Ok, I created a new entry named “my” (now there is “default” and “my”),
but where do I need to specify that this new one shall be used?
Success! I now can ping 8.8.8.8
Got it finally working by using an “alternate” (ie. old) APN=telekom.t-d1.de using proto=CHAP and user=internet pw=t-d1
The difference is this: the LTE device now gets a public IPv4 address (37.84.96.xx/32) assigned,
whereas in previous attempts it got just a private IPv4 address (10.16.105.xx/32).
Found the said alternate APN in this old public support posting of the provider:
https://forum.congstar.de/thread/64622-homespot-lte-router-kein-internet/?postID=429090#post429090
Thanks everybody, without your useful hints this would have taken much longer.
From inside this AP router I can ping internet addresses (both IP and domainnames),
but from the attached PC pinging internet IP addesses does not work yet.
On the PC the gateway and DNS server is this AP (ie. 192.168.88.1),
and the PC itself has IP 192.168.88.3.
So, it seems to be a firewall issue on this AP router.
The firewall so far is untouched by me, ie. everything is default setting.
Any idea how to fix?
Forum veteran with 800+ posts can not figure this out? How is that even possible?
Anyway.. you have to decide if you want your router to handle DNS requests or if clients should connect directly to public DNS servers.
If you want your router to be midleman, you have to enable allow-remote-requests in DNS
if you want to skip that, you can change settings of your DHCP server and use public DNS servers directly
Just setting up the device and then doing something else in the next 3 or 5 years…
Anyway.. you have to decide if you want your router to handle DNS requests or if clients should connect directly to public DNS servers.
If you want your router to be midleman, you have to enable > allow-remote-requests > in DNS
if you want to skip that, you can change settings of your DHCP server and use public DNS servers directly
Found the reason: I forgot to change the resolver settings (/etc/resolv.conf on the Linux PC).
Had nothing to do in the router firewall setup (though I better should do something in the firewall, but atm q&d functionally has higher prio).
Ok, now everything finally ok
Thx.
Now I’m going to test whether streaming (ie. netflix-like providers) is working satisfactorily via LTE.
If yes, then I’ll say good-bye to my cable internet, which has become also very expensive here.
Update:
Right now watching some Youtube cat videos over this connection.
The quality is satisfactory for my needs.
So, then this was a useful investment
I’ve used such a device for teleworking from South of France during some weeks.
A couple of days with 8 hours straight, not a single disconnect (and Azure remote desktop is quite sensitive to it !).
Be very aware of cupboard cat attacks 
:
https://youtu.be/QefxGauB3_c
You’ll never know what hit you. 
Encountered a problem:
I wanted to hide the wifi SSID, but it gives a cryptic error message “Invalid value in undefined”.
I did not change anything in these settings, ie. just using the defaults.
On my other (older) MT router (hAP ac^2) using ROSv6 hiding an SSID works just fine.
Export of wifi part please.
terminal
/interface wifi
export file=anynameyouwish
Move that file to your computer
Remove serial, passwds, …
Post contents back here between [__code] [/__code] quotes
Ok, thx, here’s it:
# 2024-10-11 12:27:17 by RouterOS 7.15.2
# software id = Y028-72I4
#
# model = L41G-2axD&FG621-EA
# serial number = XXXXX
/interface wifi
set [ find default-name=wifi1 ] channel.band=2ghz-ax .skip-dfs-channels=\
10min-cac .width=20/40mhz configuration.mode=ap .ssid=XXXXX \
disabled=no security.authentication-types=wpa2-psk,wpa3-psk .ft=yes \
.ft-over-ds=yes
And where is the offending setting ?
Should be something like
/interface wifi
set [ find default-name=wifi1 ] channel.band=2ghz-ax .frequency=2412 .width=
20mhz configuration.country=Belgium .hide-ssid=yes .mode=ap .ssid=XYZ
disabled=no security.authentication-types=wpa2-psk,wpa3-psk
PS: you do not need this, not on a single radio AP not being under capsman control
ft=yes
ft-over-ds=yes
After updating RouterOS to the latest version (7.16.1) the said error disappeared!
Anyone know: does RouterOS keep traffic stats for each interface?
Ie. how many bytes transferred in and out on daily/weekly/monthly basis?
Yes and no.
It does keep stats for as long as the device is connected, aggregated.
You can use Tools / Graphing but it can be a load on local resources.
If you want more detailed info, you need to look at other options:
Splunk: http://forum.mikrotik.com/t/tool-using-splunk-to-analyse-mikrotik-logs-4-0-graphing-everything/153043/1
Kid control (someone here made a script to use Kid Control to collect stats etc. Maybe you can find it if you search a bit, I couldn’t find it right away)
…
My other router has such a useful traffic statistics page for the WAN interface (ie. Internet).
Need a similar one for my MikroTik LTE interface b/c need to monitor (control) the traffic amount as it’s not flat rate.
Online Time Data Volume (MB) Connections
(hh:mm) Total Sent Received
Today 18:44 2248 574 1673 2
Yesterday 24:00 6445 784 5661 0
Current week 114:44 43155 3867 39288 2
Current month 258:44 82532 8743 73788 2
Previous month 713:56 211193 23416 187777 6
Ah, found it.
See here
http://forum.mikrotik.com/t/daily-monthly-data-traffic-usage/168917/1
This indeed looks very interesting.
I’ll try to use it.
Thank you very much for your help.