Good evening all hope everyone is well. My name's Paul and this is my first post on here as well as my first Mikrotik device, I'm also not very knowledgeable with networking apart from setting up my Netgear router.
I'm looking for some help with my RBM11G which I got recently. I want to do passthrough to my Netgear XR500 router, which I think I've basically done as I do get internet. My issue is I want to make a vlan so I can access the RBM11G if needs be but I'm a little lost as what I've done doesn't allow me to access RBM11G from XR500
Here is my censored config file (not sure if software id was sensitive but censored just incase)
2024-12-1 21:28:08 by RouterOS 7.16.2
software id = XXXX-XXXX
model = RBM11G
serial number = XXXXXXXXXXXX
/interface lte
set [ find default-name=lte1 ] allow-roaming=no sms-protocol=auto sms-read=no
/interface vlan
add interface=ether1 name=vlan3 vlan-id=3
/interface lte apn
set [ find default=yes ] apn=mob.asm.net name=SMARTY passthrough-interface=
ether1 passthrough-mac=11:22:33:44:55:66 use-network-apn=no
/ip neighbor discovery-settings
set discover-interface-list=none
/ip address
add address=192.168.1.2 interface=vlan3 network=192.168.1.2
/system clock
set time-zone-name=Europe/London
/system note
set show-at-login=no
I feel like it's something to do with the vlan IP address but tbh I don't know what to put in there. I was following this tutorial....
Step-by-Step Guide to Configuring Passthrough Mode
Step 1: Access the Router’s Configuration Interface
The first step in configuring an LTE router for passthrough is accessing the router’s management interface. This can be done through either Winbox or the WebFig browser-based interface. Winbox is a preferred tool for MikroTik routers due to its ability to access routers using MAC addresses, making it convenient even when IP configuration isn’t properly set.
Winbox: Connect via Ethernet and launch Winbox. The router should appear in the list under "Neighbors," allowing you to connect by selecting the router and clicking "Connect."
WebFig: Open a web browser and enter the router's IP address, typically 192.168.88.1. Login with your credentials (admin username and password).
Step 2: Configure the LTE Interface
Before enabling passthrough, the LTE interface must be set up correctly. This includes configuring the Access Point Name (APN), which is required for the LTE modem to connect to your cellular network provider.
In the management interface, navigate to Interfaces → LTE.
Click on LTE APN, and add the appropriate APN settings for your mobile carrier. These settings are usually available from your service provider or can be found through online searches.
Ensure that your LTE modem connects successfully to the network before proceeding to the next step. You can verify this by checking the interface status to ensure a valid connection with the cellular network.
Step 3: Disable DHCP
Passthrough mode bypasses the router’s typical network management features, so you need to disable the DHCP server on the LTE router. This ensures that the public IP address assigned by the mobile network is handed directly to the secondary router.
In the Quick Set or WebFig interface, locate the DHCP server option.
Uncheck or disable the DHCP server.
Disabling DHCP ensures that the LTE router doesn't assign a local private IP address to the downstream router, allowing the public IP to be passed through correctly.
Step 4: Enable Passthrough Mode
To enable passthrough mode, you must bind the LTE interface to a specific Ethernet port on the router. The most common setup is binding the LTE connection to Ether1, the primary Ethernet interface.
Navigate to Interfaces → LTE → LTE APN.
Find the Passthrough setting and select ether1 (or the interface you wish to connect to your secondary router) from the dropdown menu.
Additionally, you can specify a MAC address for passthrough. By default, the LTE router will bind to the first MAC address it detects. If you want to ensure a specific router or firewall always receives the public IP, you can enter its MAC address in the Passthrough MAC field.
Step 5: Configure VLAN for Management (Optional)
In passthrough mode, the LTE router effectively becomes invisible in the network. This is a drawback if you need to maintain access to the LTE router’s management interface for future changes or troubleshooting. One solution is to create a management VLAN.
Set up a management VLAN on a separate Ethernet port or within the same interface.
Assign the VLAN a static IP address from your local network, ensuring you can reach the LTE router via the VLAN while passthrough is enabled.
Using a VLAN ensures that you retain control of the LTE router for future updates and monitoring, without interrupting the passthrough functionality.
Step 6: Apply Changes and Reboot
After all configurations are completed, apply the changes and reboot the LTE router to activate the new settings.
Click Apply to confirm the changes.
Reboot the router using the reboot option in the interface.
Once the router restarts, the secondary router connected to Ether1 (or the specified Ethernet port) should receive the public IP address from the LTE modem.
Common Issues and Troubleshooting
No Public IP on the Secondary Router:
If the secondary router doesn't receive a public IP, verify that DHCP is disabled on the LTE router and that passthrough mode is correctly assigned to the right Ethernet port.
Lack of Management Access:
If you lose access to the LTE router after enabling passthrough, check if you have configured the management VLAN properly. Alternatively, you may need to connect directly via MAC address using Winbox.
I can't via MAC using winbox once my XR500 is connected so I've definitely configured the vlan incorrectly.
Any help would be greatly appreciated but please try explaining it in simple terms for me please lol
Many thanks in advance
Paul
