Installed new router, no internet through wireless

I am really new to this router stuff and I bought a Mikrotik Routerboard RB201 Port plus 10 Port Ethernet. I did all the set up with the help of that Jamaican youtube guy and followed all the instructions from his first tutorial:

https://www.youtube.com/watch?v=76nK1LXyPMA

I can get internet when plugged in with a cable, but when I try to connect with the WiFi it says there is no internet.

Windows troubleshooting says " “Wi-Fi doesn’t have a valid IP configuration”
So I tried setting up a static IP with:

IP Address: 192.168.5.12
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.5.1
my ISP for the preferred DNS server

Still no internet. This time Windows troubleshooting says “Investigate router or broadband modem issues”

In winbox, /export:

set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no frequency=auto
mode=ap-bridge ssid=FakeName wireless-protocol=802.11
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods=“” mode=
dynamic-keys wpa2-pre-shared-key=notrealpassword
/ip pool
add name=dhcp ranges=192.168.5.10-192.168.5.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=ether2 name=dhcp1
/ip address
add address=192.168.5.1/24 interface=ether2 network=192.168.5.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.5.0/24 gateway=192.168.5.1 netmask=24
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/lcd interface pages
set 0 interfaces=
sfp1,ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,ether9,ether10
/system clock
set time-zone-name=America/Toronto

Do you guys have any ideas?

My idea is that internal RB bridge is miss-configured. Please post complete configuration export (not just part which you guess it’s relevant) and remember to obscure sensitive data as you did in partial export you’ve already posted. Include information about RouterOS version (it does matter).

mkx: /export hide-sensitive does that for you.

WarrenD: Please don’t stick to that tutorial. You get a working configuration out-of-the box by just resetting to default config and using Quick Set to set LAN and WiFi parameters.

Almost. It doesn’t obfuscate public IP addresses … and in context of getting help here on forum showing real addresses is mostly not needed. It is better to obfuscate them, specially if poster needs help with proper FW rules to secure the router itself and/or LAN beyond it (which is probably not the case here, but one never knows until it’s too late :wink:).

IIRC, that YouTube guy is from Kenya

OK, here is the export hide-sensitive. Like I said, I’m really new to this stuff.


[admin@MikroTik] > /export hide-sensitive

jul/12/2018 18:59:10 by RouterOS 6.40.3

software id = P91A-VYKQ

model = 2011UiAS-2HnD

serial number = 762C08B18043

/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no frequency=auto mode=ap-bridge ssid=
FakeName wireless-protocol=802.11
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods=“” mode=dynamic-keys
/ip pool
add name=dhcp ranges=192.168.5.10-192.168.5.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=ether2 name=dhcp1
/ip address
add address=192.168.5.1/24 interface=ether2 network=192.168.5.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.5.0/24 gateway=192.168.5.1 netmask=24
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=drop chain=input comment=“drop ssh brute forcers” dst-port=22 protocol=tcp
src-address-list=ssh_blacklist
add action=add-src-to-address-list address-list=ssh_blacklist address-list-timeout=1w3d chain=input
connection-state=new dst-port=22 protocol=tcp src-address-list=ssh_stage3
add action=add-src-to-address-list address-list=ssh_stage3 address-list-timeout=1m chain=input
connection-state=new dst-port=22 protocol=tcp src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage2 address-list-timeout=1m chain=input
connection-state=new dst-port=22 protocol=tcp src-address-list=ssh_stage1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/ip service
set telnet disabled=yes
/lcd
set time-interval=daily
/lcd interface pages
set 0 interfaces=sfp1,ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,ether9,ether10
/system clock
set time-zone-name=America/Toronto
[admin@MikroTik] >

You’re not recieving an DHCP-adress because your DHCP-server is only running on ether2.

/ip dhcp-server
add address-pool=dhcp disabled=no > interface=ether2 > name=dhcp1

A static IP on your wireless won’t work either, because you’ve configured the default gateway on ether2 as well:

/ip address
add address=192.168.5.1/24 interface=ether2 network=192.168.5.0

I think you’re configuring this router for home use, am I correct? In that case, what I would recommend is creating a bridge interface, you can learn more about bridges in the Wiki: https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge.

The bridge should contain all your LAN-interfaces, for example ether2 till ether10 and wlan1. Then you move both the DHCP-server and the IP-address of the router to the bridge.

If you’re not familiar, the option suggested by nescafe2002 is also a great one. You could also use it to learn, because running an export after applying the default configuration would show the diffrences between the config you have now and one that should be working.

We’re is bridge in all this?

The
iP
DHCP server
And other things must be bridged from wired to wireless.

/Interface bridge

Start there.