1

to the pppoe-out1 interface so I can manage the AP from the Internet
if the RF link goes down.

One thing I had to do is to initialize the global ddnslastip variable before running the
script on the scheduler. The rest goes OK.

This has been a HUGE help. Now if somebody could help me get to the next level…

I have a PtP link setup on an RB333 and I would like to repeat the signal from another local XR5 to a remote RB333 XR5 and so on.

I’m getting the hang of this stuff, but the tutorials are a big help in getting my head around it.

Thanks