LtAP setup issues with LTE

New LtAP out of box does not provide IP (normally on other MikrTiks I have it gives 192.168.88.1 as it’s address)
I used Winbox to get in via the MAC address and put 7.1.3 OS on it so it would detect my LTE MODEM (RM502Q)
We get internet access on the device only, it will not pass internet to the ethernet port or wireless,
The internet is there because I can check for and download updates, I can also go to terminal and run a speed test to know servers.

How do I bridge the LTE to the LAN so I can get internet on my computer or the wireless?
I have an LHG with same MODEM and that setup works fine passing internet through the ethernet port but I can’t copy the LHG mipsbe config to the mmips config of the LtAP
Are there any export of interface that I can do and import them to save time?

You cannot save a backup of the configuration and load it on another model. But you can export the configuration into a script and run that script on another device regardless its architecture. In order to make it run successfully after configuration reset, you have to modify it a bit, basically it is enough to add a :delay 1m at the beginning, provided that the number of ethernet and WiFi interfaces is the same on both the source and target device.

But from what you say, something is rotten about the LtAP, as in the default configuration, there should indeed be a 192.168.88.1/24 address attached to ether1. What does /export currently show on the LtAP?

Also, what is the /export of the LHG, i.e. do you use LTE passthrough mode or does the LHG act as a router?

Here is the lTAP export, I too am concerned about not having 192.168.88.1 by default, I have tried netinstall several times.

mar/18/2022 18:25:22 by RouterOS 7.1.3

software id = B6QN-6MIL

model = RBLtAP-2HnD

serial number = D7250D5Exxxx

/interface bridge
add admin-mac=08:55:31:C1:xxxxx auto-mac=no comment=defconf name=bridge
/interface lte
set [ find ] allow-roaming=no band="" name=lte1 nr-band=""
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX
disabled=no frequency=auto installation=outdoor mode=ap-bridge ssid=
MikroTik-C18xxx
/interface list
add name=WAN
add name=LAN
/interface lte apn
set [ find default=yes ] apn=fast.t-mobile.com use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
set 2 name=usb3
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=wlan1
/interface list member
add interface=ether1 list=WAN
add interface=wlan1 list=LAN
/ip dhcp-client
add comment=defconf interface=bridge
/system clock
set time-zone-name=America/Chicago
/system routerboard usb
set type=mini-PCIe

Can you reset the LtAP to its default configuration and then export the config? There are a number of critical elements missing from your config that should be there unless you removed them or tried to import a config from another device.

The question is how does the default configuration look like in case of 7.1.3 on LtAP.

/system/default-configuration/print file=defconf will place the default configuration script into a file named defconf.txt, which you can download and inspect.

Other than that, what if you do /ip/address/add address=192.168.88.1/24 interface=bridge and assign some other address from 192.168.88.0/24 to your PC manually, will you be able to login via IP address rather than MAC address?

@sindy, I think this thread is a continuation of http://forum.mikrotik.com/t/5g-lte-modem-mpcie-slot-speed/155595/1

The default configuration is really just those lines on the LtAP, it starts as the “WISP AP” default it seems

But I can see the confusion here. Looking at the QuickSet profiles, none support LTE. While most LTE RBs have either “LTE AP” or “LTE” as a QuickSet profiles. BUT despite the LtAP having SIM slots, it does not have any LTE-based QuickSet profiles…

You could try the “Home AP” mode, that will get you a Wi-Fi network with a LAN to test the LTE part. But you’d have change ether1 by removing the /ip/dhcp-client on ether1, and adding ether1 to the /interface/bridge/port

I grabbed the 7.1.3 output of the /system/default-config from an LtAP at 7.1.3 here:

# sep/ 2/2020  3: 9:38 by RouterOS 7.1.3
# software id = ZFR6-6BCM
#
            script: #| Welcome to RouterOS!
                    #|    1) Set a strong router password in the System > Users menu
                    #|    2) Upgrade the software in the System > Packages menu
                    #|    3) Enable firewall on untrusted networks
                    #|    4) Set your country name to observe wireless regulations
                    #| -----------------------------------------------------------------------------
                    #| WISP Bridge:
                    #|  * wireless and LAN interfaces are bridged;
                    #| wlan1 Configuration:
                    #|     mode:                ap-bridge;
                    #|     band:                2ghz-b/g/n;
                    #|     tx-chains:           0;1;
                    #|     rx-chains:           0;1;
                    #|     installation:        outdoor;
                    #|     wpa2:      no;
                    #|     ht-extension:        20/40mhz-XX;
                    #| LAN Configuration:
                    #|     DHCP Client: enabled on bridge (LAN port);
                    
                    :global ssid;
                    :global defconfMode;
                    :log info "Starting defconf script";
                    #-------------------------------------------------------------------------------
                    # Apply configuration.
                    # these commands are executed after installation or configuration reset
                    #-------------------------------------------------------------------------------
                    :if ($action = "apply") do={
                      # wait for interfaces
                      :local count 0;
                      :while ([/interface ethernet find] = "") do={
                        :if ($count = 30) do={
                          :log warning "DefConf: Unable to find ethernet interfaces";
                          /quit;
                        }
                        :delay 1s; :set count ($count +1); 
                      };
                      :local count 0;
                      :while ([/interface wireless print count-only] < 1) do={ 
                        :set count ($count +1);
                        :if ($count = 40) do={
                          :log warning "DefConf: Unable to find wireless interface(s)"; 
                          /ip address add address=192.168.88.1/24 interface=ether1 comment="defconf";
                          /quit
                        }
                        :delay 1s;
                      };
                      /interface wireless {
                    :local ifcId [/interface wireless find where default-name=wlan1]
                    :local currentName [/interface wireless get $ifcId name]
                        set $ifcId mode=ap-bridge band=2ghz-b/g/n disabled=no wireless-protocol=any \
                           distance=dynamic installation=outdoor
                        set $ifcId channel-width=20/40mhz-XX;
                        set $ifcId frequency=auto
                        :local wlanMac  [/interface wireless get $ifcId mac-address];
                        :set ssid "MikroTik-$[:pick $wlanMac 9 11]$[:pick $wlanMac 12 14]$[:pick $wlanMac 15 17]"
                        set $ifcId ssid=$ssid
                      }
                     /interface bridge
                       add name=bridge disabled=no auto-mac=yes protocol-mode=rstp comment=defconf;
                     :local bMACIsSet 0;
                     :foreach k in=[/interface find where !(slave=yes   || name~"bridge")] do={
                       :local tmpPortName [/interface get $k name];
                       :if ($bMACIsSet = 0) do={
                         :if ([/interface get $k type] = "ether") do={
                           /interface bridge set "bridge" auto-mac=no admin-mac=[/interface get $tmpPortName mac-address];
                           :set bMACIsSet 1;
                         }
                       }
                         :if (([/interface get $k type] != "ppp-out") && ([/interface get $k type] != "lte")) do={
                           /interface bridge port
                             add bridge=bridge interface=$tmpPortName comment=defconf;
                         }
                       }
                      /ip dhcp-client add interface=bridge disabled=no comment="defconf";
                    }
                    #-------------------------------------------------------------------------------
                    # Revert configuration.
                    # these commands are executed if user requests to remove default configuration
                    #-------------------------------------------------------------------------------
                    :if ($action = "revert") do={
                    /user set admin password=""
                     /system routerboard mode-button set enabled=no
                     /system routerboard mode-button set on-event=""
                     /system script remove [find comment~"defconf"]
                     /ip firewall filter remove [find comment~"defconf"]
                     /ipv6 firewall filter remove [find comment~"defconf"]
                     /ipv6 firewall address-list remove [find comment~"defconf"]
                     /ip firewall nat remove [find comment~"defconf"]
                     /interface list member remove [find comment~"defconf"]
                     /interface detect-internet set detect-interface-list=none
                     /interface detect-internet set lan-interface-list=none
                     /interface detect-internet set wan-interface-list=none
                     /interface detect-internet set internet-interface-list=none
                     /interface list remove [find comment~"defconf"]
                     /tool mac-server set allowed-interface-list=all
                     /tool mac-server mac-winbox set allowed-interface-list=all
                     /ip neighbor discovery-settings set discover-interface-list=!dynamic
                       :local o [/ip dhcp-server network find comment="defconf"]
                       :if ([:len $o] != 0) do={ /ip dhcp-server network remove $o }
                       :local o [/ip dhcp-server find name="defconf" !disabled]
                       :if ([:len $o] != 0) do={ /ip dhcp-server remove $o }
                       /ip pool {
                         :local o [find name="default-dhcp" ranges=192.168.88.10-192.168.88.254]
                         :if ([:len $o] != 0) do={ remove $o }
                       }
                       :local o [/ip dhcp-client find comment="defconf"]
                       :if ([:len $o] != 0) do={ /ip dhcp-client remove $o }
                     /ip dns {
                       set allow-remote-requests=no
                       :local o [static find comment="defconf"]
                       :if ([:len $o] != 0) do={ static remove $o }
                     }
                     /ip address {
                       :local o [find comment="defconf"]
                       :if ([:len $o] != 0) do={ remove $o }
                     }
                     :foreach iface in=[/interface ethernet find] do={
                       /interface ethernet set $iface name=[get $iface default-name]
                     }
                     /interface bridge port remove [find comment="defconf"]
                     /interface bridge remove [find comment="defconf"]
                     /interface bonding remove [find comment="defconf"]
                     /interface wireless cap set enabled=no interfaces="" caps-man-addresses=""
                     /interface wireless reset-configuration wlan1
                     /interface wireless security-profile set default mode=none\
                          authentication-types="" disable-pmkid=no wpa2-pre-shared-key="" comment="" 
                      /caps-man manager set enabled=no
                      /caps-man manager interface remove [find comment="defconf"]
                      /caps-man manager interface set [ find default=yes ] forbid=no
                      /caps-man provisioning remove [find comment="defconf"]
                      /caps-man configuration remove [find comment="defconf"]
                    }
                    :log info Defconf_script_finished;
                    :set defconfMode;
                    :set ssid;
                    
  caps-mode-script: #-------------------------------------------------------------------------------
                    # Note: script will not execute at all (will throw a syntax error) if
                    #       dhcp or wireless-fp packages are not installed
                    #-------------------------------------------------------------------------------
                    
                    #| CAP configuration
                    #|
                    #|   Wireless interfaces are set to be managed by CAPsMAN.
                    #|   All ethernet interfaces and CAPsMAN managed interfaces are bridged.
                    #|   DHCP client is set on bridge interface.
                    
                    # bridge port name
                    :global brName  "bridgeLocal";
                    :global logPref "defconf:";
                    
                    
                    :global action;
                    
                    :log info $action
                    
                    :if ($action = "apply") do={
                    
                      # wait for ethernet interfaces
                      :local count 0;
                      :while ([/interface ethernet find] = "") do={
                        :if ($count = 30) do={
                          :log warning "DefConf: Unable to find ethernet interfaces";
                          /quit;
                        }
                        :delay 1s; :set count ($count + 1);
                      }
                    
                      :local macSet 0;
                      :local tmpMac "";
                    
                      :foreach k in=[/interface ethernet find] do={
                        # first ethernet is found; add bridge and set mac address of the ethernet port
                        :if ($macSet = 0) do={
                          :set tmpMac [/interface ethernet get $k mac-address];
                          /interface bridge add name=$brName auto-mac=no admin-mac=$tmpMac comment="defconf";
                          :set macSet 1;
                        }
                        # add bridge ports
                        /interface bridge port add bridge=$brName interface=$k comment="defconf"
                      }
                    
                      # try to add dhcp client on bridge interface (may fail if already exist)
                      :do {
                        /ip dhcp-client add interface=$brName disabled=no comment="defconf"
                      } on-error={ :log warning "$logPref unable to add dhcp client";}
                    
                    
                      # try to configure caps (may fail if for example specified interfaces are missing)
                      :local interfacesList "";
                      :local bFirst 1;
                    
                      # wait for wireless interfaces
                      :while ([/interface wireless find] = "") do={
                        :if ($count = 30) do={
                          :log warning "DefConf: Unable to find wireless interfaces";
                          /quit;
                        }
                        :delay 1s; :set count ($count + 1);
                      }
                    
                      # delay just to make sure that all wireless interfaces are loaded
                      :delay 5s;
                      :foreach i in=[/interface wireless find] do={
                        if ($bFirst = 1) do={
                          :set interfacesList [/interface wireless get $i name];
                          :set bFirst 0;
                        } else={
                          :set interfacesList "$interfacesList,$[/interface wireless get $i name]";
                        }
                      }
                      :do {
                        /interface wireless cap
                          set enabled=yes interfaces=$interfacesList discovery-interfaces=$brName bridge=$brName
                      } on-error={ :log warning "$logPref unable to configure caps";}
                    
                    }
                    
                    :if ($action = "revert") do={
                      :do {
                        /interface wireless cap
                          set enabled=no interfaces="" discovery-interfaces="" bridge=none
                      } on-error={ :log warning "$logPref unable to unset caps";}
                    
                      :local o [/ip dhcp-client find comment="defconf"]
                      :if ([:len $o] != 0) do={ /ip dhcp-client remove $o }
                    
                      /interface bridge port remove [find comment="defconf"]
                      /interface bridge remove [find comment="defconf"]
                    
                    }
     custom-script:

To clarify how to use the “Home AP” QuickSet profile to get you a LAN (e.g. “a 192.168.88.1 address”), and have ether1 be a LAN port, you’d fill in QuickSet something like this:




After that, ether1 is a “WAN” port, which is likely not what you want. To change the port to a LAN port (e.g. it give out a 192.168.88.x address), you’d just need to disable the DHCP client, add the port the bridge, and remove ether1 from the WAN list.

/ip/dhcp-client/disable [find interface~"bridge"]
/interface/bridge/port/enable [find interface=ether1]
/interface/list/member/remove [/interface/list/member/find list=WAN interface=ether1]

Your next task would be making sure LTE works, by pinging from router terminal etc. Assuming LTE was connect/had IP address, the last thing be the “lte1” (or “lte2”, or potentially “ppp-out1”…) interface are in the WAN interface list (your LTE interface names may be different, but typically):
/interface/list/member/add list=WAN interface=lte1
/interface/list/member/add list=WAN interface=lte2

Unfortunately, what I copied and pasted is all that is there after a rest and after netinstall… it’s weird. I built it up and manually added IP and DHCP values etc. Got internet working and did a full back up. Decided to do a fresh netinstall and restore the backup but again no IP or access unless I used winbox mac address. LTE not in the drop down list. Eventually after adding it all back manually the QuickSet now shows LTE options. I just wanted to see if this is normal LtAP behavior or if mine is goofy right out of the box.

Can I just add the script you posted to mine?
Each time I upgrade firmware or reset this unit I’m stuck with no 192.168.88.1 and that weirds me out.
I saw your follow up reply to help me configure it further but as I finally got a working system now and backed it up… my confidence in the device is still none because I did a fresh netinstall and restored the backup only to have dhcp, lte and main IP all absent.

That’s why I’ve suggested you to dump the default configuration script and see whether it adds the IP address etc. Since you can add all that manually, the hardware is not broken. Hence the most likely thing is a suboptimal contents of the default configuration script in the 7.1.3 package for the mmips architecture.

Where can I get a good known working copy of 7.1.3 then? I obtained mine from MikrTik’s website.

I don’t say it broke during download. If it indeed doesn’t set the items you’re missing, it has been broken in development.

It more the default config is different than the LHRG etc, thus why the OP is having issues since the default isn’t just working… The LtAP default uses a bridge with a DHCP client, both ether1 and wlan1 are part of the bridge, with no /ip/address (e.g. default is DHCP from ether1). That seem the V7 defaults in both 7.1.3 and rc7.2rc4.

While the LHRG uses the “LTE” default, which is a LAN on ether1.

So what @sindy is trying to say is you need to add your LAN, which starts with IP. Either by manual adding an IP addresss, DHCP server, etc., or using QuickSet with the added config after I suggest. Re-running netinstall isn’t going to help, the default is getting applied as-designed (but not desired, for your application).

I would suggest you to reset to defaults, then upgrade to 7.1.3 and test again…

Look into the default configuration script of 7.1.3 as posted by @Amm0 in this post. It sets exactly what OP is getting. No point in spawning it over and over again, the result will be the same.

It is a question for Mikrotik devs why they did it this way for LtAP. Normally, the dhcp client attachment to a bridge is a CAP default configuration, while the standard default configuration is 192.168.88.1/24 and dhcp server attached to the bridge.

Mikrotik help page on “Default Configuration” has a clue on what’s going on here. See https://help.mikrotik.com/docs/display/ROS/Default+configurations

If the LtAP comes without any Mikrotik LTE modems install, comes to the “WISP Bridge” configuration. While LtAP that come with Mikrotik LTE modems (e.g. “4G kit”, etc), default to “LTE CPE AP Router”.

But all the LtAP should still at least have the same potential alternative defaults in QuickSet IMO. But regardless, if you apply the “Home AP” configuration from the screensoot, then paste in the 5 config lines, it should works the same as the “LTE CPE AP Router” config “flavor” that be on LHGG/SXT/wAP/etc.

Obviously if you reset to defaults or do netinstall, any QuickSet or other configuration will be lost & you’ll be back the “WISP Bridge” mode.

How can I grab the 7.1.3 output of the /system/default-config from my LtAP?

All I see is:

/interface bridge
add admin-mac=08:55:31:C1:xxxxx auto-mac=no comment=defconf name=bridge
/interface lte
set [ find ] allow-roaming=yes band=“” name=lte1 nr-band=“”
/interface wireless
set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode
ampdu-priorities=0,1,2,3 antenna-mode=rxa-txb band=2ghz-onlyn country=
“united states3” disabled=no distance=indoors frame-lifetime=1 frequency=
auto mode=ap-bridge ssid=MikroTik wireless-protocol=802.11 wmm-support=
enabled
/interface list
add name=WAN
add name=LAN
/interface lte apn
set [ find default=yes ] apn=fast.t-mobile.com
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.2.20-192.168.2.200
/ip dhcp-server
add address-pool=dhcp interface=bridge name=dhcp1
/port
set 0 name=serial0
set 2 name=usb3
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=all
/interface list member
add interface=wlan1 list=LAN
add interface=lte1 list=WAN
add interface=bridge list=LAN
/interface wireless cap
set bridge=bridge interfaces=wlan1
/ip address
add address=192.168.2.1/24 interface=bridge network=192.168.2.0
/ip dhcp-client
add
/ip dhcp-server network
add address=0.0.0.0/24 gateway=0.0.0.0 netmask=24
add address=192.168.2.0/24 gateway=192.168.2.1 netmask=24
/ip firewall filter
add action=accept chain=input protocol=icmp
add action=accept chain=input comment=“Allow Remote Winbox” in-interface=
RemoteWinboxVPN-BITHAULERS
add action=accept chain=input connection-state=established
add action=accept chain=input connection-state=related
add action=drop chain=input in-interface-list=!LAN
/ip firewall mangle
add action=change-ttl chain=postrouting new-ttl=set:65 passthrough=yes
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
add action=masquerade chain=srcnat out-interface-list=WAN
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=bridge type=internal
add interface=lte1 type=external
/system clock
set time-zone-name=America/Chicago
/system package update
set channel=testing
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN

@sindy i installed a LTAP LTE6 this week.
I noticed nothing strange compared to other MikroTIK LTE devices i’ ve used ( WAP, WAP LTE6, LHGG,) as far as the configuration is concerned .

Also since the OP does not need any complex configuration, i would suggest not using quickset.
Just let the defaults and if you need any changes do them manually.

Also i see detect-internet enabled, why?
Also the config shows some duplicates , maybe because of running quickset multiple times ? I don’t know, i never use it, but does not look normal..
All those suggest a reset and fresh start for me…

The way I’ve suggested above. But you don’t need to do that - @Amm0 has already posted the result a few posts earlier.

Simply put: your LtAP behaves exactly as intended and documented by Mikrotik, it ain’t broken.

As @Amm0 wrote above, there is a difference between the default configuration script of an LtAP “LTE(6) kit” (where the LTE modem is pre-installed by Mikrotik) and the default configuration script of a bare LtAP shipped without any LTE modem.