no internet access

Hi

I setup Mikrotik as a WiFi AP and LAN hub in my home network. All the traffic routed through Linux gateway with NAT, 2 laptops and Mikroitik itself have static ip addresses. I managed to configure Mikrotik WiFI and basic network, able to login to Mikrotik with browser from any laptop.
The issue is: Mikrotik can ping my LAN GW, but not 1.1.1.1 and therefore no other internet access. What am I doing wrong? Config attached.
mikroconf.rsc (2.06 KB)

The gateway should be set to the IP address of your router. You might want to consider using DHCP client (on the bridge) that handles correct IP addressing. By using static leases, you can use dedicated IP addresses.

This!


There is one ... but as @OP writes, he's using static addressing, so likely he doesn't run DHCP server in his network. I agree that these days running one is almost necessity. E.g. for attaching smart phones to WiFi network (while it's possible to set up static addresses on "smart" devices, it's a real PITA to do it all the time).

Agreed, let DHCP server be your friend. I have found it much easier to assign static IP addresses at router level so devices are always assigned to a specific IP when on your network, but receive a dynamic IP when connected elsewhere. Also, unless I’m missing it, there isn’t any masqerade stetting between the wan and lan. Not familiar with capsman, so could be in that already.

No, CAPsMAN doesn’t do it. And since @OP is using this device as AP only, NAT is not something it is supposed to do (main router should do it).

Thanks, I suspect this too. But where to set GW for Bridge? See pics attached.
mikr_gw.png
mikr_br.png
mikr_br1.png

Set your main router’s IP address in Gateway field.

When I try to set GW like this Mikrotik show it red and become unreachable.
mikr_gw1.png

Basic problem of your WiFi AP is incomplete IP address setting, it’s missing subnet setting. Change it like this:


/ip address
add address=192.168.11.251> /24 > interface=bridgeLocal network=192.168.11.0

After you fix IP address, you’ll be able to enter router’s IP address which is currently rejected.

Thanks heaps mkx, this resolved my issue.