Thanks to w32pamela and supprt we finally managed to setup a GrooveA in station mode to connect to a hotspot.
The ether1 and a virtual Wlan2 are in a bridge. Now securing the Wlan2 AP-bridge does not work.
How do we make Wlan2 a private network that it has only has acces through the NAT MASQ?
Original thread: http://forum.mikrotik.com/t/needing-help-to-setup-wifi-access/109708/1
Already solved it ourself. Jorge wrote that the Wlan2 showed Wlan1 as master port and looking in demo.mt.lv I saw the option to disable the Bridge between Wlan1 and Wlan2.
After that Jorge reported that the applied security profile was respected so it now works a it should be.
I will ask Jorge to post the configuration so that other people don’t have to go the difficult way we had to go get this working after more than three days.
Hello, I forgote we changent the thread.
Now, it works ok, up to the security problem, not resolved yet.
I can’t have tne network secured. If I do so, I cant acces it with the password, on the same computer that created it.
I could yesterday, acces it with only one tablet, the other devices were rejected.
Strange no?
Well, trying to understand…
I did the trials with my phone as a hotspot, but in that case ther is a problem: it can’t have the same ssid since 2 of them would appear in the wifi tab of the tablet. And anyhow, still the same reject of password.
Did you disable the AP bridge part in wlan2 and set security profile to WPA2? Then to which ssid do connect on the tablet/phone?
Hello there,
Back on the track.
I just did: (to start with a new setup)
1 Reset
2 copy/paste the config From Pamela32
3 choose my phone as a hotspot, input the password, connect to e web page. Up to here it works, wired.
In that config, the router doesn’t appears in any wifi.
I just need to learn, layer by layer…
So I know, that out of the box+config (Pamela;) it works wired. I guess it’s already a good base, for my level…
I will do a hard reset right now (to be sure all that stuff didn’t bug the device) and back to the meat
In fact, out of the config there after all the above, no wifi .
After a reset, with the automatic config, there is wifi.
So ther might be one of the problem, no?
Since we assume that after the copy and paste we have wifi, some setup(s) could be differents?
You went back to step one and we were already on step five of the list: https://forum.mikrotik.com/viewtopic.php?f=13&t=122738&start=50#p604632
To go to the before last step (five) first import the saved GrooveAPbridge2-4GHz.rsc config…I hope you did save it, if not you have to do it all again after doing step two up to five and then export.
Export:
Now open the terminal screen and type in:
export file=GrooveAPbridge2-4GHz.rsc
Open the files box: Menu > files >
Drag-and-drop your > GrooveAPbridge2-4GHz.rsc > to the desktop of your notebook.
A next time if needed then import this file…until we have managed also step six then we make a new export.
Import:
Open the files box: Menu > files >
Drag-and-drop your > GrooveAPbridge2-4GHz.rsc > from the destop into the files box on a free area or use the upload button in that screen to upload that file.
Now open the terminal screen and type in:
import file=GrooveAPbridge2-4GHz.rsc
Followed by enter/return
Well, I did that last night. I do it now: response-- WPA pre-shared key needs to be 8 to 64 characters. 
So I configured the security profile with wpa Key and tryed again. Response: Failure: already have interface with such name
Your are already on w32Pamela config.
Check if wlan1 is in station mode.
Create a virtual wireless interface and set in ap-bridge mode (Access Point);[/i]
Menu wireless - button Add New - choose Virtual - set Mode to ap bridge - SSID: “CaptainJorge” - button - Bridge Mode: disable and Apply
Put virtual wireless interface and Ethernet interface in same bridge;[/i]
Menu Bridge - tab bridge - button + - button Apply
Menu interfaces - tab General - double click ether1 - set Master port: to none and apply
Menu Bridge - tab Ports - button + - Select Bridge - Select Interface WLAN2 - button Apply
Menu IP - DHCP Server[/b] - tab DHCP - double click ether1 and change Interface: to bridge1 and Apply
Menu Bridge - tab Ports - button + - Select Bridge - Select Interface ether1 - button Apply
After this we are back on step five so make a export if you had not done the last time.
As soon as I apply this I am thrown out of Winbox and I have to reconnect with IP: 192.168.88.1 or with the MAC.
Does anyone have a suggestion to get the security working on the AP!?!?!? I don’t have WiFi equipment of Mikrotik and I can’t see and test anything up front. The DEMO severs only tell “computer says NO” so trying out setups is futile.
You have to tell me which screen you are doing things when they go wrong because I don’t have the same stuff as you and I have to emulate it in my brain.
Also answer this question by me so that I know you are knocking on the correct door: https://forum.mikrotik.com/viewtopic.php?f=7&t=122923&p=604897#p604860
Security profile in default
To set it I go to:
Wireless/security profile/
I guess there is a bug in the way I set up the config, thus it is coming back every time I give it the saved RSC
Since it works perfectly(wired) whith my phone as a Hotspot(it doesn’t cost much just to type as I do now) I can make all the trials and fixes with that. My antenna is inside the boad now, so the signal from outside is weaker. I cant climb on my mast to do hard reboot every time 
What do you think of revisiting the setup from that point of departure?
So you can’t add (+) a new profile with an other name than “default”.
OK this may be the cause that adding the security profile: such security profile first needs to be created
If that works than go to the wlan2 and choose as security profile that new name from the list.
Check also of wlan2 has an address: Menu IP - click address and you will find ether1 = 192.168.88.1 if wlan2 is not present the add it with address 192.168.88.2
Update: more study
https://wiki.mikrotik.com/wiki/Manual:Interface/Wireless#VirtualAP
Hi
With a teacher like you, happened what should have happened: IT WORKS!!!
I mean everything works.
Now I would like to export this config in a form usable for others in the same sh…
Thank you so much. It seems nothing, but I manage all administration papers, social security etc. From the internet.
Thanks again.
https://forum.mikrotik.com/posting.php?mode=quote&f=7&p=604889 
In the export line change it to export hide-sensitive and past the output here.
Make a normal backup for yourself and I the date revered (20170625) in front and before every update or big change make a new one. It will save you ass more than once.
Now you have to check if it keeps working also after a doing geting grocery and long power outage. Then you canenjoy the view from the mast again putting the Groove back.
Also look at getting the wlan1 to 5GHz so that you can use the best connection available.
It was not easy I have to admit and for a few days I did not know what I know about Mikrotik WiFi. I hope that onetime make a wiki page with config files as addition to the default configs.
The config from w32Pamela was a big step on which we could build the more advanced setup.
Good to hear that you have been able to do your administration!
My pleasure and bon voyage and enjoy the great views!
Hello,
I was not aware of your answer.
Thanks a lot for everything. It was not an easy task.
You have been so patient and you explained everything such a way that I (almost) understand the way it works.
I tried to send you a private message but it doesn’t work pushing “contact”
English is not my first lenguage and the terms used in routing matters are weird ones to me.
Take care of yourself.
I try right away to send you a private mail.
I always try to the person I assist to also understand what is happening so that you can help someone else with the knowledge.
It seems that message system is disabled by Mikrotik so that is a dead end.
English is also not my first language but I manage.
Please leave here your hide-sensitive config so others can enjoy our work also.
See you, old sailor…
Also, something interesting, at list for me: I setup a hotspot I want to use with the groove. From the mac, whith the cable, I can access the winbox settings. If I want to do the same in wi-fi with an Ipad, the password I have to enter is the one of the hotspot, not the management one…
There is a drawback in that case: I can’t disconnect the AP, or I loose the connection and can’t go back to it. I have to reconnect with the mac, wired. And also, in remote mode, I can’t see others hotspots to connect to, since I have access only to the one I’m currently connected to.
Onother point: how can I copy the setup, without giving identity, passwords, etc, since I’m scared to change everything, now that it works… 
See you, young(maybe not) computer addict.
Hi M. M.
Since the last post, something new. It was quasi impossible to connect in Wi-fi. The groove didn’t want to keep the password and the security config always finished blanc: none.
I became a bit pissed of, since most of the time I would loose the hand with the computer so I had to climb to the mast to push that damn. reset toy. After a while that bloody thing refused to reset, I suppose it was as tired as I was to play that game. So I pulled down the Lan cable, from the deck, and went to bed. I woke up at night, climbed for the last time, took of the device and put it on the back of the boat. Anyhow, since the reset doesn’t work anymore, I can’t try another time to play with it.
I guess that groove was bugged since the beginning. By example, it never appears in the browser, with the out of the box config. I had to inject the one Pamela gave us to have it in Firefox.
So I will give it back to Mikrotik. I don’t even want my money back. To get rid of it is already a blessing. I will try anther brand, when I have a bit more money.
Take care
Jorge
Hi Jorge,
I missed your previous message and to export without any password you do: Menu New Terminal and then type into the page: export hide-sensitive and press enter/return You then copy the contents to this forum. You can check before if there is no sensitive information displayed before you press submit.
bout not able to login with the same password is maybe cause by that not two devices can use the same password at one time. So creating a second account would be an option to begin and use that for one device. Suggestion to make an accound for the notebook, iPad and your phone.
On your post of today. I was aware that your Groove was doing strange things like loosing its configuration. Now we can think of a electronical or mechanical problem. You can inspect the board by unscrewing the metal ring at the same place where you take of the antenna. Keep you hand under the tube were the networkcable was attached and press firmly on the metal part sticking out on the top. The board slides out into your hand and inspect if you see any moisture, corrosion or damage.
https://www.youtube.com/watch?v=4KvcMU2_fuc
or this one:
https://www.youtube.com/watch?v=3zGgU4tQ-5U you look at position 2 minutes and 10 seconds.
The web interface is also strange because you saw it and later never again. On a full reset or new firmware it will ask you if you want use the configuration suggested and if you select yes then you should be able to access it on IP address: 192.168.88.1 and if you deny then you can only access it by Winbox.
Did you buy it on the Martinique or through internet? If you have a shop on Martinique you can go there to have a working version if you bought it there.
Sometimes things can really bug you and it did with you as I can read and I hope this can be solved for you and that will be an happy Mikrotik user or happy with an other brand like Ubiquiti.
Thanks to come back.
Well, this is indeed a strange object. Since it’s brand new(I bought it in Estonia trough the net) it should be clean. But living in a wet surrounding, I often have to dobble check everything, moist, fungus, etc.
It made me a bit nervous. As a sailor I’m used to have things that work. Or I throw them away. So pulled hard the RJ45 cable, to disconnet that machine without climbing again. Well, to be honnest, at 68 I need some exercise, ok, but not GI training. Indeed the reset button is dead ant my last outburst sent it at the botom of the groove. I can understand a lack of understanding, but at list the machine has to be reliable: the same response to the same setting. In that case I can learn, and understand. That one is a bitch, that has strange behaviors, like my old lady used to have a week every month, you already know that…
Anyhow, I get rid of it, I divorce.
PS: if your name and first name starts with the letter"M"you can give me following (@et.com)and I will send you some pictures.
Take care.