Hello.
On my new RB2011 I setup the WiFi out of the ready configuration.
I added it to the Bridge.
The result it:
Type
export hide-sensitive
on terminal and paste config to see it
[admin@Pornhub] > export hide-sensitive
# jun/17/2022 21:51:37 by RouterOS 6.48.6
# software id = 0KAJ-N5Z0
#
# model = RB2011UiAS-2HnD
/interface bridge
add admin-mac=DC:2C:6E:71:3E:8B auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether1 ] mac-address=91:DE:B0:41:43:95
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" \
group-key-update=55m mode=dynamic-keys name=UnrealProfile \
supplicant-identity=""
add authentication-types=wpa2-psk eap-methods="" \
group-key-update=55m mode=dynamic-keys name=Yanakievi-Profile \
supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-g/n country=bulgaria disabled=no \
distance=indoors frequency=auto installation=outdoor mode=ap-bridge \
security-profile=Yanakievi-Profile ssid=Yanakiev wireless-protocol=802.11 \
wps-mode=disabled
add disabled=no keepalive-frames=disabled mac-address=1E:2C:6E:11:3E:E4 \
master-interface=wlan1 multicast-buffering=disabled name=UnrealVLAN \
security-profile=UnrealProfile ssid=Unreal wds-cost-range=0 \
wds-default-cost=0 wps-mode=disabled
/ip pool
add name=dhcp ranges=192.168.0.2-192.168.0.254
add name=VPN-Pool ranges=192.168.11.2-192.168.11.250
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge lease-time=2h name=defconf
/ppp profile
add bridge=bridge change-tcp-mss=yes interface-list=LAN local-address=\
192.168.10.1 name=VPN-Profile only-one=no remote-address=VPN-Pool \
use-encryption=required use-mpls=yes
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=ether9
add bridge=bridge comment=defconf interface=ether10
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge interface=UnrealVLAN
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/interface pptp-server server
set default-profile=VPN-Profile enabled=yes
/ip address
add address=192.168.0.1/24 comment=defconf interface=bridge network=192.168.0.0
/ip dhcp-client
add comment=defconf disabled=no interface=ether1
/ip dhcp-server lease
add address=192.168.0.241 client-id=1:6c:1c:71:fe:6b:d7 comment="CAM - Putia" \
mac-address=6C:1C:71:FE:6B:D7 server=defconf
add address=192.168.0.2 client-id=1:dc:2c:6e:a6:81:57 comment=\
"Mikrotik - CAMERI" mac-address=DC:2C:6E:A6:81:57 server=defconf
add address=192.168.0.242 client-id=1:6c:1c:71:fe:21:f8 comment="CAM - Vhod" \
mac-address=6C:1C:71:FE:21:F8 server=defconf
add address=192.168.0.244 client-id=1:0:18:ae:e4:8b:17 comment=\
"CAM - Gradina 1" mac-address=00:18:AE:E4:8B:17 server=defconf
add address=192.168.0.4 client-id=1:64:a6:51:75:ca:e7 comment="Yordan - GSM" \
mac-address=64:A6:51:75:CA:E7 server=defconf
add address=192.168.0.20 client-id=1:c:2c:54:c9:69:8f comment="Temenujka P20" \
mac-address=0C:2C:54:C9:69:8F server=defconf
add address=192.168.0.11 client-id=1:64:6c:80:57:3d:a1 comment="DELL Laptop" \
mac-address=64:6C:80:57:3D:A1 server=defconf
add address=192.168.0.250 client-id=1:24:52:6a:db:6c:1c comment=NVR \
mac-address=24:52:6A:DB:6C:1C server=defconf
add address=192.168.0.247 client-id=1:5c:a6:e6:48:7:cc comment="CAM - Detska" \
mac-address=5C:A6:E6:48:07:CC server=defconf
add address=192.168.0.246 client-id=1:b4:fb:e3:d6:22:ad comment="CAM - Garaj" \
mac-address=B4:FB:E3:D6:22:AD server=defconf
add address=192.168.0.210 client-id=1:b4:b0:24:bc:64:20 comment=\
"PC - Na 1vi etaj" mac-address=B4:B0:24:BC:64:20 server=defconf
add address=192.168.0.50 client-id=1:f4:39:9:25:5b:94 comment=\
"PC - Na 3ti etaj. Electronic room" mac-address=F4:39:09:25:5B:94 server=\
defconf
add address=192.168.0.7 client-id=1:14:eb:b6:63:60:4f comment="CAM - Etaj 1" \
mac-address=14:EB:B6:63:60:4F server=defconf
/ip dhcp-server network
add address=192.168.0.0/24 comment=defconf gateway=192.168.0.1 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.0.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" \
connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=\
out,none out-interface-list=WAN
add action=accept chain=dstnat dst-address=192.168.0.50 dst-port=80 protocol=\
tcp src-port=80
add action=accept chain=dstnat dst-address=192.168.0.50 dst-port=443 protocol=\
tcp src-port=443
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api-ssl disabled=yes
/lcd interface pages
set 0 interfaces=sfp1,ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8
/ppp secret
add name=YordanVPNService profile=VPN-Profile
/system clock
set time-zone-name=Europe/Sofia
/system identity
set name=Pornhub
/system package update
set channel=long-term
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
There’s nothing visibly wrong with your configuration, there are just slightly unusual things.
Does the issue affect only clients connected to the additional SSID (i.e. to the virtual interface UnrealVLAN) or also clients connected to the master interface?
it does affects on both interfaces.
Did you anonymize the MAC address of ether1 before posting or is it really set to 91:DE:B0:41:43:95? If it is, why?
yes, silly me. I realize it but too late.
Not much is changed actually excep the names of the Wifi and VLAN and the failed address try
the rest is intact.
( just didnt wanna show some names which is a bit.. awfully looking )
An answer “yes” to “A or B, if B, why?” is hard to understand 
. The thing is that the first byte of a MAC address must normally not be odd (as an opposite of even, not as a synonym of strange) because that’s a multicast address indicator. So I suppose you had to set a MAC address of your previous equipment to get your public IP from your ISP, but the MAC address is a normal one, with the LSB of the first byte equal to 0.
OK, so what do the devices that report no internet have in common? If you don’t specify a DNS server on the /ip dhcp-server network row, Mikrotik tells its DHCP clients to use the DNS servers it uses itself, and yours gets the server addresses via DHCP from the ISP. So you may try to add dns-server=192.168.0.1 to that row and let the client devices re-request their IP configuration, but it’s kind of cargo cult advice - I’ve got no real arguments why this should have an impact, it’s just that many devices detect internet availability by sending DNS requests. And my speculation is that if they get (a) public IP of the DNS server(s), they may behave different in some regard.
<3 Gonna try this!
Yet, I just notice something which I havent noticed before. Some of the devices, even those connected trough cables is not getting the router as a gateway..
That sounds as if one of the devices connected to the LAN acted as another DHCP server.
None other, they just getting IP from the router, but somewhat the gateway ( and probably the dns ) is missing. If I put their gateways manually it works.
Here a screenshot, what’s hapening if I left the Network Card without manually seted up IP/GW/DNS, but instead let it on DHCP :
That screenshot clearly states that DHCP server’s address is 192.168.0.2, whereas the Mikrotik has 192.168.0.1. So look what has 192.168.0.2 in your network.
I feel as dumb as rock opposing You.
You are correct.
One mikrotik which I am using to empower the cameras in a Switch configuration ( the 0.2 IP ) had a leftovers from it’s previous life as a DHCP server..
Cant thank you enough !