SXT Lite2 (RouterOS 5.25) - firewall setup

[Mike33]

I need to do the following:

1. configure the device so that it served as the access point;

2. filter traffic passing between the wireless and ethernet segments.

I combined wireless and ethernet ports in the bridge and try to configure the firewall.
I found that in this case there are two firewalls:

1. /interface bridge filter
2. /ip firewall filter

Tell me please, what the difference between them?
It’s really two different independent firewalls or the two interfaces to the same firewall?
If they are two different firewalls, whether there can be problems with the simultaneous operation of both?

[Mike33]

help please!

[normis]

SXT Lite cannot be configured to be an access point. It is a CPE (client) device only

Have you looked at the manual?

[Mike33]

@normis

SXT Lite cannot be configured to be an access point. It is a CPE (client) device only
Have you looked at the manual?

Yes.
I’ve done everything according to the instructions - http://wiki.mikrotik.com/wiki/Manual:TOC

I did a full reset, and then entered the commands:

/interface ethernet set 0 name=ether_if
/interface wireless set 0 name=wi-fi_if

/ip address set [/ip address find interface=ether_if] address=192.168.100.150/24

/interface wireless security-profiles set [ find default=yes ] mode=static-keys-required static-algo-0=104bit-wep static-key-0=".........................." static-transmit-key=key-0

/interface wireless set 0 mode=ap-bridge ssid="........" wireless-protocol=802.11 band=2ghz-b channel-width=20mhz country=russia frequency-mode=regulatory-domain bridge-mode=disabled security-profile=default allow-sharedkey=yes default-authentication=no default-forwarding=no hide-ssid=yes max-station-count=20

/interface wireless access-list add mac-address=00:00:00:00:00:00 authentication=no forwarding=no interface=all
/interface wireless access-list add mac-address=................ authentication=yes forwarding=no interface=all place-before=0
/interface wireless access-list add mac-address=................ authentication=yes forwarding=no interface=all place-before=0

/interface bridge remove [/interface bridge find]
/interface bridge add name=bridge_if
/interface bridge port add bridge=bridge_if interface=ether_if edge=yes
/interface bridge port add bridge=bridge_if interface=wi-fi_if edge=yes

As a result, I was connected to the wi-fi-network using a laptop and a specialized data collection terminal.

[Mike33]

@Mike33

I found that in this case there are two firewalls:

1. /interface bridge filter
2. /ip firewall filter

Tell me please, what the difference between them?
It’s really two different independent firewalls or the two interfaces to the same firewall?
If they are two different firewalls, whether there can be problems with the simultaneous operation of both?

help please!

[Mike33]

Thank you all. Everything works fine.
I was helped here – http://forum.nag.ru/forum/index.php?showtopic=86164
So probably MikroTik will have a new regular customer

[janisk]

@Mike33

I found that in this case there are two firewalls:

1. /interface bridge filter
2. /ip firewall filter

Tell me please, what the difference between them?
It’s really two different independent firewalls or the two interfaces to the same firewall?
If they are two different firewalls, whether there can be problems with the simultaneous operation of both?

these are two independent things. However, you can set bridge to pass through ip firewall by setting appropriate settings. see wiki.mikrotik.com for more details.

[Mike33]

@janisk

@Mike33

I found that in this case there are two firewalls:

1. /interface bridge filter
2. /ip firewall filter

Tell me please, what the difference between them?
It’s really two different independent firewalls or the two interfaces to the same firewall?
If they are two different firewalls, whether there can be problems with the simultaneous operation of both?

these are two independent things. However, you can set bridge to pass through ip firewall by setting appropriate settings. see wiki.mikrotik.com for more details.

thx!

[zoro238]

I bought a sxt lite 2 but refuses to work on ap
What do I do works AP ??