No internet access HAP AC lite LTE 6

RouterOS Beginner Basics
1

Hello,

Can anyone help me. I am trying to establish a working lte router and I got to a point where the lte connection is established, I get the outer IP and signal strenght is good and I can ping 8.8.8.8 on winbox terminal and packets go through no prob. no loss, I have dhcp server enabled, gateway is good, dns and everything seems fine but I cannot get internet access to any of my ethernet ports and also I have problems with my WIFI settings as it always says there is no connection to CAPsMAN although I have disabled this under WIFI interface. I have all ethernet ports in bridge.
What am I missing here?

Best regards

2

I have managed to establish WIFI and removed the no connection to CAPsMAN error. But still can’t get internet connection nor through wifi nor through ethernet ports

3

and also I have noticed that the firewall rules went blank after config.reset and am searching for a basic default firewall settings (rules) to load but haven’t found any, just some complicated advanced ones. Is there any script to load the default firewall rules?

4

If you have access to the device, reset to default config.
If firewall rules are still missing then, netinstall using latest stable version.

PS it’s probably hAP AX lite LTE6 we’re referring to here ?
hAP AC lite LTE6 doesn’t exist.

5

A presumably default firewall configuration can be extracted from this thread:
http://forum.mikrotik.com/t/hap-ax-lite-lte6-not-getting-assigned-an-ip-on-lte/169248/1

/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yes
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
6

Probably missing masquarade rule in firewall.

7

All issues which can be solved by starting from correct default config …