please help me, newbie here

RouterOS Beginner Basics
1

Hi,

Can someone help me? just receive my rb2011uas-2hnd-in yesterday and im trying to look for tutorial on the below,

  1. how to setup gig port 1-5 with public IP add, ie 10.1.1.0/24
  2. how to setup ethernet port 6-10 with NAT, 192.168.1.0/24
  3. how to setup wifi, 192.168.2.0/24

would it be possible? thanks.

2

tell us something more :slight_smile:

  1. Are You going to connect rb2011 to Internet using one of interfaces from 1 to 5 ?
  2. Do You have to static add your public IP or there is some PPPoE, DHCPipv4 or DHCPipv6 server from Internet side?


    This is possible :slight_smile:
3

Hi,

Thanks for the reply. Im going to connect one of the interface (let say gig port 1) to the modem and have the public IP available for the gig port 2-5. I think it’s in DHCP from the internet side. Really sorry for being a completely newbie here.

4

In interface list edit interfaces from ether2 to ether5 and change "master port"from “none” to “ether1”
now interfaces from 1 to 5 will work as switch and the master port will be ether1

Next step is to get the public IP on the ether1

If there is DHCP server add DHCP client with “default route” and “use peer dns” on ether1

its not the end but for now try to do that :slight_smile:

When You end try to ping your gateway

5

@ Twido

i think i got it now for the wired setup, really thanks. how about for the wifi? i want it separated from the wired subnet. given the details on the first post.

6

in IP address add 192.168.2.1/24 on interface wlan1
after that, open IP DHCP Server window and go for DHCP Setup

  1. choose Interface wlan1
  2. make sure that DHCP address space is correct ( it suppose to be 192.168.2.0/24 )
  3. the gateway for this server suppose to be 192.168.2.1/24
  4. then define the range of addresses, let it be 192.168.2.11-192.168.2.254 (in this case You will have some always free addresses to use in the future)
  5. I suggest you to paste DNS addresses which You got from Your Internet service provider
  6. Finally change the lease time ( 1d will be enough i think )

Go to IP Firewall, switch to NAT overlap

Add new rule

General overlap:
Chain: srcnat
Out interface: ether1

Action overlap:
action: masquerade

Now, go to wireless and run scanner on interface wlan1
see what is on the ether, You will have to choose some frequency in next step

go to Wireless - Security Profiles
create new profile:
Name it
choose authentication type (may be wpa2 psk)
choose unicast and group ciphers (tkip or aes)
enter the pre-shared key

edit wlan1

In general:
Arp: enabled
In Wireless:
Mode: ap bridge
Band: B/G/N
Channel width: 20/40 above
Frequency: choose something “free”
SSID: name of your wireless network
Wireless protocol: 802.11
Security profile: choose the profile that you create before
Bridge mode: enabled

In HT:
Make sure that all 4 HT Tx & Rx chains are on

In Nstreme:
make sure that polling is on
and Nstreme is off

Apply :slight_smile:

Now You can try to connect to your new SSID by using password from created security profile , if I’m right you should have Internet

7

hi twido,

Cannot connect to internet after I follow your procedure for the Wifi. What seems to be the problem?

8

Do you get correct IP from server (including gateway and dns) ?

paste here IP Route list and IP firewall NAT rules:)

9

@ Twido

Really big thanks to you for the time and support. Now its running. :smiley: