Mikrotik with 2x Wifi - novice question

RouterOS Wireless Networking
1

Hi,
i’m tring to setup a RB952Ui with one Wifi 2,4 Ghz to connect to a access point, which is a internet router. The other Wifi 5Ghz for clients to connect.
The first Wifi has a DHCP client running and the second a DHCP server. This has worked so far.
With the script below it is possible to connect to the mikrotik using the client Wifi and it connects to the internet ap.
DHCP Server gives IP to clients but there is no connection to the internet. Internet is pingable within the mikrotik.
Probaly i did not understand the bridging between the two wireless networks.
So where did i mess up?

/interface bridge
add name=bridgeLAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" group-ciphers=tkip,aes-ccm mode=dynamic-keys name=profileLocal supplicant-identity="" unicast-ciphers=tkip,aes-ccm \
    wpa2-pre-shared-key=###
add authentication-types=wpa2-psk eap-methods="" group-ciphers=tkip,aes-ccm mode=dynamic-keys name=profileRelay supplicant-identity="" unicast-ciphers=tkip,aes-ccm \
    wpa2-pre-shared-key=###
/interface wireless
set [ find default-name=wlan2 ] country=germany disabled=no installation=indoor mode=ap-bridge name=wlanLocal security-profile=profileLocal ssid=SID2
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=germany disabled=no installation=indoor name=wlanRelay security-profile=profileRelay skip-dfs-channels=all ssid=SID1
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=poolLocal ranges=192.168.3.200-192.168.3.249
/ip dhcp-server
add address-pool=poolLocal disabled=no interface=bridgeLAN name=serverLocal
/interface bridge port
add bridge=bridgeLAN interface=ether2
add bridge=bridgeLAN interface=ether3
add bridge=bridgeLAN interface=ether4
add bridge=bridgeLAN interface=ether5
add bridge=bridgeLAN interface=wlanLocal
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip address
add address=192.168.3.1/24 interface=bridgeLAN network=192.168.3.0
/ip dhcp-client
add disabled=no interface=wlanRelay
/ip dhcp-server network
add address=192.168.3.0/24 gateway=192.168.3.1
/ip firewall filter
add action=accept chain=input
add action=accept chain=forward
add action=accept chain=output
/ip firewall nat
add action=masquerade chain=srcnat out-interface=wlanRelay src-address=192.168.3.0/24
/system clock
set time-zone-name=Europe/Berlin
/system identity
set name=RouterOS
2

Wlan2/Wlanlocal is part of the bridge (with ether2-5), Wlan1/Wlanrelay is not.
So you don’t seem like bridging the two WiFi, but rather routing :confused: , and you have a srcnat masquerade with out interface Wlanrelay.
But you seem like not having added routes, what is the output of:
/ip route print
?

3

The routes are like this. IP 192.168.88.1 ist the internet router from which the mikrotik got dhcp adress on wlanRelay.

Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit 
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 ADS  0.0.0.0/0                          192.168.88.1              1
 1 ADC  192.168.3.0/24     192.168.3.1     bridgeLAN                 0
 2 ADC  192.168.88.0/24    192.168.88.152  wlanRelay                 0
4

Hi,
thanks for the reply.
After some investigations, I figured out the part of the config:

add address=192.168.3.0/24

in the section

/ip dhcp-server network

has to be deleted and it works.