MikroTik RB2011 connected to MikroTik RB2011

paste this on both, and check what is no/off
/system/device-mode print

CSS610 switch and the cAp ac are "inside" the homelab network, or must be directly linked to edge?

edge.rsc (8.2 KB)
homelab.rsc (8.0 KB)

Open the edge.rsc and set the right VLAN number, pppoe username and password

For apply correctly the config, after the file copy on root, use on edge:

/system reset-configuration keep-users=yes skip-backup=no no-defaults=yes run-after-reset=edge.rsc

and obviously on homelab

/system reset-configuration keep-users=yes skip-backup=no no-defaults=yes run-after-reset=homelab.rsc

I dont see the point for two routers.
Nor why superior intellects above, have missed this LOL

Simply have one router with a bridge and two vlans.
One for the home network and one for the lab.
Perfectly safe, much easier.

CSS610 switch and the cAp ac are "inside" the homelab network, or must be directly linked to edge?

Yes, CSS610 and cAp ac are inside the homelab network.

Not really, if you're going to experiment, it's better not to piss off your wife...

Jaja, sounds like you are recounting past faux pas, when adjusting your network :stuck_out_tongue_winking_eye:

@anav

:wink:

/system/device-mode print

Results:

MikroTik #1 - Edge

[admin@RB2011-Edge] >  /system/device-mode print
                 mode: advanced     
     allowed-versions: 7.13+,6.49.8+
              flagged: no           
     flagging-enabled: yes          
            scheduler: yes          
                socks: yes          
                fetch: yes          
                 pptp: yes          
                 l2tp: yes          
       bandwidth-test: yes          
          traffic-gen: no           
              sniffer: yes          
                ipsec: yes          
                romon: yes          
                proxy: yes          
              hotspot: yes          
                  smb: yes          
                email: yes          
             zerotier: yes          
            container: no           
  install-any-version: no           
           partitions: no           
          routerboard: no           
        attempt-count: 0            
[admin@RB2011-Edge] > 

MikroTik #2 - HomeLab

[admin@RB2011-HOMELAB] >  /system/device-mode print
                 mode: advanced     
     allowed-versions: 7.13+,6.49.8+
              flagged: no           
     flagging-enabled: yes          
            scheduler: yes          
                socks: yes          
                fetch: yes          
                 pptp: yes          
                 l2tp: yes          
       bandwidth-test: yes          
          traffic-gen: no           
              sniffer: yes          
                ipsec: yes          
                romon: yes          
                proxy: yes          
              hotspot: yes          
                  smb: yes          
                email: yes          
             zerotier: yes          
            container: no           
  install-any-version: no           
           partitions: no           
          routerboard: no           
        attempt-count: 0            
[admin@RB2011-HOMELAB] > 

Thank you for creation this files.

I have a question to this file:

edge.rsc

Why to routes are added this destination addresses? ; )

/ip route
add blackhole distance=1 dst-address=10.0.0.0/8
add blackhole distance=1 dst-address=169.254.0.0/16
add blackhole distance=1 dst-address=172.16.0.0/12
add blackhole distance=1 dst-address=192.168.0.0/16
add blackhole distance=1 dst-address=224.0.0.0/4
add blackhole distance=1 dst-address=240.0.0.0/5
add blackhole distance=1 dst-address=248.0.0.0/6
add blackhole distance=1 dst-address=252.0.0.0/7
add blackhole distance=1 dst-address=254.0.0.0/8

Are all IPs not available on Internet, and if your internal network do not use that numbers, must be blackholed, not forwarded to your ISP.
The presence of any route for 192.168.1.0/24, for example, do not need the removal of the bigger 0.0/16

/system reset-configuration keep-users=yes skip-backup=no no-defaults=yes run-after-reset=edge.rsc

execution of this command probably broke during execution because MikroTik does not show any Wi-Fi network.

When I run the command: /import edge.rsc
I received the message:

[admin@MikroTik] > /import edge.rsc 
Script Error: expected end of command (line 18 column 5)

command: /ip dhcp-server add does not have the next parameter: add-dns-entries

I will try to update my ROS to the latest long-term stable version.

RouterOS 7.24.2 is expected... not older/any version...

For be precise, routeros and wireless package only.
Not any other packages or wifi* packages that are for other models

A weird situation happened,
when I update:

  • VLAN ID
  • PPPoE authorization
  • Wi-Fi SSID and password
  • Device Identity

in *.rsc file, after importing internet access works on the RB2011, but router clients don't.

but when I import the plain version of the edge.rsc file and update the listed fields on the device, internet access works on the RB2011 and clients.

In summary, the edge router works; I will check the ** homelab ** device next week.

Probably text editor used ruin the file.
Apply the right settings after the use of the .rsc solve this case.

Sure two devices are better than one......... Like two wives, or perhaps wife and girlfriend, you should really stick to learning how to do this on one device LOL.

Probably text editor used ruin the file.

I used the Kate editor on Fedora, but probably something went wrong, as you said.

Apply the right settings after the use of the .rsc solve this case.

Yes - I did it this way - it works and is doing its job ; )

Sure two devices are better than one - Like two wives or wife and girlfriend

In my opinion, the truth is old like the world - it depends,
for example: on what is needed or what is expected

you should [...] learn how to do this on one device

of course - I could have gone for a shortcut solution and used one device - but it is not my purpose,
I could have configured my network with the devices shown in the schema in the first post, but I will lost possibility the way to connect any wired devices.

@mateusz7pi

Try to prepare configurations directly on routers using Winbox and then export script and try to import it but it needs a little effort as that script is not exported in a way that all needed configuration's elements are exported in a proper order.

When you confirm that this script imports well, then comment it and use as a reference one.

It would be HI generated version, not AI one.

Exist also the RI[1] generated one... are my files, not from AI... you know!
:wink:


  1. R=Rex :face_savoring_food: ↩︎