No Internet access on connected Wifi

RouterOS Beginner Basics
1

Hi!
New here.
I am trying to set up a RB4011iGS+RM Router with a RBMetalG-52SHPacn Access point.
No matter what I try, I can only get internet via Ethernet directly into the RB4011.
Test computer (MacBook Pro) is connected only to Wifi, has a DHCP IP address but no internet.
What config am I missing to provide internet to the Wifi device?
Thanks for any guidance.
-r

Exported log:

[admin@MikroTik Router] > export compact

jan/02/1970 01:30:34 by RouterOS 6.42.12

software id = GECU-PQM1

model = RBMetalG-52SHPacn

serial number = A80F0A672FC7

/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-Ceee disabled=no frequency=auto mode=ap-bridge ssid=NetworkName wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=********* wpa2-pre-shared-key=***********
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=ether1 name=defconf
add address-pool=dhcp disabled=no interface=bridge1 name=dhcp1
/interface bridge port
add bridge=bridge1 interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=all internet-interface-list=all lan-interface-list=LAN wan-interface-list=WAN
/interface list member
add interface=ether1 list=WAN
add interface=bridge1 list=LAN
/ip address
add address=.../24 comment=defconf interface=ether1 network=...0
add address=192.168.88.1/24 interface=wlan1 network=192.168.88.0
/ip dhcp-client
add dhcp-options=hostname,clientid interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,8.8.8.8
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/ip route
add distance=1 gateway=.1*.6**.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
/ip upnp interfaces
add interface=bridge1 type=internal
add interface=ether1 type=internal
/system identity
set name="MikroTik Router"
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN

2

Your config is all over the place, have dhcp server where you should not, with duplicate ip ranges in both wan and lan, etc.
Reset to default config and start again

3

Prior to that, upgrade ROS to some recent version (e.g. 6.45.9 or 6.47.2), the one currently installed on RBMetalG (6.42.x) is ancient.

4

Hmm, I thought it was simply this error…
/ip address
add address=.../24 comment=defconf interface=ether1 network=...0
add address=192.168.88.1/24 interface*=wlan1** network=192.168.88.0

Should be
/ip address
add address=.../24 comment=defconf interface=ether1 network=..*.0
add address=192.168.88.1/24 interface=bridge1 network=192.168.88.0

But then I realized that was the metal config WTF…
Why are you using it as the router and not the RB4011 as noted above…
In other words you need to show both configs.

5

That’s right, we need to see what are you doing with the other Tik, There are so meany possible ocnfigs and the result in all of them is the combination of the configs of the 2 devices


6

Thanks for the replies.
Both devices setup at 192.168.88.1.
I was unaware the metal could act as a router as well.
The config page kept bouncing back and fourth with WIFI and without, as it was probably hitting both routers.

Solution:
First: setup the RB4011. (And confirm internet access)
Second: Directly connect to Metal
Third: Switch metal from “Router” to “Bridge”
Fourth: Assign metal a static IP eg: 192.168.88.2
Fifth: Assign metal a gateway “192.168.88.1” (RB4011)
Sixth: Setup SSID and security. (Apply)
Seventh: Unplug direct connection to metal.
Eight: Plug Metal into RB4011

Wifi now has internet access.
Thank you everyone for the clues.
-r