Hi Everyone,
I use eth01 as my main connection and want to use eth02 which I have connected to a switch so i can use internet on other devices in house but i dont seem to be getting internet or dns?. I have created a bridge and the link is showing as active but it doesnt shows a connection but its not able to access the internet.I also would like to know how to set up wifi on this device if possible?. If anyone has an easy to understand guide that would be great.
The SXT-LTE6 should have a default configuration as "LTE CPE", i.e. with the LTE set as WAN to connect to the ISP and the two ether ports already assembled in a bridge and set as LAN, but maybe that particular device model has a different default because ether2 is also PoE out .
Post your current configuration, instructions here:
and surely someone will be able to spot where the issue is.
For wifi it will be a bit tougher 
, as the SXT LTE6 does not have a wi-fi radio, you will need a separate access point device.
How do I post my config here and is there info I need to remove when uploading. I deleted the bridge and now will have to factory reset as I didn’t do it in safe mode and foolishly didn’t back up.I will reset tomorrow and set up again and try again.
Good, then post your configuration just after the reset, so it is "clean", you only have to obfuscate the serial of the device and the MAC address (even if they are not that much "sensitive" data), all the rest should be "default".
Hi I can now access the router but cant access the internet. How do i export my config?.
Well, somehow you posted here, so you do have some access to the internet.
You follow the instruction given?
Or you mean that you cannot access internet from the same device that you use for connecting to the Mikrotik?
The export is saved as a file on the device you use to access the Mikrotik, it is a plain text file, with the .rsc extension (you can open it in any plain text editor), you need to find a way to copy that file to the device you use that has internet access, and then you upload it (or better copy/paste its contents inside CODE tags).
So I can access the router via winbox app or browser via 192.168.1.1 but the router itself doesn’t allow me to access the internet.so if I go to google browser and try and access a page it doesn’t work.so I don’t know if it’s proxy or dns or something like that.I can see the LTE side is accessing cell towers and getting a signal but I can’t load a web page if I turn off Wi-Fi from my normal home network I.e BT.
Yep, likely you have some mis-configuration.
But without seeing your configuration it is a guessing game with improbable success.
A very common issue with LTE connection is the settings relative to the APN.
In a nutshell:
See also:
Ok I will take another look later at the settings.I will also look at the guide on how to upload my config to this post. I basically want on eth01 an internet connection that goes upstairs to a switch that goes to a laptop and a to then on eth02 to connect to a switch which multiple devices connect to the internet as follows, TV ,firestick,PS5,Deco wireless hub.so I need internet access on both Ethernet connections.
Here is my config i have the internet working now just cant connect to internet on etho2
# 2026-01-13 17:36:37 by RouterOS 7.20.6
# software id = ABCDEFG1
#
# model = RBSXTR
# serial number = SENSITIVE
/interface bridge
add admin-mac=SENSITIVE auto-mac=no comment=defconf name=bridge
/interface lte
set [ find default-name=lte1 ] allow-roaming=no band=3,20
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=default-dhcp ranges=192.168.188.10-192.168.188.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge name=defconf
/queue type
add fq-codel-ecn=no kind=fq-codel name=fq-codel-ethernet-default
/queue interface
set ether1 queue=fq-codel-ethernet-default
set ether2 queue=fq-codel-ethernet-default
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=ether2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=lte1 list=WAN
/ip address
add address=192.168.188.1/24 comment=defconf interface=bridge network=\
192.168.188.0
/ip dhcp-server network
add address=192.168.188.0/24 comment=defconf dns-server=192.168.188.1 \
gateway=192.168.188.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.188.1 comment=defconf name=router.lan type=A
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related hw-offload=yes
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
ipsec-policy=out,none out-interface-list=WAN
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" \
dst-port=33434-33534 protocol=udp
add action=accept chain=input comment=\
"defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
ipsec-esp
add action=accept chain=input comment=\
"defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment=\
"defconf: drop everything else not coming from LAN" in-interface-list=\
!LAN
add action=fasttrack-connection chain=forward comment="defconf: fasttrack6" \
connection-state=established,related
add action=accept chain=forward comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment=\
"defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
ipsec-esp
add action=accept chain=forward comment=\
"defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment=\
"defconf: drop everything else not coming from LAN" in-interface-list=\
!LAN
/system clock
set time-zone-name=Europe/London
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
Good, it seems to me a pretty much default configuration.
I cannot see anything that differentiates ether1 from ether2.
The connection to internet is not available on BOTH ether1 and ether2?
Your LTE APN settings are missing/incomplete? (i.e. you are using network apn?)
Typical settings should be:
/interface lte apn
add apn=<your ISP APN> use-network-apn=no
/interface lte
set [ find default-name=lte1 ] allow-roaming=yes apn-profiles=\
<your ISP APN> band="" sms-read=no
Selecting bands and switching allow-roaming to no can be done, if needed, later, though I think the issue is the missing APN, or maybe is it only the following missing DNS server?
Also this:
/ip dns
set allow-remote-requests=yes
should have servers set, example:
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
Try first adding the DNS server, and if it still does not work, change the lte apn settings.
I’m getting internet now I fixed that part it’s just the fact I can’t get internet on eth02 so I. can share the connection to other devices like I do via a switch on eth01. Chat Support suggested the below steps via the chat function “The Dude”
To get internet on ether2 on SXT LTE6, use LTE Passthrough to ether2.
Check that the modem supports Passthrough: /interface/lte/show-capabilities [find]
Configure APN Passthrough to ether2 and apply it to the LTE interface: [admin@MikroTik] > /interface lte apn add name=interface2 apn=apn1 passthrough-interface=ether2 [admin@MikroTik] > /interface lte set lte1 apn-profiles=interface2
On the device connected to ether2, enable a DHCP client. Our router will create a dynamic DHCP server on ether2 (default lease-time is 1m). If you need a longer lease-time, create your own DHCP server on ether2.
Notes:
Passthrough works for one host. You can lock it to a specific MAC if there are multiple hosts.
You cannot access the LTE router via the public LTE IP or from the passthrough host. Use an additional link (e.g., a VLAN between the LTE router and the host) for management.
It I don’t really understand that to be honest?.
Are they suggesting I would need an additional modem?.
Well, what you got from that doesn't make sense to me as well.
You have both ports ether1 and ether2 assembled into a bridge, so there isn't any difference between ether1 and ether2, they don't actually exist anymore as "Independent" or "self-standing" only the bridge has settings (IP address, DHCP server, etc.).
Maybe there Is a hardware issue of some kind.
If you get a portable PC set as DHCP client there should be no differences when you connect It to any of the two ethernet ports.
So if I set up laptop and set the ethernet connection to be a dhcp client it should work on both eth01 and eth02?.
Yes, work or not work on both in the same manner.
Would this work in this YouTube video?.