Ping question

Hello

I have configuration:

Rb 941 hap ))))))))))) WAP )))))))))) WAP

Rb 941 is connected with wifi to first and second WAP with wds.
Work fine but one confusion here.

PING : from wap to wap, from wap to hap and all other combinations work fine but.
When I ping 8.8.8.8 to wan (internet) also work fine but when I ping from two devices to 8.8.8.8 I got ping time out on first device. So conclusion is can’t ping to wan( 8.8.8.:sunglasses: from two devices simultaneously , only one by time working fine.
When simultaneously ping devices between no time out, ping is 20ms and work fine.
Every device have access to internet.
Question : Is this normal behavior or not? Maybe this is a stupid question but I’am little bit concerned.


Where do I make mistake if I do.
Can you advice please.

Thank you

What nobody knows or haven’t that issue

please

/tool traceroute 8.8.8.8

Without more details, it sounds like you aren’t running your NAT with overload or isn’t setup right. What are you settings for your NAT? Do you have connection tracking enabled?

No connection tracking enabled.
Here is some settings for hap ( main RB )

\

/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no distance=indoors
mode=ap-bridge ssid=wds wds-default-bridge=bridge1 wds-mode=dynamic
wireless-protocol=802.11
/ip neighbor discovery
set ether1 discover=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.88.51-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge1 name=dhcp1
/interface bridge port
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=ether2
/interface wireless cap
set bridge=bridge1 discovery-interfaces=bridge1 interfaces=wlan1
/ip address
add address=192.168.88.5/24 interface=ether2 network=192.168.88.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no
interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 gateway=192.168.88.50 netmask=24
/ip dns
set allow-remote-requests=yes
/ip firewall filter
add chain=input protocol=icmp
add chain=input connection-state=established
add chain=input connection-state=related
add chain=input dst-port=8291 in-interface=ether1 protocol=tcp
add action=drop chain=input in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=bridge1
add action=masquerade chain=srcnat out-interface=ether1
/ip route
add disabled=yes distance=1 gateway=192.168.88.1



and this is from 1 WAP


/interface bridge
add admin-mac=E4:8D:8C:40:8A:3D auto-mac=no name=bridgeLocal
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no distance=indoors
mode=wds-slave radio-name=wap ssid=wds wds-default-bridge=bridgeLocal
wds-mode=dynamic
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip dhcp-server
add interface=wlan1 name=server1
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp ranges=192.168.88.11-192.168.88.254
/ip dhcp-server
add address-pool=dhcp interface=bridgeLocal name=dhcp1
/interface bridge port
add bridge=bridgeLocal interface=wlan1
/interface wireless cap
set bridge=bridgeLocal discovery-interfaces=ether1 interfaces=wlan1
/ip address
add address=192.168.88.3/24 interface=wlan1 network=192.168.88.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
add default-route-distance=0 dhcp-options=hostname,clientid interface=wlan1
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no
interface=bridgeLocal
/ip dhcp-server network
add address=192.168.88.0/24 gateway=192.168.88.3 netmask=24
/ip firewall nat
add action=masquerade chain=srcnat disabled=yes out-interface=ether1
add action=masquerade chain=srcnat disabled=yes out-interface=bridgeLocal
/ip route
add disabled=yes distance=1 gateway=192.168.88.1
add check-gateway=ping disabled=yes distance=1 dst-address=192.168.88.0/24
gateway=192.168.5.1



I have try play around with NAT but no results,,
Where do I make mistake

thank you

Anybody?

Why are natting over your bridge interface?

I have found that example for wds mode, why?
Not good option?

it depends on what you are wanting to do and what the wireless bridge is for.
Do you have a central router and AP which all your other sites connect to or are you trying to link to locations in ptp.

I have dsl router which is not mikrotik (ISP) property and no wifi on it, with lan cable connected to Hap Rb941 ( ethernet1) and wlan on hap is Ap bridge for clients to connect with wifi and the other side of the house where is not cable options put 2 Wap Rb in wds slave mode to repeat Hap so the clients can connect to Wap too. That is the situation.

The way I see it you Hap RB941 is the master. It should be handling the Nat on the interface that is connected to the DSL router on ether1 I believe. The bridge interface is correct but there is not need to nat traffic out to the 2 waps in the other rooms. on those waps should not be running nat either. They should not need to run dhcp either as they should bridging all traffic to your central HAP RB941. Below is a basic diagram of my thoughts

Thank you for your help, you are so kind.

You’re absolutely right , the situation is such that you drew.
I took your advice and now I have a different situation.

On main router ( HAP941 ) I have dhcp client on ethernet 1 which is on DSL , then dhcp server on bridge1, also NAT on ether1 ( masquarade ) and that is all about on HAP.



On WAP on your suggestion no NAT at all, no dcp server off course, but must be dhcp client ( when I disable it then do not have route to host ), so dhcp client must be enabled or it is possible to manage on some other way.

The situation is that two RB , Hap or Wap can ping 8.8.8.8 at the same time but third one can’t , so now is better situation for two devices but not for three. When I start ping on third one then I get ping time out on it.
Something still missing.

Thank you again for helping me dgnevans.

What waps are you using as wireless repeaters?
Are you able to ping and browse from your computer through the wireless.

I use RBwAP2nD two of it.

Yes but only from one wap and of course Hap ,when I try another one can’t use it, when I disconnect one of wap then I can go with another.

Unfortunately I do not have routerboards with wireless here so cannot replicate your setup and give you more detailed configuration.
My understanding is you need to setup your primary routers wireless as an ap bridge with security of your choice. (that interface should be sub interface of bridge 1 as you have it now just with the wireless setup differently)
Then you need to set the other 2 as Wlan as stations.Give them static ip’s as I described earlier and you can set there default route to point at 192.168.88.1. http://wiki.mikrotik.com/wiki/Manual:Wireless_AP_Client
Make sure you add the wlan to the bridge on each of your RBWaP.
You may need to add a vitual ap to provide connectivity to your other devices from the RBWAP.
http://wiki.mikrotik.com/wiki/Manual:Making_a_simple_wireless_AP
You should not need to run dhcp client. THe reason you able to ping when you run dhcp client is because device gets defaulte gate / route from the dhcp and so by putting default route in you should be good.
I hope this helps

I understand what you are saying but if I put station mode in Wap then I have connectivity just to Ap ,the clients can’t connect to Wap any more or it is why you are saying to add additional virtual Ap.
Ok will try adjust the settings as you say then will inform you for any results.
Thank you

Yes you would need to set the vitrual ap so they can have access. if that does not work use config as you have it now. Put the static ip on each with default route back to the central router.

Just seen that in 6.35.2 there is a new wireless repeater package added. May be worth looking at for your AP’s
did you get your setup working

Hello,

I tried without any success.
I tried and new package but on HAP can’t install it something went wrong, I will wait for stabil version with it someone told me to.
Not shure why.

Thanks