I have a small home network with mikrotik hex router and one UAP-AC-LR. Router, AP and all wired devices are located on 192.168.88.xxx subnet and all wireless devices are located on 172.16.10.xxx subnet, the one AP broadcasts itself.
The problem is that I can’t access AP from 172.16.10.xxx subnet, neither with controller (AP listed as disabled) nor with SSH (connection times out). The AP IP is set as static for 192.168.88.2.
If I connect to wired subnet I can SSH into AP fine. Also accessing router on the same subnet as AP (192.168.88.1) works via SSH from both subnets.
Can anyone tell why I can’t access AP from the network it broadcasts? Could there be a problem with firewall? I’ve used the “Quick Set” options for the firewall.
Sorry for the long reply.
Is this the config?
[admin@MikroTik] > /export
# jun/11/2016 00:31:45 by RouterOS 6.35.2
# software id = SRGA-0W9V
#
/interface ethernet
set [ find default-name=ether1 ] comment=WAN
set [ find default-name=ether2 ] comment=UniFi name=ether2-master
set [ find default-name=ether3 ] comment="Artem PC" master-port=ether2-master
set [ find default-name=ether4 ] master-port=ether2-master
set [ find default-name=ether5 ] master-port=ether2-master
/ip neighbor discovery
set ether1 comment=WAN discover=no
set ether2-master comment=UniFi
set ether3 comment="Artem PC"
/interface vlan
add interface=ether2-master name="VLAN WiFi" vlan-id=30
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
add name="Pool DHCP WiFi" ranges=172.16.10.2-172.16.10.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=ether2-master lease-time=3h name=\
defconf
add address-pool="Pool DHCP WiFi" disabled=no interface="VLAN WiFi" lease-time=\
3h name="DHCP Server WiFi"
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether2-master network=\
192.168.88.0
add address=172.16.10.1/24 interface="VLAN WiFi" network=172.16.10.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=172.16.10.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=172.16.10.1
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
add address=172.16.10.2 name=unifi
/ip firewall filter
add chain=input comment="defconf: accept ICMP" protocol=icmp
add chain=input comment="defconf: accept establieshed,related" \
connection-state=established,related
add chain=forward comment="defconf: accept established,related" \
connection-state=established,related
add action=drop chain=input comment="defconf: drop all from WAN" in-interface=\
ether1
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=\
ether1
add action=dst-nat chain=dstnat dst-port=7777 in-interface=ether1 protocol=tcp \
to-addresses=172.16.10.2 to-ports=7777
add action=dst-nat chain=dstnat dst-port=14427 in-interface=ether1 protocol=tcp \
to-addresses=172.16.10.2 to-ports=14427
add action=dst-nat chain=dstnat dst-port=14427 in-interface=ether1 protocol=udp \
to-addresses=172.16.10.2 to-ports=14427
add action=dst-nat chain=dstnat disabled=yes dst-port=80 in-interface=ether1 \
protocol=tcp to-addresses=192.168.88.254 to-ports=80
/ip upnp
set enabled=yes
/system clock
set time-zone-name=Europe/London
/system routerboard settings
set cpu-frequency=720MHz protected-routerboot=disabled
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master
I’ve tried DHCP option 43, it didn’t seem to help either.
Guys any suggestions about this?