Manual for Connecting a Omnitik "U-5HnD" with a "SXT 5HnD"

RouterOS Beginner Basics
1

I am looking for a step-by-step how to, to connect a OmniTIK 5-HnD with a (one for the beginning) SXT 5HnD.
1 Year ago i connected 2 SXT 5HnD together via Bridge-Mode as PtP.

But i can’t remember anything!

Because the connection of the 2 SXT’s are very good i bought a omniTIK and 2 more SXT’s to try to connect another 2 points but this time with the omniTIK.
Unfortunately i can’t find a How to for the Configuration requirements of the omniTIK and how to connect it with a SXT.

If you can help me, by sending a manual or a link or in other way, i will be very glad!!!

many thanx in advance!
(sorry about my terrible english)

2

I am not sure I have seen anything for this setup. I am sure someone has done something but I couldn’t find it either. Anyway, it should really be almost the same as your last setup but instead of using bridge on the omnitik use ap-bridge and for the SXTs use station-bridge.

Here is a simple page on how to setup an AP.
http://wiki.mikrotik.com/wiki/Making_a_simple_wireless_AP

3

Cbrown gave you a good link. If you have any questions after reading it, let us know.

Basically the units come preconfigured - SXTs will by default connect to SSID “MikroTik” and the OmniTIKs are configured as “ap-bridge” with SSID “MikroTik”, so when you turn them all on, they should connect automatically. The only things left to do, would be to set up WPA encryption keys, and IP addresses if you need anything other than the defaults (defaults have DHCP client and server)

4

Thanx for the reply!

at the moment i am with the following configuration on the Devices:

a. OmniTIK U-5HnD
Wireless–> Interfaces → Interface
Mode: ap bridge
…

b. SXT 5HnD
Wireless–> Interfaces → Interface
Mode: station
…

The 1st Question is: is this right?
The 2nd Question is: is in the Mode Pull-down Menu i have options like “station bridge” is this option better (because of ap bridge…)?

5

This describes the wireless modes. What are you trying to do with your wireless?

http://wiki.mikrotik.com/wiki/Manual:Wireless_Station_Modes

6

i think “station” will be OK for my SXT.

But i have another issue.

I can’t acces to my Omnitik using Ethernet-1 only.
How can i do this? Do i need another Configuration?

7

You can or you can’t? Check the default firewall in /ip firewall filter and also check /ip service

8

I can acces to the Omnitik only via Ethernet port 2 ( maybe also 3 and 4..) but i can’t access it from the PoE-Ethernet-Port 1.
i checked “ip firewall filter Rules” and “ip service list” but i can’t see something that is understandable for me. Can i send a picture?

I need to have access from the PoE-Ethernet-Port because i want to put the OmniTIK to the Roof of the building… (one ethernrt-cable i mean).

9

Post /ip firewall export and /ip service print

10

A.
[admin@MikroTik] > /ip firewall export

jan/02/1970 00:04:13 by RouterOS 5.4

software id = JUHQ-1KHI

/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s
tcp-close-wait-timeout=10s tcp-established-timeout=1d
tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s
tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no
tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall filter
add action=accept chain=input comment="default configuration" disabled=no
in-interface=ether1-gateway protocol=icmp
add action=accept chain=input comment="default configuration"
connection-state=established disabled=no in-interface=ether1-gateway
add action=accept chain=input comment="default configuration"
connection-state=related disabled=no in-interface=ether1-gateway
add action=drop chain=input comment="default configuration" disabled=no
in-interface=ether1-gateway
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" disabled=
no out-interface=ether1-gateway
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no

B.

[admin@MikroTik] > /ip service print
Flags: X - disabled, I - invalid

NAME PORT ADDRESS CERTIFICATE

0 telnet 23
1 ftp 21
2 www 80
3 ssh 22
4 X www-ssl 443 none
5 X api 8728
6 winbox 8291

11

This will remove your firewall and your problem. Now be sure to create your own firewall to protect your router.

/ip firewall filter remove [/ip firewall filter find]

http://wiki.mikrotik.com/wiki/Securing_your_router
http://wiki.mikrotik.com/wiki/Securing_New_RouterOs_Router

12

You are also running version 5.4. There have been many wireless upgrades since then you should upgrade.

13

Isn’t there a way to just remove my problem without removing my firewall???

Isn’t there a way to just have access from the PoE-Ethernet-Port?

14

That is what the firewall is blocking with this rule, everything going to the router via ether1.

add action=drop chain=input comment="default configuration" disabled=no \
in-interface=ether1-gateway

The other rules allow ping, established, and related connections. You could always add an accept rule for 8291(winbox). Look at the links I sent you. This one especially. This is the one you should try to implement.

http://wiki.mikrotik.com/wiki/Securing_your_router

15

i solve it in another way… but i don’t know really how…

i just followed this how to just leaving on theOmnitik Mode: Ap-bridge.

But i can only access it via the Browser not via WinBox!?!

16

Actually i changed it to “bridge”, exactly like the link above say’s!

17

I have following Question:

Do i need for connecting 2 SXT’s to the OmniTIK 2 wlan entries in the Wireless menu? or is one enough for booth SXT’s? even if there are in bridge mode?

thanx in advance for response!

[ Now i have move the one SXT in the further away building approx. 2390 meters distance. I have a connection but under 1Mbps meaning very slow!]

18

Are you asking if another wireless interface should appear? No, you can see connected clients under the registration tab.