quick review / feedback on a very simple config?

RouterOS General
1

this is a very simple setup, dhcp relay to the router connected by LAN, nothing else

firewall is handled at the router level (i assume this is ok, im right?)

is there any tweak or missing recommended setup or mistake here?

thanks

[admin@MikroTik] > export

apr/18/2018 19:18:24 by RouterOS 6.42

model = RouterBOARD cAP Gi-5acD2nD

/interface wireless
set [ find default-name=wlan1 ] arp=reply-only band=2ghz-b/g/n bridge-mode=disabled channel-width=20/40mhz-Ce country=canada disabled=no distance=indoors frequency=2427 l2mtu=1598 mode=ap-bridge name=interface-WLAN1-Priv ssid=MikroTik-2.4-P wireless-protocol=802.11 wps-mode=disabled
set [ find default-name=wlan2 ] arp=reply-only band=5ghz-a/n/ac bridge-mode=disabled channel-width=20/40/80mhz-Ceee country=canada disabled=no distance=indoors l2mtu=1598 mode=ap-bridge name=interface-WLAN2-Priv ssid=MikroTik-5-P wireless-protocol=802.11 wps-mode=disabled

/interface bridge
add admin-mac=*** auto-mac=no name=bridge-Relay

/interface ethernet
set [ find default-name=ether2 ] disabled=yes name=interface-LAN1
set [ find default-name=ether1 ] name=interface-WAN

/interface list
add exclude=dynamic name=discover

/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods=“” mode=dynamic-keys supplicant-identity=MikroTik wpa2-pre-shared-key=***

/interface bridge port
add bridge=bridge-Relay interface=interface-WAN
add bridge=bridge-Relay interface=interface-WLAN1-Priv
add bridge=bridge-Relay interface=interface-WLAN2-Priv

/ip neighbor discovery-settings
set discover-interface-list=none

/ip cloud
set update-time=no

/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=bridge-Relay

/ip dhcp-relay
add dhcp-server=192.168.*** disabled=no interface=bridge-Relay name=dhcp-relay-WLAN

/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes

/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes

/system clock
set time-zone-name=America/Toronto

/system ntp client
set enabled=yes

/system routerboard settings
set silent-boot=yes

/tool bandwidth-server
set enabled=no

/tool mac-server ping
set enabled=no

/tool netwatch
add down-script=“/interface wireless set interface-WLAN1 disabled=yes\r
\n/interface wireless set interface-WLAN2 disabled=yes” host=192.168.*** interval=5s up-script=“/interface wireless set interface-WLAN1 disabled=no\r
\n/interface wireless set interface-WLAN2 disabled=no”

2

Actually what you created is a simple bridge. You can remove the dhcp-relay as it is not doing anything. DHCP and Firewall will be handled by your Router.

If you want a dhcp-relay, you might start here.
https://wiki.mikrotik.com/wiki/Manual:IP/DHCP_Relay

3

hmm good to know one less thing to have in the config, i was seeing the dhcp-relay being used in the logging windows and i didnt think to try it without one

other/anything else to fix / tweak / correct ? :slight_smile:

thanks

4

The default protocol mode is RSTP on the bridge interface. It is kind of buggy, so I would change to none…

/interface bridge
add admin-mac=*** auto-mac=no name=bridge-Relay protocol-mode=none

Other than that, looks good!

5

thanks a lot, i appreciate!