I’m having a lot of fun trying to figure out why i cant see the internet on my LtAP LTE6 kit unit after i have setup vlan passthrough.
I know i have not done something right i just need pointing in the right direction.
My Problem: I have been using the unit as default for mouths, getting great speeds and very happy. then I started to think i was time to learn the system/unit, i figured out i could vlan the lte modem using a passthrough to my main router and then have the unit on a static ip address. all went well very happy. the problem now I cant see the internet on the unit, it can see all my network but no the outside world, i cant do updates etc.
my setup is this
lte modem passthrough vlan 3 on eth1 ( all working )
eth1 no vlan static ip address ( all working )
i feel this is where my problem comes from and will be fixed,. I felt the bridge interface in as default.
It’s because that feature give back IP and “Internet” to next device. This next device is your main router now and he can at other vlan or default vlanid1 give you internet again.
Like RB_LTE ----vlan 3 —> IP to WAN Main Router
Main Router at his LAN ----- no vlan —> RB_LTE via DHCP . This means you can do dhcp-client at your managemet link and receive internet.
I found that the static ip address i set using the winbox on quick setup. using LTE defaults. dose not use like dns ( or use dns settings not sure why will find out later ).
If i set a dhcp client up using the bridge interface ( which i found my router was trying to give this interface a address) it all starts working ( i can get updates and see the internet ).
the problem is i have now two interface with address e.g 192.168.1.4 /24 det my static on quick setup and dhcp on the briige interface 192.168.1.***/24
QuickSet is good only at first run device, all next configuration should be by WebFig/WinBox/ssh etc.
dose not use like dns ( or use dns settings not sure why will find out later ).
? You need DNS from ISP if you not use passthrough. And opposite, with passthrough DNS from ISP is not for your unit but for next main router. You will stuck in offline.
If i set a dhcp client up using the bridge interface ( which i found my router was trying to give this interface a address) it all starts working ( i can get updates and see the internet ).
When? With or without passthrough.
passthrough on: LTE unit not should have DHCP Server, you can do a DHCP Client at additional ethernet port or vlan to bring internet around back to LTE unit.
passthrough off: lte1 give internet to LTE unit. Only DHCP Server is used for giving IP to clients.
the problem is i have now two interface with address e.g 192.168.1.4 /24 det my static on quick setup and dhcp on the briige interface 192.168.1.***/24
Sorry about the delay a family member got covid, we are all ok everyone is good and safe.
Anyway back to the problem I will export the config using the command given.
i please find my config hop this help. explain things
Adam
Config
sep/14/2021 22:48:52 by RouterOS 6.48.4
software id = PYY0-J8DC
model = RBLtAP-2HnD
serial number = B7270B37EDB8
/interface bridge
add admin-mac=C4:AD:34:70:B4:76 auto-mac=no comment=defconf name=bridge
/interface lte
set [ find ] allow-roaming=no band=3 name=lte1 network-mode=3g,lte
/interface vlan
add interface=ether1 name=vlan3LTE vlan-id=3
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface lte apn
set [ find default=yes ] apn=three.co.uk passthrough-interface=vlan3LTE
passthrough-mac=auto
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" mode=dynamic-keys
name=Staff supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX
country="united kingdom" distance=indoors frequency=auto installation=
outdoor mode=ap-bridge security-profile=Staff ssid=WC&CPWiFi-Staff
wireless-protocol=802.11 wps-mode=disabled
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp interface=bridge name=defconf
/port
set 1 baud-rate=115200 name=gps
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=all
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=lte1 list=WAN
/ip address
add address=192.168.1.4/24 comment=defconf interface=bridge network=
192.168.1.0
/ip dhcp-client
add disabled=no
/ip dns
set allow-remote-requests=yes servers=192.168.1.1,1.1.1.1
/ip dns static
add address=192.168.1.4 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=
"defconf: accept established,related,untracked" connection-state=
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=
"defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN"
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy"
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy"
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack"
connection-state=established,related
add action=accept chain=forward comment=
"defconf: accept established,related, untracked" connection-state=
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid"
connection-state=invalid
add action=drop chain=forward comment=
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat
connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade"
ipsec-policy=out,none out-interface-list=WAN
/ip upnp interfaces
add interface=bridge type=internal
add interface=lte1 type=external
/system clock
set time-zone-name=Europe/London
/system gps
set port=gps
/system leds
using RSRP, modem-signal-threshold ignored
set 0 interface=lte1 type=modem-signal
/system routerboard settings
set auto-upgrade=yes
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
As anticipated. You’ve got no /ip route configured on the LtAP, and you’ve got only a single /interface lte apn item defined, so the LtAP itself doesn’t get its own IP address and default route from the LTE modem (I’m not sure how your mobile operator would deal with this, it works with some operators but may not with others, and it may cause some billing issues).
So to reach internet, the LtAP needs to use the main router as its default gateway. So /ip route add gateway=192.168.1.1 (or what is the address of the main router in 192.168.1.0/24) should resolve the issue. The fact that the main router will in turn send the packet physically via VLAN3 on ether1 to the LTE modem is not important, the LtAP cannot take any shortcut except the one stated above (two APN profiles with different settings).
You’ve also got an issue in the configuration of the LtAP. ether1 is a member port of the bridge, so the /interface vlan should also be attached to the bridge rather than to ether1 directly. Or, if you don’t plan to use the wireless interface of the LtAP, you may instead move its own IP address (192.168.1.4) from the bridge to ether1 and then release ether1 from the bridge.
You may also want to disable the dhcp server attached to the bridge.