Strange WiFi Setup

I have an Audience LTE6 (not sure if this is the correct model name) and an RB4011iGS+RM. I want to use the Audience to wirelessly connect to an ISP router that I have no admin control over. I also want to use the RB4011iGS+RM for its Ethernet ports. I’m guessing that using these two in tandem would qualify as a bridge, but am not sure if I even have that right. I’m in no position to have my own Internet service at this time, due to ISP and location restrictions. I’m also forbidden from running an Ethernet cable to the IPS router, due to the fact that it sits in the middle of a living room. The house owners will not have it, sadly. If you have any suggestions on how I should go about this, please let me know. I’m all ears.

My suggestions :

Setup Audiance :

I would configure the Audience as your Main Router.
Use one of the wlan-Interfaces to connect to the ISP-Router as “station”.
Configure the needed Services on it like DHCP-Server, DNS, Firewall, NAT, etc…
Bridge all remaining Interfaces together for your local Network.


Setup RB4011iGS:
Bridge all Interface together
Connect a cable between audiance and RB4011

Here is what I have so far:

10.0.0.0/8 (Local Bridge)

Gateway (WAN) :: Router
bridgeLocal Gateway 10.12.7.1
wlan1
wlan2 WWAN port 10.12.7.2 / 192.168.1.2
wlan3 WLAN port –
eth1 Bridge (Daisy-chain) –
eth2

Small_Bridge (LAN) :: Bridge
ether1-9 Bridge (Internal) 10.12.7.3
ether10 WAN port (PoE) –
sfp-sfpplus1 Bridge (Daisy-chain) –


192.168.1.0/24 (Untrusted WLAN DMZ)

DC_Gateway (WLAN) :: Bridge
wlan2 WWAN port (NAT) 192.168.1.2 / 10.12.7.2


Please let me know of any of this should be changed.

EDIT: Looks like hard Tabs don’t show up after post is submitted :frowning:

Step-by-Step Audiance
This is a Guide how I would configure the Device
If i had to Set it up from scratch.

Step 0: Securing your Router
→ Give your user “admin” a password
→ Firewall
→ limit Services
→ etc…

Step 1: Create Bridge

 /interface bridge
add name=bridge1

Step 2: Assign IP-Address

/ip address
add address=10.0.0.1/24 interface=bridge1 network=10.0.0.0

Step 3: Create DHCP-Server

/ip pool
add name=dhcp_pool1 ranges=10.0.0.100-10.0.0.199
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=bridge1 name=dhcp1
/ip dhcp-server network
add address=10.0.0.0/24 dns-server=10.0.0.1 gateway=10.0.0.1

Step 4: Allow DNS-Request

/ip dns
set allow-remote-requests=yes

Step 5: Interface-List
(Assuming interface wlan1 is the WAN)

/interface list
add name=WAN
/interface list member
add interface=wlan1 list=WAN

Step 6: NAT

/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN

Step 7: Assign Interfaces to Bridge
(Assuming interface wlan1 is the WAN)

/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=wlan2

Step 8: Configure “WAN”
(Assuming interface wlan1 is the WAN)

  • Configure wlan1 as “station”
  • Set DHCP-Client

Step 9 : Test
If you connect a Computer to the Audiance you should be able to PING for exemple 8.8.8.8
The Router Itself should alsoo be able to PING for exemple 8.8.8.8

Step-by-Step RB4011
This is a Guide how I would configure the Device
If i had to Set it up from scratch.

Step 0: Securing your Router
→ Give your user “admin” a password
→ Firewall
→ limit Services
→ etc…

Step 1: Create Bridge

 /interface bridge
add name=bridge1

Step 2: Assign Interfaces to Bridge


/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether6
add bridge=bridge1 interface=ether7
add bridge=bridge1 interface=ether8
add bridge=bridge1 interface=ether9
add bridge=bridge1 interface=ether10

Step 3 : Test
After connecting a cable between the Audiance and the RB4011
If you connect a Computer to the RB4011 you should be able to PING for exemple 8.8.8.8

Sorry for taking so long to get back to you. My first step was resetting the Audience to factory settings, to make sure no previous attempts/bad config options got in the way. After applying the settings for the Audience (connected to my laptop, via Ethernet), I went on and disabled WiFi, to test the connection. For the first 2 minutes, Windows showed it as a network with Internet access. Then, I tried pinging Google and Cloudflare DNS servers - unable to resolve. I checked the DNS settings, but everything looked correct. I had set the DNS server(s) to 1.1.1.1, 1.0.0.1, and 8.8.8.8 . But DNS resolution still failed :frowning: On top of that, when I tried manually setting DNS servers in Windows networking settings, the network’s status changed to No Internet. The router’s UI is also inaccessible half the time, even when connected via Ethernet. Keep getting Internal Server Error on the web UI, and ERROR: could not connect to <MAC_ADDRESS> when I try connecting via WinBox. Maybe I should have gotten an RB4011IGS5HAC instead, to simplify my setup. My previous router was a combo device, and I doubt that I’ll be using the full capabilities of the Audience tri-band WAP if I ever get it working as initially intended.

Good Morning,

Did you configure the wlan1-Interface ?
I edited my Step-by-Step Guide to include this now …
(edited Step 8 and 9 for the Audiance)


If it is not working, maybe there is still a small mistake somewhere..
Simply post the config of the Mikrotik device and we will Check-It
(/export hide-sensitive file=anynameyouwish)

Just got around to checking the network config today. WAN interface autoconfig’d itself as “station”. I’ll see if I can post more info later this week.

Why an RB4011 if you are not going to use it for its routing. Makes zero sense to me???
You would be better off with a managed switch and sell the RB4011 or give it to someone that needs routing.
If you want to use wifi, dont use the crappy wifi on RB, and get some real wifi6 access points.

Thanks for the advice. Though at this point, it’s a little late for me :frowning: I’ll have to keep that in mind the next time I need a networking upgrade.

I managed to get it working after manually changing one of the routes. I can send screenshots of my settings tomorrow if you wanna see :slight_smile: I’ll be reapplying some IP reservations and port forwarding rules in a bit…