Problem with connection to internet RB2011UAS-2HnD-IN

RouterOS Beginner Basics
1

Hello!

I have a problem with the configuration of the router .
On the provider’s network settings to get DHCP. Configuration below hosts ping
Internet comes to the router,but the pages,sites do not open, maybe not the right set up NAT, DNS, Route? Firewall disabled on time , it is permissible? I understand that I do not possess the fundamental knowledge in networking,but I try to get them,learn wiki, wiki mikrotik and networking technologies.

Thank you all for your help!


Configuration:

[admin@MikroTik] > export
# jan/02/1970 01:16:31 by RouterOS 6.20
# software id = RCET-6MMR
#
/interface wireless
set [ find default-name=wlan1 ] disabled=no l2mtu=2290 mode=ap-bridge \
    radio-name=KOSTYAHOME2 wireless-protocol=unspecified
/interface ethernet
set [ find default-name=ether1 ] mac-address=00:1D:60:D6:EC:6F
set [ find default-name=ether3 ] master-port=ether2
set [ find default-name=ether4 ] master-port=ether2
set [ find default-name=ether5 ] master-port=ether2
set [ find default-name=sfp1 ] speed=100Mbps
/ip neighbor discovery
set wlan1 discover=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=\
    dynamic-keys wpa-pre-shared-key=123456789 wpa2-pre-shared-key=123456789
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name=pool1 ranges=192.168.89.2-192.168.89.30
add name=pool2 ranges=192.168.89.34-192.168.89.62
/ip dhcp-server
add address-pool=pool1 disabled=no interface=ether2 lease-time=3d name=\
    server1
add address-pool=pool2 disabled=no interface=wlan1 lease-time=3d name=server2
/port
set 0 name=serial0
/routing bgp instance
set default router-id=192.168.160.254
/system logging action
set 0 memory-lines=100
set 1 disk-file-name=log disk-lines-per-file=100
set 2 remember=yes
set 3 src-address=0.0.0.0
/ip address
add address=192.168.89.1/24 interface=ether2 network=192.168.89.0
add address=192.168.89.33/24 interface=ether2 network=192.168.89.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no \
    interface=ether1
/ip dhcp-server network
add address=192.168.89.0/27 dns-server=192.168.0.107,192.168.0.108 gateway=\
    192.168.89.1
add address=192.168.89.32/27 dns-server=192.168.0.107,192.168.0.108 gateway=\
    192.168.89.33
/ip dns
set allow-remote-requests=yes servers=192.168.0.107,192.168.0.108
/ip dns static
add address=192.168.0.107 disabled=yes name=base
add address=192.168.0.108 disabled=yes name=base2
/ip firewall nat
add action=masquerade chain=srcnat src-address=192.168.89.0/24
add action=masquerade chain=srcnat out-interface=ether1
/ip ipsec policy
set (unknown) dst-address=0.0.0.0/0 src-address=0.0.0.0/0
/ip proxy
set cache-path=web-proxy1
/ip route
add disabled=yes distance=1 gateway=192.168.160.254
/ip service
set api disabled=yes
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public

Once again I apologize for the mistakes!
Thank you!

P.S. Sorry I tried to open the topic in another section,I will try to be attentive to the rules.

2

Hello, why 2 ranges on 1 /24 range?

Have you problems with

LAN= 192.168.98.1/24

WLAN1= 192.168.90.1/24


Connect never ISP modem to a gigabit interface.
For a good performance take for example ether6 100 Mbit interface
your iSP have not a speed from more than 100 Mbit.

Reset your routerboard without default configuration.
Connect your ISP to ether6
Copy and paste this configuration in “new terminal”

/interface bridge
add mtu=1500 name=bridge-lan
/interface ethernet
set [ find default-name=ether1 ] name=ether1-LAN
set [ find default-name=ether2 ] master-port=ether1-LAN name=ether2-LAN
set [ find default-name=ether3 ] master-port=ether1-LAN name=ether3-LAN
set [ find default-name=ether4 ] master-port=ether1-LAN name=ether4-LAN
set [ find default-name=ether5 ] master-port=ether1-LAN name=ether5-LAN
set [ find default-name=ether6 ] name=ether6-ISP
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=belgium disabled=no l2mtu=2290 mode=ap-bridge
/ip pool
add name=dhcp_pool-LAN ranges=192.168.89.2-192.168.89.254
add name=dhcp_pool-WLAN1 ranges=192.168.90.2-192.168.90.254
/ip dhcp-server
add address-pool=dhcp_pool-LAN disabled=no interface=bridge-lan lease-time=3d name=dhcp-LAN
add address-pool=dhcp_pool-WLAN1 disabled=no interface=wlan1 lease-time=3d name=dhcp-WLAN1
/port
set 0 name=serial0
/system logging action
set 2 remember=yes
/interface bridge port
add bridge=bridge-lan interface=ether1-LAN
/ip address
add address=192.168.89.1/24 interface=bridge-lan network=192.168.89.0
add address=192.168.90.1/24 interface=wlan1 network=192.168.90.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no interface=ether6-ISP
/ip dhcp-server network
add address=192.168.89.0/24 dns-server=192.168.89.1,8.8.8.8,8.8.4.4 gateway=192.168.89.1
add address=192.168.90.0/24 dns-server=192.168.89.1,8.8.8.8,8.8.4.4 gateway=192.168.90.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.89.1 name=router.home ttl=1w3d
/ip firewall nat
add action=masquerade chain=srcnat comment=masquerade-LAN out-interface=ether6-ISP src-address=192.168.89.0/24
add action=masquerade chain=srcnat comment=masquerade-WLAN1 out-interface=ether6-ISP src-address=192.168.90.0/24
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public

3

Hello!
Thank you all for your attention and thank you very much plisken

Hello, why 2 ranges on 1 /24 range?

Have you problems with

LAN= 192.168.98.1/24

WLAN1= 192.168.90.1/24

So, is it wrong? I should start from 2/24 range?


to plisken
I tried to do as you indicated
But, unfortunately, the Internet, and does not work, but has now changed as follows . On port ether2 - internet access is, in no other ports (connection is limited or non-existent )

Here is the final configuration after making your changes:

[admin@MikroTik] > export
# jan/02/1970 01:57:30 by RouterOS 6.20
# software id = RCET-6MMR
#
/interface bridge
add mtu=1500 name=bridge-lan
add mtu=1500 name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=belgium disabled=no \
    l2mtu=2290 mode=ap-bridge radio-name=KOSTIKHOME2 wireless-protocol=\
    unspecified
/interface ethernet
set [ find default-name=ether1 ] mac-address=00:1D:60:D6:EC:6F name=ether1-LAN
set [ find default-name=ether5 ] master-port=ether1-LAN name=ether5-LAN
set [ find default-name=ether6 ] name=ether6-ISP
set [ find default-name=sfp1 ] speed=100Mbps
/ip neighbor discovery
set wlan1 discover=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=\
    dynamic-keys wpa-pre-shared-key=123456789 wpa2-pre-shared-key=123456789
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name=pool1 ranges=192.168.89.2-192.168.89.30
add name=pool2 ranges=192.168.89.34-192.168.89.62
add name=dhcp_pool-LAN ranges=192.168.89.2-192.168.89.254
add name=dhcp_pool-WLAN1 ranges=192.168.90.2-192.168.90.254
/ip dhcp-server
add address-pool=pool1 disabled=no interface=ether2 lease-time=3d name=server1
add address-pool=pool2 disabled=no interface=wlan1 lease-time=3d name=server2
add address-pool=dhcp_pool-LAN disabled=no interface=bridge-lan lease-time=3d \
    name=dhcp-LAN
/port
set 0 name=serial0
/routing bgp instance
set default router-id=192.168.160.254
/system logging action
set 0 memory-lines=100
set 1 disk-file-name=log disk-lines-per-file=100
set 2 remember=yes
set 3 src-address=0.0.0.0
/interface bridge port
add bridge=bridge1 interface=ether1-LAN
/ip address
add address=192.168.89.1/24 interface=ether2 network=192.168.89.0
add address=192.168.89.1/24 interface=bridge-lan network=192.168.89.0
add address=192.168.90.1/24 interface=wlan1 network=192.168.90.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no \
    interface=ether1-LAN
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no \
    interface=ether6-ISP
/ip dhcp-server network
add address=192.168.89.0/27 dns-server=192.168.0.107,192.168.0.108 gateway=\
    192.168.89.1
add address=192.168.89.0/24 dns-server=192.168.89.1,8.8.8.8,8.8.4.4 gateway=\
    192.168.89.1
add address=192.168.89.32/27 dns-server=192.168.0.107,192.168.0.108 gateway=\
    192.168.89.33
add address=192.168.90.0/24 dns-server=192.168.89.1,8.8.8.8,8.8.4.4 gateway=\
    192.168.90.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.0.107 disabled=yes name=base
add address=192.168.0.108 disabled=yes name=base2
add address=192.168.89.1 name=router.home ttl=1w3d
/ip firewall nat
add action=masquerade chain=srcnat comment=masquerade-LAN out-interface=\
    ether6-ISP src-address=192.168.89.0/24
add action=masquerade chain=srcnat comment=masquerade-WLAN1 out-interface=\
    ether6-ISP src-address=192.168.90.0/24
# in/out-interface matcher not possible when interface (ether1-LAN) is slave - use
 master instead (bridge1)
add action=masquerade chain=srcnat out-interface=ether1-LAN
add action=masquerade chain=srcnat out-interface=bridge1 src-address=\
    192.168.89.0/24
/ip ipsec policy
set (unknown) dst-address=0.0.0.0/0 src-address=0.0.0.0/0
/ip proxy
set cache-path=web-proxy1
/ip route
add disabled=yes distance=1 gateway=192.168.160.254
/ip service
set api disabled=yes
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public
[admin@MikroTik] >

May be Log will be useful, I attache it.

Thank you all!
3l.jpg
l3.jpg
l2.jpg

4

Have you before reset the routerboard without default configuration?
Have you connect the internet on ether6?
What IP-adress have you on the DHCP-client (ether6)
I have internet to my test setup

Ether1 to 5 =lan

5

I have 192.168.160.12 IP-adress on the DHCP-client.
May be I don’t reset the routerboard without default configuration.
I changed MAC adress on this port (ether6) and take link on this port, but I try to check internet from this port - it’s no internet.
Ok I will try it again and check it. Thank you. And sorry.

6

I have internet configured (DHCP-client) on ether6 (100 Mbit) WAN
If on DHCP client (ether6) bound are you connected to the internet.
You should then be able to ping to 8.8.8.8
ether1 to 5 is the LAN site

Don’t forget before you copy and paste the configuration a made you must reset your routerboard without default configuration
This is verry importent

7

Ok, I will be do all your recommenadation and check all. Thank you very much!

8

Let me know of the problem has solved.

9

Hello!
Good of your time of day!

I try to “copy-past”. And I have next problem. I don’t to do all “copy-past”, so but use parts of code, because exist some error. Ok, more code successful “enable”. But exist next problem. - Like port ehert6 after to change MAC-address have no connection to Internet, but link exist and exist transfer packages. My be it will be need to creation VLAN? So Ports ether1-eher2 exist Swich1 and Ports ether6-ether10 exist Swich2. I don’t know may be I wrong? And all works without VLAN.

So it’s your configuration, after reset the routerboard without default configuration and part of “copy-past” Code and part manually typing:

[admin@MikroTik] >> export  
# jan/02/1970 00:40:26 by RouterOS 6.20
# software id = RCET-6MMR
#
/interface bridge
add mtu=1500 name=bridge-lan
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g l2mtu=2290
/interface ethernet
set [ find default-name=ether1 ] name=ether1-LAN
set [ find default-name=ether2 ] master-port=ether1-LAN name=ether2-LAN
set [ find default-name=ether3 ] master-port=ether1-LAN name=ether3-LAN
set [ find default-name=ether4 ] master-port=ether1-LAN name=ether4-LAN
set [ find default-name=ether5 ] master-port=ether1-LAN name=ether5-LAN
[b]set [ find default-name=ether6 ] mac-address=00:1D:60:D6:EC:6F[/b]
/ip pool
add name=dhcp_pool-LAN ranges=192.168.89.2-192.168.89.254
add name=dhcp_pool-WLAN1 ranges=192.168.90.2-192.168.90.254
/ip dhcp-server
add address-pool=dhcp_pool-LAN disabled=no interface=bridge-lan lease-time=3d \
    name=dhcp-LAN
add address-pool=dhcp_pool-WLAN1 disabled=no interface=wlan1 lease-time=3d \
    name=dhcp-WLAN1
/port
set 0 name=serial0
/system logging action
set 2 remember=yes
/interface bridge port
add bridge=bridge-lan interface=ether1-LAN
/ip address
add address=192.168.89.1/24 interface=bridge-lan network=192.168.89.0
add address=192.168.90.1/24 interface=wlan1 network=192.168.90.0
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.89.1 name=router.home ttl=1w3d
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public
[admin@MikroTik] >>

And in attache some Code with information message with “…don’t much any value of interface…”

I called today to my ISP to take some more information about my configuration but ISP couldn’t to give me more information, I try to call again tomorrow.

Thank you very much again!

P.S. When I change my MAC-address of eher6 it have name change like this - set [ find default-name=ether6 ] mac-address=00:1D:60:D6:EC:6F
Is it normal?
ip_dhcp_client.jpg

10

What routerOs you have?

This configuration is made with RouterOs 6.20

Have you copy and paste the whole code in ones?

/interface bridge
add mtu=1500 name=bridge-lan
/interface ethernet
set [ find default-name=ether1 ] name=ether1-LAN
set [ find default-name=ether2 ] master-port=ether1-LAN name=ether2-LAN
set [ find default-name=ether3 ] master-port=ether1-LAN name=ether3-LAN
set [ find default-name=ether4 ] master-port=ether1-LAN name=ether4-LAN
set [ find default-name=ether5 ] master-port=ether1-LAN name=ether5-LAN
set [ find default-name=ether6 ] name=ether6-ISP
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=belgium disabled=no l2mtu=2290 mode=ap-bridge
/ip pool
add name=dhcp_pool-LAN ranges=192.168.89.2-192.168.89.254
add name=dhcp_pool-WLAN1 ranges=192.168.90.2-192.168.90.254
/ip dhcp-server
add address-pool=dhcp_pool-LAN disabled=no interface=bridge-lan lease-time=3d name=dhcp-LAN
add address-pool=dhcp_pool-WLAN1 disabled=no interface=wlan1 lease-time=3d name=dhcp-WLAN1
/port
set 0 name=serial0
/system logging action
set 2 remember=yes
/interface bridge port
add bridge=bridge-lan interface=ether1-LAN
/ip address
add address=192.168.89.1/24 interface=bridge-lan network=192.168.89.0
add address=192.168.90.1/24 interface=wlan1 network=192.168.90.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no interface=ether6-ISP
/ip dhcp-server network
add address=192.168.89.0/24 dns-server=192.168.89.1,8.8.8.8,8.8.4.4 gateway=192.168.89.1
add address=192.168.90.0/24 dns-server=192.168.89.1,8.8.8.8,8.8.4.4 gateway=192.168.90.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.89.1 name=router.home ttl=1w3d
/ip firewall nat
add action=masquerade chain=srcnat comment=masquerade-LAN out-interface=ether6-ISP src-address=192.168.89.0/24
add action=masquerade chain=srcnat comment=masquerade-WLAN1 out-interface=ether6-ISP src-address=192.168.90.0/24
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public

11

I look what it is and post the whole configuration again
It go wrong with the name from ether6

I try it again

12

Reset back the routerboard without default configuration.

Copy and paste this back in new terminal
I don’t have ether6 renamed
I hope that helps

/interface bridge
add mtu=1500 name=bridge-lan
/interface ethernet
set [ find default-name=ether1 ] name=ether1-LAN
set [ find default-name=ether2 ] master-port=ether1-LAN name=ether2-LAN
set [ find default-name=ether3 ] master-port=ether1-LAN name=ether3-LAN
set [ find default-name=ether4 ] master-port=ether1-LAN name=ether4-LAN
set [ find default-name=ether5 ] master-port=ether1-LAN name=ether5-LAN
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=belgium disabled=no
l2mtu=2290 mode=ap-bridge
/ip pool
add name=dhcp_pool-LAN ranges=192.168.89.2-192.168.89.254
add name=dhcp_pool-WLAN1 ranges=192.168.90.2-192.168.90.254
/ip dhcp-server
add address-pool=dhcp_pool-LAN disabled=no interface=bridge-lan lease-time=3d
name=dhcp-LAN
add address-pool=dhcp_pool-WLAN1 disabled=no interface=wlan1 lease-time=3d
name=dhcp-WLAN1
/port
set 0 name=serial0
/system logging action
set 2 remember=yes
/interface bridge port
add bridge=bridge-lan interface=ether1-LAN
/ip address
add address=192.168.89.1/24 interface=bridge-lan network=192.168.89.0
add address=192.168.90.1/24 interface=wlan1 network=192.168.90.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no
interface=ether6
/ip dhcp-server network
add address=192.168.89.0/24 dns-server=192.168.89.1,8.8.8.8,8.8.4.4 gateway=
192.168.89.1
add address=192.168.90.0/24 dns-server=192.168.89.1,8.8.8.8,8.8.4.4 gateway=
192.168.90.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.89.1 name=router.home ttl=1w3d
/ip firewall nat
add action=masquerade chain=srcnat comment=masquerade-LAN out-interface=ether6
src-address=192.168.89.0/24
add action=masquerade chain=srcnat comment=masquerade-WLAN1 out-interface=
ether6 src-address=192.168.90.0/24
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public

13

Hello

Thank you for all!

I use all code, but it’s not working, not connection to Internet. When I try to ping I have message that I have no Route:

[admin@MikroTik] > export
# jan/02/1970 03:34:51 by RouterOS 6.20
# software id = RCET-6MMR
#
/interface bridge
add mtu=1500 name=bridge-lan
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=belgium disabled=no \
    l2mtu=2290 mode=ap-bridge
/interface ethernet
set [ find default-name=ether1 ] name=ether1-LAN
set [ find default-name=ether2 ] master-port=ether1-LAN name=ether2-LAN
set [ find default-name=ether3 ] master-port=ether1-LAN name=ether3-LAN
set [ find default-name=ether4 ] master-port=ether1-LAN name=ether4-LAN
set [ find default-name=ether5 ] master-port=ether1-LAN name=ether5-LAN
set [ find default-name=ether6 ] mac-address=00:1D:60:D6:EC:6F
/ip pool
add name=dhcp_pool-LAN ranges=192.168.89.2-192.168.89.254
add name=dhcp_pool-WLAN1 ranges=192.168.90.2-192.168.90.254
/ip dhcp-server
add address-pool=dhcp_pool-LAN disabled=no interface=bridge-lan lease-time=3d \
    name=dhcp-LAN
add address-pool=dhcp_pool-WLAN1 disabled=no interface=wlan1 lease-time=3d \
    name=dhcp-WLAN1
/port
set 0 name=serial0
/system logging action
set 2 remember=yes
/interface bridge port
add bridge=bridge-lan interface=ether1-LAN
/ip address
add address=192.168.89.1/24 interface=bridge-lan network=192.168.89.0
add address=192.168.90.1/24 interface=wlan1 network=192.168.90.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no \
    interface=ether6
/ip dhcp-server network
add address=192.168.89.0/24 dns-server=192.168.89.1,8.8.8.8,8.8.4.4 gateway=\
    192.168.89.1
add address=192.168.90.0/24 dns-server=192.168.89.1,8.8.8.8,8.8.4.4 gateway=\
    192.168.90.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.89.1 name=router.home ttl=1w3d
/ip firewall nat
add action=masquerade chain=srcnat comment=masquerade-LAN out-interface=\
    ether6 src-address=192.168.89.0/24
add action=masquerade chain=srcnat comment=masquerade-WLAN1 out-interface=\
    ether6 src-address=192.168.90.0/24
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public
[admin@MikroTik] >

In attached screenshot with Routes.

I called to ISP and they to give me all configuration, but not have another information, but said, that another people, which have equipment like Mikrotik have Internet, connection correct.

Configuration from ISP (for Static Configuration)

IP : 192.168.160.12
MASK: 255.255.255.0
Gate : 192.168.160.254
DNS: 192.168.0.107
192.168.0.108

14

Go to “IP” “DHCP-client” what see you than see you “bound” and what IP-adress

15

Hello Thank you! Sorry, I have no ability to check it now. I will check in evening.

Good Evening

I add some screenshots.
DhcpCLient3.jpg
DhcpCLient2.jpg
DhcpClient1.jpg

16

Screenshot DHCP-client status
I see no gateway this is wrong this must the IP-adress from the ISP modem.
I think
There is something wrong with the DHCP server lease by your provider.
At “standard gateway” should be the IP address of the ISP modem
Sorry but i have internet on my test setup this is verry weirde

17

Hello, no I have no Internet on LAN (ether1,2,3,4,5)

Ok, I send you screenshot, but late

And today I am happy, I receave Configuration from ISP. And ISP change my diapason of LAN and they said before I have bridge with one port. I don’t know right it?
And for a first configuration change ether6 to ehter1. I try to change it after when all working right and to connection to Internet.

Thank you!


Configuration from ISP:

/interface bridge
add l2mtu=1500 name=bridge-local
/interface ethernet
set [ find default-name=ether1 ] mac-address=00:1D:60:D6:EC:6F name=ether1-gateway
set [ find default-name=ether2 ] name=ether2-master-local
set [ find default-name=ether3 ] master-port=ether2-master-local name=ether3-slave-local
set [ find default-name=ether4 ] master-port=ether2-master-local name=ether4-slave-local
set [ find default-name=ether5 ] master-port=ether2-master-local name=ether5-slave-local
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-ht-above disabled=no distance=indoors l2mtu=2290 mode=ap-bridge ssid=MyWIFI wireless-protocol=802.11
/ip neighbor discovery
set ether1-gateway discover=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk group-ciphers=tkip,aes-ccm mode=dynamic-keys unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=wifisharekey wpa2-pre-shared-key=\
   wifisharekey
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool1 ranges=150.150.150.1-150.150.150.200
add name=dhcp ranges=150.150.150.100-150.150.150.200
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge-local lease-time=1w name=dhcp1
/interface bridge port
add bridge=bridge-local interface=ether2-master-local
add bridge=bridge-local interface=wlan1
/ip address
add address=150.150.150.254/24 comment="default configuration" interface=ether2-master-local network=150.150.150.0
add address=192.168.1.254/24 disabled=yes interface=bridge-local network=192.168.1.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid disabled=no interface=ether1-gateway
/ip dhcp-server network
add address=150.150.150.0/24 dns-server=192.168.0.107,192.168.0.108 gateway=150.150.150.254
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add chain=input comment="default configuration" protocol=icmp
add chain=input protocol=igmp
add chain=input comment="input ssh" dst-port=22 in-interface=ether1-gateway protocol=tcp
add chain=input comment="input telnet" dst-port=23 in-interface=ether1-gateway protocol=tcp
add chain=input comment="input winbox" dst-port=8276 in-interface=ether1-gateway protocol=tcp
add chain=input comment="default configuration" connection-state=established
add chain=input comment="default configuration" connection-state=related
add action=drop chain=input comment="default configuration" in-interface=ether1-gateway
add chain=forward comment="default configuration" connection-state=established
add chain=forward comment="default configuration" connection-state=related
add action=drop chain=forward comment="default configuration" connection-state=invalid
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" out-interface=ether1-gateway to-addresses=0.0.0.0
/ip upnp
set allow-disable-external-interface=no
/routing igmp-proxy
set quick-leave=yes
/routing igmp-proxy interface
add interface=bridge-local
add alternative-subnets=0.0.0.0 interface=ether1-gateway upstream=yes
/system leds
set 0 interface=wlan1 leds=wlan-led type=wireless-status
set 1 interface=ether1-gateway leds=led1
set 2 interface=ether2-master-local leds=led2
set 3 interface=ether3-slave-local leds=led3
set 4 interface=ether4-slave-local leds=led4
set 5 interface=ether5-slave-local leds=led5 type=interface-activity
/system logging
add disabled=yes topics=igmp-proxy
add topics=dhcp
/system ntp client
set enabled=yes primary-ntp=192.168.0.250 secondary-ntp=195.189.180.250
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
add interface=wlan1
add interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
add interface=wlan1
add interface=bridge-local
18

Yes you have 1 interface in bridge because you can build further with LANyou can put ether 7,8,9,10 in this bridge.
Thats not a problem.
The ISP set gateway on a gigabit port (ether1) why? i don’t now. The performance from the first switch chip is not fully used with that.
I hope for you that it works.
If you have problems or if it works let me know.

19

Ok, Thank you! I will check it. I don’t know why ISP set gateway on a gigabit port (ether1) I try to change it in further. At first I think try it will be work with just it, after it can configuration.

20

Hello!
It’s work!
But on port ether1 connection from ISP. I try to decide it problem, but late. I will write about it.

Best wishes! And thank you very much!

P.S. I want to connection second ISP to this routerboard and balancing it. Can you give me link to read about it? Thank you!