Hi folks,
I would need your help. I’m running a small capsman setup with 1 hAP lite and 2 wAP which are configured as access points. The internet connection was esatblished via a SXT lite5, unfortunately the bandwith was to slow, so I bought a SXT LTE6. When I connect the SXT to the hAP lite, the internet connection isn’t working. For testing purposes I have conneted the SXT via cable to my notebook, here everything works fine.
I would really appreciate your help.
This is my actual config:
oct/02/2019 09:41:17 by RouterOS 6.44.3
software id = HM3G-XC5P
model = RouterBOARD 952Ui-5ac2nD
serial number = 8B08082E65DA
/interface bridge
add admin-mac=xx:xx:xx:3F:A4:5B auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether1 ] advertise=
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full name=
“ether1 - WAN”
set [ find default-name=ether2 ] advertise=
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether3 ] advertise=
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether4 ] advertise=
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether5 ] advertise=
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=2 band=2ghz-g/n channel-width=
20/40mhz-Ce country=croatia distance=indoors frequency=auto
frequency-mode=regulatory-domain mode=ap-bridge ssid=MikroTik-3FA460
wireless-protocol=802.11 wps-mode=disabled
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=
20/40/80mhz-Ceee distance=indoors frequency=auto mode=ap-bridge ssid=
MikroTik-3FA45F wireless-protocol=802.11 wps-mode=disabled
/caps-man configuration
add channel.band=2ghz-g/n channel.control-channel-width=20mhz
channel.extension-channel=Ce channel.frequency=2412,2432,2452,2472
channel.tx-power=13 country=croatia datapath.bridge=bridge mode=ap name=
cfg1 rates.basic=12Mbps rates.supported=
12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps rx-chains=0,1,2
security.authentication-types=wpa2-psk security.encryption=aes-ccm
security.group-encryption=aes-ccm ssid=“Robert” tx-chains=0,1,2
/caps-man interface
add configuration=cfg1 disabled=no l2mtu=1600 mac-address=CC:2D:E0:1F:97:8D
master-interface=none name=“cap1 - OG” radio-mac=xx:xx:xx:1F:97:8D
radio-name=xxxxxx1F978D security.encryption=“”
add configuration=cfg1 disabled=no l2mtu=1600 mac-address=CC:2D:E0:1F:97:EF
master-interface=none name=“cap2 - EG” radio-mac=xx:xx:xx:1F:97:EF
radio-name=xxxxxx1F97EF
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge lease-time=1d
name=defconf
/queue type
add kind=pcq name=“pcq down” pcq-classifier=dst-address
pcq-dst-address6-mask=64 pcq-rate=4M pcq-src-address6-mask=64
add kind=pcq name=“pcq up” pcq-classifier=src-address pcq-dst-address6-mask=
64 pcq-rate=400 pcq-src-address6-mask=64
/queue simple
add disabled=yes max-limit=512k/4M name=pcq queue=“pcq up/pcq down” target=
192.168.88.0/24
/caps-man access-list
add allow-signal-out-of-range=10s comment=“Lenovo X250”
disabled=no mac-address=18:5E:0F:BE:20:F3 ssid-regexp=“”
add allow-signal-out-of-range=10s comment=“iPhone 5s” disabled=no
mac-address=xx:xx:xx:xx:23:B9 ssid-regexp=“”
add allow-signal-out-of-range=10s comment=“Laptop HP6910p” disabled=no
mac-address=xx:xx:xx:xx:B4:12 ssid-regexp=“”
add allow-signal-out-of-range=10s comment=“iPad” disabled=no
mac-address=xx:xx:xx:xx:99:48 ssid-regexp=“”
add allow-signal-out-of-range=10s comment=“iPad” disabled=no
mac-address=xx:xx:xx:xx:80:F9 ssid-regexp=“”
add allow-signal-out-of-range=10s comment=“TV” disabled=no
mac-address=xx:xx:xx:xx:9A:C3 ssid-regexp=“”
add allow-signal-out-of-range=10s comment=“iPhone 6s” disabled=no
mac-address=xx:xx:xx:xx:6F:EF ssid-regexp=“”
add allow-signal-out-of-range=10s comment=“iPhone SE” disabled=
no mac-address=xx:xx:xx:xx:DB:D5 ssid-regexp=“”
add allow-signal-out-of-range=10s comment=“iPhone 6” disabled=no
mac-address=xx:xx:xx:xx:18:B8 ssid-regexp=“”
add allow-signal-out-of-range=10s comment=“iPhone 7+” disabled=no
mac-address=xx:xx:xx:xx:66:A1 ssid-regexp=“”
add allow-signal-out-of-range=10s comment=“iPhone 7” disabled=no
mac-address=xx:xx:xx:xx:F6:AB ssid-regexp=“”
add allow-signal-out-of-range=10s comment=“Laptop HP” disabled=no
mac-address=xx:xx:xx:xx:2F:7E ssid-regexp=“”
add action=accept allow-signal-out-of-range=5s disabled=yes signal-range=
-81..120 ssid-regexp=“”
add action=reject allow-signal-out-of-range=5s disabled=yes signal-range=
-120..-82 ssid-regexp=“”
/caps-man manager
set ca-certificate=auto certificate=auto enabled=yes
/caps-man manager interface
add disabled=no interface=ether2
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf interface=wlan2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=all
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=“ether1 - WAN” list=WAN
/interface wireless cap
set caps-man-addresses=127.0.0.1 interfaces=wlan1
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=
192.168.88.0
/ip cloud
set update-time=no
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=
“ether1 - WAN”
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment=
“defconf: accept established,related,untracked” connection-state=
established,related,untracked
add action=drop chain=input comment=“defconf: drop invalid” connection-state=
invalid
add action=accept chain=input comment=“defconf: accept ICMP” protocol=icmp
add action=drop chain=input comment=“defconf: drop all not coming from LAN”
in-interface-list=!LAN
add action=accept chain=forward comment=“defconf: accept in ipsec policy”
ipsec-policy=in,ipsec
add action=accept chain=forward comment=“defconf: accept out ipsec policy”
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment=“defconf: fasttrack”
connection-state=established,related disabled=yes
add action=accept chain=forward comment=
“defconf: accept established,related, untracked” connection-state=
established,related,untracked
add action=drop chain=forward comment=“defconf: drop invalid”
connection-state=invalid
add action=drop chain=forward comment=
“defconf: drop all from WAN not DSTNATed” connection-nat-state=!dstnat
connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment=“defconf: masquerade”
ipsec-policy=out,none out-interface-list=WAN
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/system clock
set time-zone-name=Europe/Zagreb
/system ntp client
set enabled=yes primary-ntp=80.92.126.65 secondary-ntp=91.206.8.70
server-dns-names=at.pool.ntp.org
/system routerboard settings
set auto-upgrade=yes
/tool graphing interface
add
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN