RouterOS Upgrade question - hAP ac lite

RouterOS Beginner Basics
1

On my boat, where I live, I have an hAP ac lite set up as Home AP Dual, running v6.46.1 (stable), connected to a Groove A 52 ac running v6.47.3 (stable). I can access the hAP ac lite through Webfig on my Chrome browser on my Macbook Air. I originally set up the hAP ac lite (and the Groove) using Winbox on a Windows desktop that is not accessible right now (and it’s a pain).

I’m not able to use the Webfig “check for updates” to update the RouterOS on the hAP ac lite; I get the message: “ERROR: could not resolve DNS name.” I’ve seen several posts in these forums on that error message. As a layperson with no networking training, some of them are difficult for me to decipher. I have set up the hAP ac lite with DNS servers 8.8.8.8 and 208.67.222.222. I don’t know how to do anything beyond that with respect to DNS servers.

Here’s the question: Can I upgrade the hAP ac lite RouterOS by (i) downloading the v6.47.3 Main Package from the Mikrotik.com/download site; and (ii) Webfig > Files and upload that .npk file then Rebooting? Or is that not how it works?

2

If your client can connect to the Internet, I would expect the hAP ac Lite to be able as well.
If you share your config (/export hide-sensitive) and share it here (between code tags) we can have a look.

There are several ways to upgrade, please check this site:
https://help.mikrotik.com/docs/display/ROS/Upgrading+and+installation

3

Download Mipsbe 6.47.3
Upload it to your hAPacLite and go to System>Reboot and do a reboot.
When the router is back up and accessible go to System>routerboard, Click Upgrade and then reboot your router again.

I had a customer in Grenada report a similar problem the other day. Where are you?

4

Here it is:

# sep/02/1970 07:46:42 by RouterOS 6.46.1
# software id = XRE0-SJ3C
#
# model = RB952Ui-5ac2nD
# serial number = 924D0A19ECD0
/interface bridge
add admin-mac=74:4D:28:6E:6B:F3 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
    disabled=no distance=indoors frequency=auto installation=indoor mode=\
    ap-bridge ssid="Tallawah 2GHz" wireless-protocol=802.11
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=\
    20/40/80mhz-XXXX disabled=no distance=indoors frequency=auto \
    installation=indoor mode=ap-bridge ssid="Tallawah 5GHz" \
    wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
    dynamic-keys supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf interface=wlan2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.3/24 comment=defconf interface=ether2 network=\
    192.168.88.0
add address=192.168.88.3/24 interface=ether1 network=192.168.88.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.3 netmask=24
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,208.67.222.222
/ip dns static
add address=192.168.88.3 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
    ipsec-policy=out,none out-interface-list=WAN
/ip route
add distance=1 gateway=192.168.88.2
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
5

I’m in the U.S.
When you say “upload it to your hAPacLite” – I think that’s essentially my question: can I accomplish that through WebFig browser access – going to “Files” then “Upload a file” and upload file routeros-mipsbe-6.47.3.npk? Or do I need to connect the hAPacLite to Winbox?
Thanks

6

You can do it through WebFig. It doesn’t need to go into the “flash/” folder.

7

I just glanced at your configuration and this caught my attention.
/ip address
add address=192.168.88.3/24 comment=defconf interface=ether2 network=\ You should use interface=bridge
192.168.88.0
add address=192.168.88.3/24 interface=ether1 network=192.168.88.0 I would remove this line since ether1 is your WAN and since it is a DHCP Client it will get its IP Dynamically from your Groove.

Did you change the IP address on your Groove to a different subnet such as 192.168.89.0/24 or is it also running as a DHCP server using the 192.168.88.0/24 subnet?