IP and Routing: SFP GPON Module WebUI access hmm

RouterOS Beginner Basics
1

Hi,
I need to make logon on a web gui off my Gpon SFP module. My bridge has 192.168.88.0 network while the SFP module has 192.168.1.1 ip address.

The gpon module is powered and working and I'm able to link to my ISP network, but i dont have access to sfp.

here's the config:

oct/11/2024 15:53:59 by RouterOS 6.48.7

software id = FJI9-4JNV

model = RB760iGS

serial number = HF0096A956H

/interface bridge
add admin-mac=78:9A:18:47:F6:6F auto-mac=no comment=defconf name=bridge
/interface vlan
add interface=sfp1 name="vlan 3505" vlan-id=3505
/interface pppoe-client
add add-default-route=yes disabled=no interface="vlan 3505" name=pppoe-out1 password=MHtD7fJzAzE use-peer-dns=yes user=77666787787
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf disabled=yes interface=sfp1
add bridge=bridge interface=ether1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=all
/interface list member
add comment=defconf interface=bridge list=LAN
add interface=pppoe-out1 list=WAN
add interface="vlan 3505" list=WAN
add interface=sfp1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
add address=192.168.1.1/24 interface=sfp1 network=192.168.1.0
/ip dhcp-client
add comment=defconf interface=sfp1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
add action=accept chain=forward dst-address=192.168.1.1 in-interface=sfp1 out-interface=all-ethernet protocol=tcp src-address=192.168.1.1
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/system clock
set time-zone-name=Europe/Moscow
/system identity
set name=RouterOS
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN


please help(((

2

I would try removing the sfp1 from bridge (as opposed to leaving it there disabled) but it may be unrelated:
/interface bridge port
…
add bridge=bridge comment=defconf disabled=yes interface=sfp1

3

its dont work((

4

/ip address
[…]
add address=192.168.1.1/24 interface=sfp1 network=192.168.1.0

Shouldn’t the address be something other than 192.168.1.1? Maybe .2?

5

I dont know i’m just new at this

6

Then I guess that is the problem since the first address of a subnet is mostly reserved for the gateway, i.e. the GPON

7

i have another question, how to export configuration of mikrotik..?

8

terminal
/export file=anynameyouwish

File will be located in Files, you can move it to your computer.

9

One way is the aforementioned one, another way is to create a backup file through the Files menu whose content you cannot view, edit, etc. because it’s a binary file

10

Backup is not export config :smiley:

11

thank for your help!! im just reset configuration and all works!!
thanks!

12

Complete tutorial here:
http://forum.mikrotik.com/t/forum-rules/173010/1