map lite difficulties

Hello. I’m more than a little lost right now.

Here’s the situation. We’re trying to use a mAP lite as a bridge. We want to be able to access it from it’s physical LAN even after it’s bridged. It will be be physically connected to another router which is acting as a switch and an access point (that one is already set up). However, there’s a second problem that we’ve been unable to solve.

We can only access the map lite wirelessly, and it doesn’t provide internet when set up as an access point and physically connected to a switch. It will also randomly crash when we apply certain settings, and not allow us to access it again unless we perform a factory reset. We’ve also tried to fix things by exporting a config file from a working router (a map 2nD) and importing it on the lite. So far, nothing has worked. We’d really appreciate any help with either part of this.

Thank you!

Config printout from the map lite:

# jan/02/1970 00:38:39 by RouterOS 6.42.6
# software id = IGQY-Q6KP
#
# model = RouterBOARD mAP L-2nD
# serial number = 84900756B09D
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce disabled=no distance=indoors \
    frequency=auto mode=ap-bridge ssid=MikroTik-F7AB13 wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
add exclude=dynamic name=discover
add name=mactel
add name=mac-winbox
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=wlan1 name=defconf
/ip neighbor discovery-settings
set discover-interface-list=discover
/interface list member
add comment=defconf interface=wlan1 list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=wlan1 list=discover
add interface=wlan1 list=mactel
add interface=wlan1 list=mac-winbox
/ip address
add address=192.168.88.1/24 comment=defconf interface=wlan1 network=192.168.88.0
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf:  drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/system routerboard settings
set silent-boot=no
/tool mac-server
set allowed-interface-list=mactel
/tool mac-server mac-winbox
set allowed-interface-list=mac-winbox

Correct me if I’m wrong, but you want to use the mAP lite as a bridge in your network? According to your config you’re now using a default configuration and access from the wired network is blocked due to the firewall rules that are in the mAP right now.

Please follow the next steps:

What you should do:

  • Reset the MikroTik-devices, with no default configuration
  • Access the MikroTik using Winbox and Mac-address
  • Create a new bridge, containing all interfaces (ethernet and wireless)
  • Depending on your need, either configure a static IP-adress on the bridge interface or setup a DHCP-client on the bridge interface
  • Create the wireless networks on the wireless interfaces and a security profile
  • Probably: secure the router with a strong password :wink:.

A lot of useful information on how to do this can be found on the wiki of MikroTik: https://wiki.mikrotik.com.