Problems with DHCP server and bridge mode

RouterOS Beginner Basics
1

Hello,

I’m new on mikrotik and I’m frustated. I want to activate DHCP server on my mikrotik hex S but there is something I’m doing wrong because it works but I don’t have internet access on my devices. Here is my configuration:

Fiber router IP 10:0.10.1 // 255.255.254.0
Mikrotik IP 10.0.10.2 // 255.255.254.0 (fiber router in eth1), rest of devices connected to eth2 to eth5. (fiber router also has wifi activated)
I want to put a dhcp server to set ips from 10.0.10.10 to 10.0.10.30 with 255.255.254.0 net mask and 10.0.10.1 gateway.

I have mikrotik configured in bridge mode, but there is something wrong.

2

Those screenshots provide insufficient information, post the output of /export hide-sensitive from a terminal window.

3

Sorry, there is:

/interface bridge
add name=bridge1
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=10.0.10.10-10.0.10.20
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=bridge1 name=dhcp1
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=sfp1
/interface detect-internet
set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\
    all wan-interface-list=WAN
/interface list member
add interface=ether1 list=WAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=sfp1 list=LAN
/ip address
add address=10.0.10.2/23 interface=bridge1 network=10.0.10.0
/ip dhcp-server lease
#THERE ARE MY COMPUTERS AND OTHER THINGS
/ip dhcp-server network
add address=10.0.10.0/23 dns-server=8.8.8.8,208.67.222.222,8.8.4.4,0.0.0.0 \
    domain=208.67.222.220 gateway=10.0.10.1
/ip dns
set servers=8.8.8.8,10.0.10.1,1.1.1.1
/ip route
add distance=1 gateway=10.0.10.1
4

Your nomenclature makes no sense to me.

(1) Does the modem provide a public IP?
(2) Does the modem provide a private IP and its already doing DHCP? (and thus is actually acting as a modem router)?
(3) Why would you want a private LANIP structure that is the same as the MODEM provided IP structure??

First thing to do would be to attempt to put the modem router device into modem mode, may have to ask your ISP.
What type of device model/make to see if can have a passthrough type mode?

Can you port forward everything to the WAN IP of the MT (its LANIP from the fiber router perspective) and then USE the MT as a router with double nat??

5

Fiber router has wan ip an lan ip. Also has a telephone port and tv port (it separates all services to ethernet ports).
All I want to do is to move dhcp server and qos to mikrotik because it has better performance. (Also qos in fiber router is very poor).
It’s possible to do what I want?

6

Do you have full access to the fiber router?
What settings can you modify.
What is the make and model of the fiber router.

7

I have a cable modem that is installed by my ISP. It is in BRIDGE MODE to allow passthru communications. That runs into my 3011 that is used for Routing/Firewall and distribution to other networks like Home Office Network…Home Network…WIFI AP…IOT Devices. All this works great. The key is to set your CABLE MODEM in BRIDGE without wireless access.

8

Thanks.
So Its impossible to do what I want using fiber router’s wifi.
I’ll search for a wifi mikrotik device.

9

No one said it is impossible, we asked for information about your fiber router and you refuse to provide it and thus we cannot help further.
Without the ability to control or access the fiber router and yets its acting as a router YOU are Truly PHUCKED, or more accurately your ISP is pHucking you in the ear.

10

I do not refuse to provide the information, only that I have the feeling that it is not possible to do what I intend (sorry but TV goes through internet there is no dedicated ethernet port)

My router is Arcadyan PRV3397B_E_LT (limited by mi ISP in some areas), connected to a nokia ONT.
I know I have 2 solutions (I’m newbe in mikrotik systems, not in computers, ethernet, etc):

  • Put router in bridge mode → I lose router’s wifi
  • Change router with mikrotik → also I lose router’s wifi

This is why I’ve said that it is better to buy a mikrotik with wifi to solve that, I hoped that I had configured something wrong on my mikrotik.

11

I’m just doing more test on my network…

I just activated dhcp on mikrotik and disabled on fiber router, and on my laptop I have:

  • correct IP address, netmask, gateway and DNS servers
  • I can ping to everything on my network
  • I can ping to 8.8.8.8
  • I can’t ping to, for example, www.google.com it can’t resolve.
    There is the problem, it can’t resolve, unknown host, but if I ping directly google ip it works.

if i do the same in mikrotik it resolves… (using tools → ping).
Also tryed to use mikrotik as dns server with same result.

12

Why do you have domain=208.67.222.220 and dns-server=8.8.8.8,208.67.222.222,8.8.4.4,0.0.0.0 in the /ip dhcp-server network configuration?

13

Sorry, When I posted it I saw that errors and corrected them. It continues not resolving domains. Also I tried to put mikrotik ip as DNS server with same result.

There is the code:

/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=sfp1 ] disabled=yes
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp_pool0 ranges=10.0.10.10-10.0.10.20
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=bridge1 name=dhcp1
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=sfp1
/interface detect-internet
set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\
    all wan-interface-list=WAN
/interface list member
add interface=ether1 list=LAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=sfp1 list=LAN
/ip address
add address=10.0.10.2/23 interface=bridge1 network=10.0.10.0
/ip dhcp-server lease
/ip dhcp-server network
add address=10.0.10.0/23 dns-server=8.8.8.8,8.8.4.4 gateway=10.0.10.1 netmask=\
    23
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,208.67.222.222,8.8.4.4
/ip route
add distance=1 gateway=10.0.10.1
14

Again, your setup makes no sense.
Forget the wifi of the iSP router, put it into bridge mode.
Nowhere does your config actually show you have a WAN input into the MT router.

15

So that is what I said. I’ll buy a MT router with wifi and config my isp router to bridge.

Thanks.

16

He should take Ethernet 1 and remove it from the bridge if thats the interface connected to the modem. Allow the HEX to do auto dhcp client to get an IP from the modem then make sure he as a NAT entry with masquerade and it should work. He needs to have the one interface (ether1) facing the public side and nat back to the other interfaces.

But…wouldnt the router script if run the 1st time out of the box already do that?

17

I’m waiting for ISP staff because if I turn off DHCP server on ISP’s router and having manual IP, netmask, gateway and DNS on my computer directly connected to it, I can’t resolve websites (I just plugged off MT). ISP router is doing something wrong… I think all my problems comes from ISP’s router.