NEED HELP, STRANGE PROBLEM

I have an strange problem.

This is the situation:

Routerboard with:
Ether1 (Public interface DHCP) working fine:
Ether2 (Local interface - 192.168.5.1)
Wlan (atheros 5114 - 192.168.5.2) IN AP BRIDGE MODE SIRVING 10 CLIENTS APs

I can see these clients APs in the wireless registration table.
I can see in the ARP entries the ip of the clients of each clients APs

But they don.t have internet connection. The strange thing is if I plug my pc to the local interface I can surf
1 client of these 10 Clients APs can surf too. But only him. The other ones are in entries but they can not log in.

Note: If they remotely ping 192.168.5.1 (local interface) they get Destination Unreachable

DHcp server and hotspot are working fine I think


Any idea??

You should assign the IP to the BRIDGE interface and not the ether1 and wlan1 interfaces. You only need one IP.

I suggest adding 192.168.5.254 on the bridge interface, and set your pool to hand out 192.168.5.10-.250. Reconfigure your DHCP server, and make sure to only use ONE DHCP server on the BRIDGE interface.

Remember that you BRIDGED those two interfaces together as ONE BRIDGED INTERFACE.

Which version of ROS are you running?

I’ve had a similar problem with my hotspots on 3.10 (and prior versions of 3.x). I have a ticket open with MT on the issue; we’ve been going back and forth. It seems a lot of people on the forums are having the same problem, too.

My suspicion is that this is because of the hotspot running on the bridge. MT suggested setting

/interface bridge settings set use-ip-firewall=yes

which I did. It allows the bridge to determine which bridge port a given MAC came in on, i.e., it can learn the MAC. That alone didn’t fix things, but once enabling it and rebooting the router, the hotspot started working again.

Does your hotspot users connect to this interface?:
Wlan (atheros 5114 - 192.168.5.2) IN AP BRIDGE MODE SIRVING 10 CLIENTS APs

I missed the last line of your post regarding hotspot users.

I misunderstood the Jumafes’s question, I think.

If I’m reading your question correctly, you have wlan1 in ap-bridge mode, with the hotspot running on there. You have 192.168.5.1 on your ether2 interface and 192.168.5.2 on wlan1. The problem is likely that, since ether2 and wlan1 are not bridged together, wireless clients won’t ‘see’ the 192.168.5.1 address.
So you have two options:

  1. Put ether2 and wlan1 into a bridge, and assign 192.168.5.1 to the bridge interface. Then set the dhcp server and hotspot server to use the bridge.
  2. Use a different subnet (and dhcp server) for wlan1

Hi trs

I think we both are correct. Perhaps we should wait for him to reply so we can see exactly what he means