Mikrotik in station mode cannot be pinged

RouterOS Wireless Networking
1

Hello all,

After 2 days of trying, reading, digging and scratching my head i still have a strange problem.

I want to setup a MT (RB751U) at station mode, connected to upper floor AP (some other brand), to do some file excanging with some PC’s there.
My wlan interface gets Ip, get multicast traffic from various devices on the Wifi network, but i cannot ping it from the Wifi.
The MT can ping/access all devices on the Wifi network.

Have you came across to anything like this?


Here is my config:

add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-eC \
    disabled=no frequency=2432 ssid="Somewifi"
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
    group-ciphers=tkip,aes-ccm mode=dynamic-keys supplicant-identity=MikroTik \
    unicast-ciphers=tkip,aes-ccm
/interface bridge port
add bridge=bridge1 interface=ether2
/ip dhcp-client
add disabled=no interface=bridge1
add disabled=no interface=wlan1
2

Do you mean that:

  • pinging the mikrotik AP from another device connected eg. over ethernet is OK
  • pinging the mikrotik AP from a device connected to the WiFi which is connected to the affected AP is FAILING
    ?

If so…
The problem will most likely be with the MAC address assigned to the LAN bridge on the AP. Even the documentation say that it’s fine to set the MAC to be the same as eg. ether1 when ether1 is a member of the bridge. In reality if you do this then you gonna have this problem so to solve it simply give the bridge a unique MAC address.

3

Is this config complete ?

I expected the WLAN1 to be a port on the bridge (to at least couple the wifi to the ethernet). Otherwise where does the bridge get its IP address from (DHCP client).

Any other firewall rules or so ?

Your AP may have “wifi client isolation” enabled.

4

Good thought but either way the wlan1 should be pinged… In fact i will make NAT from bridge to wlan1 and the AP network

5

I thought of that but the wlan1 is outside any bridge and it has it’s own MAC… but managed to do it by regular pinging the AP and maintain some ARP table at it… very strange.
I read here that the problem may be the tkip cipher and indeed when I changed it to aes i managed to ping it, but for a while after it gets connected.
After some minutes, the ARP tables get cleared probably and i need to ping the AP to get ping again.
The AP is a cheap one so…