I am new to MikroTik. I have a MikroTik hap ac lite connected to my Zyxel router as per the attached schematic. I need to configure MikroTik so that:
How do I assign the different subnet to Ethernet port 2, 5 and wireless 1 on MikroTik?
I will appreciate the community’s help.
Many thanks.
MikroTik.pdf (112 KB)
Mikrotik-Router Config :
Step 3: Add Addresses to Mikrotik-Interface (ether 2, 5 and Wlan)
For Exemple :
/ip address add interface=ether5 address=192.168.90.1/24
Of course you schould also Secure your router and apply the necessary mesures like Passwords, Firewall etc..
You will need to Add “routes” to your ZYXEL router to anable the communication between all networks.
For exemple :
192.168.88.80/0 -->> 192.168.1.218
192.168.90.80/0 -->> 192.168.1.218
192.168.92.80/0 -->> 192.168.1.218
Thanks Conny.
I have followed the steps you advised. However, I am not able to connect to the internet on LAN or WAN. I have attached the screenshots of the steps followed. Can you please advise, what can I do to access the internet from each LAN and WAN port?
Kind regards.
It is a Routing matter…
You just need the correct routes on the Zyxel for each network you want to reach on the MikroTIK side …
Screenshots are not really helpfull to see your configuration, it is better to export your config with /export hide-sensitive …
Or if possible remove the zyxel router from the mix, if possible. (What does the zyxel provide that the MT unit will not?)
Thanks for the Foto’s but next time just export the config =)
I think i found a Problem:
If your want to use your Mikrotik-Router as a DNS-Server, dont forget to “Activate” it.
/ip dns set allow-remote-requests=yes
I followed the instructions of /ip dns set allow-remote-requests=yes
Still, I am not able to connect to the internet nor able ping other devices connected on other ethernet ports of MikroTik. Below is my code.
Thanks.
[admin@MikroTik] > export
# sep/05/2021 10:26:48 by RouterOS 6.48.4
# software id = TIZB-FW7H
#
# model = RB952Ui-5ac2nD
# serial number = xxxxxxxxxxx
/interface wireless
set [ find default-name=wlan1 ] ssid=MikroTik
set [ find default-name=wlan2 ] ssid=MikroTik
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip dhcp-server
add disabled=no interface=ether2 name=server2
add disabled=no interface=ether3 name=server3
add disabled=no interface=ether4 name=server4
add disabled=no interface=ether5 name=server5
add disabled=no interface=wlan2 name=server7
add disabled=no interface=wlan1 name=server6
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip address
add address=10.0.0.1/24 interface=ether5 network=10.0.0.0
add address=192.168.1.3/24 interface=ether3 network=192.168.1.0
add address=192.168.1.2/24 interface=ether2 network=192.168.1.0
add address=192.168.1.4/24 interface=ether4 network=192.168.1.0
add address=10.0.1.1/24 interface=wlan1 network=10.0.1.0
add address=10.0.1.2/24 interface=wlan2 network=10.0.1.0
/ip dhcp-client
add disabled=no interface=ether1
/ip dns
set allow-remote-requests=yes
/ip firewall nat
add action=masquerade chain=srcnat
/system clock
set time-zone-name=Europe/London
[admin@MikroTik] >
Your main Problem is under /ip address
Error 1 :
add address=192.168.1.3/24 interface=ether3 network=192.168.1.0
add address=192.168.1.2/24 interface=ether2 network=192.168.1.0
add address=192.168.1.4/24 interface=ether4 network=192.168.1.0
If you want the 192.168.1.0-Network to span over all 3 Ports, you will have to create a Bridge
Error 2:
add address=10.0.1.1/24 interface=wlan1 network=10.0.1.0
add address=10.0.1.2/24 interface=wlan2 network=10.0.1.0
Same here, you will have to create a bridge and assign the 10.0.1.1/24 IP to it.
/interface bridge
add name=bridge1 comment=LAN
add name=bridge2 comment=WLAN
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge2 interface=wlan1
add bridge=bridge2 interface=wlan2
/ip dhcp-client
add disabled=no interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/ip address
add address=10.0.0.1/24 interface=ether5 network=10.0.0.0
add address=192.168.1.1/24 interface=bridge1 network=192.168.1.0
add address=10.0.1.1/24 interface=bridge2 network=10.0.1.0
/ip pool
add name=dhcp_pool_LAN ranges=192.168.1.2-192.168.1.99
add name=dhcp_pool_WLAN ranges=10.0.1.2-10.0.1.99
/ip dhcp-server
add address-pool=dhcp_pool_LAN disabled=no interface=bridge1 name=dhcp1
add address-pool=dhcp_pool_WLAN disabled=no interface=bridge2 name=dhcp2
/ip dhcp-server network
add address=10.1.10.0/24 dns-server=10.0.1.1 gateway=10.0.1.1
add address=192.168.1.0/24 dns-server=192.168.1.1 gateway=192.168.1.1
Thanks for your support. I have copied the code as you advised. Still, I am not able to connect to the internet nor any wireless network available. Below is the code from the router for your reference.
[admin@MikroTik] > export
# sep/06/2021 12:19:08 by RouterOS 6.48.4
# software id = TIZB-FW7H
#
# model = RB952Ui-5ac2nD
# serial number = XXXXXXXXXXXX
/interface bridge
add comment=LAN name=bridge1
add comment=WLAN name=bridge2
/interface wireless
set [ find default-name=wlan1 ] disabled=no ssid=MikroTik
set [ find default-name=wlan2 ] disabled=no ssid=MikroTik
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool_LAN ranges=192.168.1.2-192.168.1.99
add name=dhcp_pool_WLAN ranges=10.0.1.2-10.0.1.99
/ip dhcp-server
add address-pool=dhcp_pool_LAN disabled=no interface=bridge1 name=dhcp1
add address-pool=dhcp_pool_WLAN disabled=no interface=bridge2 name=dhcp2
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge2 interface=wlan1
add bridge=bridge2 interface=wlan2
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip address
add address=10.0.0.1/24 interface=ether5 network=10.0.0.0
add address=192.168.1.1/24 interface=bridge1 network=192.168.1.0
add address=10.0.1.1/24 interface=bridge2 network=10.0.1.0
/ip dhcp-client
add disabled=no interface=ether1
/ip dhcp-server network
add address=10.1.10.0/24 dns-server=10.0.1.1 gateway=10.0.1.1
add address=192.168.1.0/24 dns-server=192.168.1.1 gateway=192.168.1.1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/system clock
set time-zone-name=Europe/London
[admin@MikroTik] >
The configuration doesn’t match the PDF in the original post - routing cannot work if you have the same subnet (192.168.1.0/24) for both the LAN on bridge1 and WAN DHCP address from the Zyxel.
The wireless is not working as it has not been configured - default is station, you need to set the mode to make it an AP, plus country, SSID, security, etc.
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country="united kingdom" \
disabled=no distance=indoors installation=indoor mode=ap-bridge \
ssid="MY SSID" wireless-protocol=802.11 wps-mode=disabled
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40mhz-Ce \
country="united kingdom" disabled=no distance=indoors installation=\
indoor mode=ap-bridge ssid="MY SSID" wireless-protocol=802.11 wps-mode=\
disabled
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=\
dynamic-keys supplicant-identity=MikroTik wpa2-pre-shared-key="MY KEY"