Mikrotik Repeater No Internet

RouterOS Beginner Basics
1

Hello and thank you for the time you are investing in my problem,
I am very new to mikrotik routers. My problem is that I am using a mikrotik router as a repeater but I have no internet. I suspect the problem may come from DNS or DHCP but i am not able to diagnose it in mikrotik.

  1. Main Ruter is Tenda with IP. 192.168.0.1
  2. Mikrotik has IP 192.168.88.1
  3. I have successfully created the repeater in mikrotik and I can connect to the ap bridge (also I have done the authentication to the Tenda with new security profile and it is connected)
  4. I try to ping 192.168.0.1 though Winbox but I get response timeout
  5. below you can see /export result


    [admin@MikroTik] > /export

jan/02/1970 00:56:10 by RouterOS 6.43.1

software id = Y1FT-IENC

model = 951Ui-2HnD

serial number = 5581041B136C

/interface bridge
add admin-mac=4C:5E:0C:CC:BF:3D auto-mac=no fast-forward=no mtu=1500 name=bridge-local
/interface ethernet
set [ find default-name=ether1 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full name=
ether1-gateway
set [ find default-name=ether2 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full name=
ether2-master-local
set [ find default-name=ether3 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full name=
ether3-slave-local
set [ find default-name=ether4 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full name=
ether4-slave-local
set [ find default-name=ether5 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full name=
ether5-slave-local
/interface list
add exclude=dynamic name=discover
add name=mactel
add name=mac-winbox
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods=“” management-protection=allowed mode=dynamic-keys name=“AP tuneli”
supplicant-identity=“” wpa-pre-shared-key=tetuneli111 wpa2-pre-shared-key=tetuneli111
add authentication-types=wpa-psk,wpa2-psk eap-methods=“” management-protection=allowed mode=dynamic-keys name=shpia
supplicant-identity=“” wpa-pre-shared-key=arens1234 wpa2-pre-shared-key=arens1234
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce disabled=no frequency=2442 mode=
station-pseudobridge security-profile=“AP tuneli” ssid=“Diginet- TE TUNELI”
add disabled=no mac-address=4E:5E:0C:CC:BF:41 master-interface=wlan1 name=wlan3 security-profile=shpia ssid=wifi
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp authoritative=after-2sec-delay disabled=no interface=bridge-local name=default
/interface bridge port
add bridge=bridge-local interface=ether2-master-local
add bridge=bridge-local interface=wlan1
add bridge=bridge-local interface=ether3-slave-local
add bridge=bridge-local interface=ether4-slave-local
add bridge=bridge-local interface=ether5-slave-local
add bridge=bridge-local interface=wlan3
/ip neighbor discovery-settings
set discover-interface-list=discover
/interface list member
add interface=ether2-master-local list=discover
add interface=ether3-slave-local list=discover
add interface=ether4-slave-local list=discover
add interface=ether5-slave-local list=discover
add interface=wlan1 list=discover
add interface=bridge-local list=discover
add interface=ether2-master-local list=mactel
add interface=ether3-slave-local list=mactel
add interface=ether2-master-local list=mac-winbox
add interface=ether4-slave-local list=mactel
add interface=ether3-slave-local list=mac-winbox
add interface=ether5-slave-local list=mactel
add interface=ether4-slave-local list=mac-winbox
add interface=wlan1 list=mactel
add interface=ether5-slave-local list=mac-winbox
add interface=bridge-local list=mactel
add interface=wlan1 list=mac-winbox
add interface=bridge-local list=mac-winbox
/ip address
add address=192.168.88.1/24 comment=“default configuration” interface=ether2-master-local network=192.168.88.0
/ip dhcp-client
add comment=“default configuration” dhcp-options=hostname,clientid disabled=no interface=ether1-gateway
add dhcp-options=hostname,clientid disabled=no interface=bridge-local
/ip dhcp-server network
add address=192.168.88.0/24 comment=“default configuration” dns-server=192.168.88.1 gateway=192.168.88.1 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add action=accept chain=input comment=“default configuration” protocol=icmp
add action=accept chain=input comment=“default configuration” connection-state=established
add action=accept chain=input comment=“default configuration” connection-state=related
add action=drop chain=input comment=“default configuration” in-interface=ether1-gateway
add action=accept chain=forward comment=“default configuration” connection-state=established
add action=accept chain=forward comment=“default configuration” connection-state=related
add action=drop chain=forward comment=“default configuration” connection-state=invalid
/ip firewall nat
add action=masquerade chain=srcnat comment=“default configuration” out-interface=ether1-gateway
/ip ipsec policy
set 0 dst-address=0.0.0.0/0 src-address=0.0.0.0/0
/system clock
set time-zone-autodetect=no
/system routerboard settings
set silent-boot=no
/tool mac-server
set allowed-interface-list=mactel
/tool mac-server mac-winbox
set allowed-interface-list=mac-winbox

2

There are a few things wrong:

  • Remove wlan1 from bridge-local
  • Bind dhcp-client to wlan1 (not bridge-local)
  • set local address (192.168.88.1) to bridge-local (not ether2-master)
  • bind dhcp-server to bridge-local
  • fix your firewall (your WAN interface is wlan1 and there’s nothing protecting you from WAN interface right now)
  • change NAT rule so that it’ll use wlan1 as out-interface

There might be some more. It seems that your RB was upgraded from old ROS version and there are remnants of old configuration. You might want to reset configuration to factory default and start configuring using quick set to “PtP bridge CPE” mode … and start from there.

3

Thanks for the quick reply. Yes, I have upgraded the software version because it was at version 3.64. I have done the factory reset through the button on the back but seems its not the right way.
Where to make the reset configuration to factory default?

ps. I feel stupid for asking this question :frowning:

4

same reset button,
power off
hold reset button
apply power
wait for 10 seconds
release reset button

or you can reset from winbox, System → Reset Configuration

5

I did the hard reset, set the PtP bridge CPE in quick setting and I lost connection with winbox to the router.
Did restart. Default gateway is 192.168.88.1
Still unable to connect

6

Post your current config and we’ll try to push forward.