Huawei E3372h in StickMode

Hello,

i am new to Mikrotik, i own a RB962UiGS-5HacT2HnT

I have a dynamic public IP on my Huawei E3372h and i want to attach it directly to my Mikrotik to avoid Double NAT.

Compatibility list shows that it should work
https://wiki.mikrotik.com/wiki/Manual:Peripherals#Cellular_modems

I can’t see a LTE Interface, is this OK in Stick Mode? I am a bit confused :slight_smile:

Can anybody help me please, what do i have to configure?

# jan/04/1970 22:50:42 by RouterOS 6.47.2
# software id = EIR9-DJ39
#
# model = RB962UiGS-5HacT2HnT
# serial number = BEC40ADC46BC
/interface bridge
add name=bridge_intern pvid=107 vlan-filtering=yes
/interface ethernet
set [ find default-name=ether5 ] poe-out=off
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=austria disabled=no \
    mode=ap-bridge name=birdygrille_home_2g ssid=birdygrille_home_2g vlan-id=\
    134 vlan-mode=use-tag wireless-protocol=802.11 wps-mode=disabled
set [ find default-name=wlan2 ] band=5ghz-a/n/ac country=austria disabled=no \
    mode=ap-bridge name=birdygrille_home_5g ssid=birdygrille_home_5g vlan-id=\
    134 vlan-mode=use-tag wireless-protocol=802.11 wps-mode=disabled
/interface vlan
add interface=bridge_intern name=vlan102_tagged vlan-id=102
add interface=bridge_intern name=vlan107_untagged vlan-id=107
add interface=bridge_intern name=vlan134_tagged_WLAN_Home vlan-id=134
/interface bonding
add mode=802.3ad name=bonding_ether4+5 slaves=ether4,ether5 \
    transmit-hash-policy=layer-3-and-4
/interface list
add name=WAN
add name=LAN
/interface lte apn
set [ find default=yes ] apn=mass.at passthrough-interface=bridge_intern \
    passthrough-mac=auto
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
    mode=dynamic-keys supplicant-identity=MikroTik
add eap-methods="" name=hotspot supplicant-identity=""
/interface wireless
add disabled=no keepalive-frames=disabled mac-address=76:4D:28:D1:1D:14 \
    master-interface=birdygrille_home_2g multicast-buffering=disabled name=\
    birdygrille_hotspot_2g security-profile=hotspot ssid=\
    birdygrille_hotspot_2g vlan-id=135 vlan-mode=use-tag wds-cost-range=0 \
    wds-default-cost=0 wps-mode=disabled
/interface vlan
add interface=birdygrille_hotspot_2g name=vlan135_tagged_WLAN_hotspot \
    vlan-id=135
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
add dns-name=grille.guest hotspot-address=172.16.1.1 html-directory=\
    flash/hotspot name=hsprof1
/ip pool
add name=pool_hotspot ranges=172.16.1.100-172.16.1.254
/ip dhcp-server
add address-pool=pool_hotspot disabled=no interface=\
    vlan135_tagged_WLAN_hotspot lease-time=1h name=dhcp_hotspot
/ip hotspot
add address-pool=pool_hotspot disabled=no interface=\
    vlan135_tagged_WLAN_hotspot name=hotspot1 profile=hsprof1
/ip hotspot user profile
add address-pool=pool_hotspot mac-cookie-timeout=1d name=2Mbit rate-limit=\
    200000/200000
/port
set 0 name=usb1
/interface ppp-client
add apn=mass.at disabled=no info-channel=1 name=ppp-out1 port=usb1
/interface bridge port
add bridge=bridge_intern interface=bonding_ether4+5 pvid=107
add bridge=bridge_intern frame-types=admit-only-vlan-tagged interface=\
    vlan102_tagged pvid=102
add bridge=bridge_intern frame-types=admit-only-vlan-tagged interface=\
    vlan134_tagged_WLAN_Home pvid=134
add bridge=bridge_intern frame-types=admit-only-vlan-tagged interface=\
    birdygrille_home_2g pvid=134
add bridge=bridge_intern frame-types=admit-only-vlan-tagged interface=\
    birdygrille_home_5g pvid=134
add bridge=bridge_intern interface=ether2
add bridge=bridge_intern interface=ether3
add bridge=bridge_intern interface=sfp1
/interface bridge vlan
add bridge=bridge_intern tagged=bridge_intern,vlan102_tagged,bonding_ether4+5 \
    vlan-ids=102
add bridge=bridge_intern tagged=bridge_intern,vlan107_untagged untagged=\
    bonding_ether4+5 vlan-ids=107
add bridge=bridge_intern tagged="bridge_intern,bonding_ether4+5,vlan134_tagged\
    _WLAN_Home,birdygrille_home_5g,birdygrille_home_2g" vlan-ids=134
/interface detect-internet
set detect-interface-list=WAN
/interface list member
add interface=ether1 list=WAN
add interface=bridge_intern list=LAN
/ip address
add address=192.168.7.1/24 interface=vlan107_untagged network=192.168.7.0
add address=192.168.2.1/24 interface=vlan102_tagged network=192.168.2.0
add address=192.168.34.1/24 interface=vlan134_tagged_WLAN_Home network=\
    192.168.34.0
add address=172.16.1.1/24 comment="hotspot network" interface=\
    vlan135_tagged_WLAN_hotspot network=172.16.1.0
/ip dhcp-client
add disabled=no interface=ether1
/ip dhcp-relay
add dhcp-server=192.168.7.11 disabled=no interface=vlan107_untagged name=\
    relay_vlan107
add dhcp-server=192.168.7.11 disabled=no interface=vlan102_tagged name=\
    relay_vlan102
add dhcp-server=192.168.7.11 disabled=no interface=vlan134_tagged_WLAN_Home \
    name=relay_vlan134
/ip dhcp-server network
add address=172.16.1.0/24 comment="hotspot network" gateway=172.16.1.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
    src-address=172.16.1.0/24
/ip hotspot user
add name=test profile=2Mbit
/ip route
add distance=1 gateway=ppp-out1
add distance=2 gateway=ether1
/system logging
add topics=lte
add topics=ppp

ppp-out.JPG
usb.JPG

when you see usbx device then e3372 is in modem mode, speed is limited via emulation of serial interface… but your connection will be done by PPP-OUTx who give IP to MikroTik and PASSTHROUGH can be use to pass that IP to other router in your network.

when you see ltex device then e3372 is in hi.link mode, own Router. Nat by Nat. HiLink is router and this give full speed and works perfect. With modded firmware you can unlock DMZ, adb, API etc. I not know that Hi.Link have own passthrue to bring IP to MikroTik - this is not related at Mikrotik and should be done by E3372 itself because he have IP and must give it to other device.. or use DMZ.