Transparent WiFi Bridge SXT 5nD r2 switch problem

RouterOS Wireless Networking
1

Hello,

Created WDS Bridge using: http://www.youtube.com/watch?v=XXn97SFH9SM , and meny others.

And it works fine when I test it with two laptops as you can see on Scenario_1. Then I can ping each other threw bridge.

But something bad happens when like in Scenario_2 one of Miktotiks is connected threw switch to lan network providing DHCP serwer and internet gateway.
I can not ping any host on LAN network from laptop on other side of bridge or ping laptop from LAN side.

Traffic stops on ether1 port from LAN side (can not ping any LAN host even from mkrotik console).

Even if I create dhcp client on ether1 port it is not getting any adres. When I run “Torch” tool on ether port I can see that “TX Rate” on ethet1 port is always 0bps.

I’m new with RouterOS so maybe it is just stupid mistake.

Forget to mention that RouterOS licencer are Level 3 on both devices.

Regards.
wds_station.rsc (666 Bytes)
bridge.rsc (960 Bytes)
WTF.PNG

2

On client side in wireless section change mode to station-wds.
In wds section change wds-mode to dynamic.
use nv2 :wink:

3

why WDS? Just enable bridge mode (enabled by default btw) in wireless tab on the AP (bridge) and on the station use station bridge :wink:

4

Wifi is irrelevant. Not secured, not tuned but it is working I can reach M1 (bridge) through M2 (station wds, station bridge - doesn't matter) by wifi.

For now main problem is that there is no traffic to my LAN network.

As You can see on attached sreenshot there is no outgoing traffic on ether1. Also swapped configuration one to another and traffic blocking happens od M1 side.

Anyone knows why bridge works when connected to laptops and not working when connected to switch (doesn't matter which site)?

Regards.


[admin@M1] > export

jan/02/1970 01:43:15 by RouterOS 6.20

software id = E6G6-70RV

/interface bridge
add mtu=1500 name=bridge1
/interface wireless
set [ find default-name=wlan1 ] country=poland disabled=no frequency=5700 l2mtu=2290 mode=bridge ssid=XMT wds-default-bridge=bridge1 wds-mode=dynamic
wireless-protocol=nv2
/interface wireless nstreme
set wlan1 enable-nstreme=yes
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/system logging action
set 2 remember=yes
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=wlan1
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public
/system identity
set name=M1
/system leds
set 0 interface=wlan1



[admin@M2] > export

jan/02/1970 22:43:37 by RouterOS 6.20

/interface bridge
add mtu=1500 name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-a/n country=poland disabled=no frequency=5700 l2mtu=2290 mode=station-wds ssid=XMT wds-default-bridge=bridge1
wds-mode=dynamic wireless-protocol=nv2
/interface wireless nstreme
set wlan1 enable-nstreme=yes
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/system logging action
set 2 remember=yes
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=wlan1
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public
/system identity
set name=M2
/system leds
set 0 interface=wlan1

M1.PNG
M1.PNG1280×800 61.9 KB

5

Well sorry but I have to say wifi is relevant and it does matter the settings. Some time ago it wasnt possible to create a transparent bridge without using WDS as it would behave exactly like you are describing. Now there is this station bridge mode to make transparent bridge on Mikrotik. For me it seems the problem is your bridge is not transparent… Anyone correct me please if I am wrong

if you use bridge - station bridge mode then wds is not required but you also need to have bridge mode = enabled

Please try without WDS and use station bridge

6

Tried the way like You wrote, but it is not working.

If I set M1 to station-bridge mode, then M2 is not able to connect to M1 in any kind of station* mode. Winbox shows "searching for network" state. If I scan for networks on M2, no network is found.

*Why when I do export command and wlan1 is set to station mode, entry: "mode=station" is missing? What You can see in my current config and previous too.

[admin@M1] > export

jan/02/1970 02:14:57 by RouterOS 6.20

/interface bridge
add mtu=1500 name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-onlyn country=poland disabled=no frequency=5700 l2mtu=2290 mode=station-bridge ssid=XMT wds-default-bridge=bridge1 wireless-protocol=nv2
/interface wireless nstreme
set wlan1 enable-nstreme=yes
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/system logging action
set 2 remember=yes
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=wlan1
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public
/system identity
set name=M1
/system leds
set 0 interface=wlan1


[admin@M2] > export

jan/03/1970 21:15:08 by RouterOS 6.20

/interface bridge
add mtu=1500 name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-onlyn country=poland disabled=no frequency=5700 l2mtu=2290 ssid=XMT wireless-protocol=nv2
/interface wireless nstreme
set wlan1 enable-nstreme=yes
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/system logging action
set 2 remember=yes
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=wlan1
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public
/system identity
set name=M2
/system leds
set 0 interface=wlan1

7

Why you are not using quickset?
its quite easy if you want to create transparent ptp bridge.
But before reset to defaults both units

8

Quick set does not change anything, still “0bps” on “Tx Rate” port ether1 in Torch tool.

9

what option did you use? ptp-bridge ? if yes,
post here both devices configuration

10

[admin@M2] > export

jan/02/1970 00:06:47 by RouterOS 6.20

/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-a/n country=poland disabled=no l2mtu=2290 mode=station-bridge ssid=MikroTik wireless-protocol=nv2-nstreme-802.11
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk group-ciphers=tkip,aes-ccm mode=dynamic-keys supplicant-identity=MikroTik unicast-ciphers=
tkip,aes-ccm wpa-pre-shared-key=password wpa2-pre-shared-key=password
/system logging action
set 2 remember=yes
/interface bridge port
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=ether1
/ip address
add address=192.168.1.44/16 interface=ether1 network=192.168.0.0
/ip route
add distance=1 gateway=192.168.1.1
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public
/system identity
set name=M2
/system leds
set 0 interface=wlan1



[admin@M1] > export

jan/02/1970 00:07:29 by RouterOS 6.20

/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-a/n country=poland disabled=no frequency=5700 l2mtu=2290 mode=bridge ssid=MikroTik wireless-protocol=802.11
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=password wpa2-pre-shared-key=
password
/system logging action
set 2 remember=yes
/interface bridge port
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=ether1
/ip address
add address=192.168.1.41/16 interface=ether1 network=192.168.0.0
/ip dhcp-client
add dhcp-options=hostname,clientid interface=bridge1
/ip route
add distance=1 gateway=192.168.1.1
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public
/system identity
set name=M1
/system leds
set 0 interface=wlan1

11

i have no working link without wds to experiment, so its hard to comment why link is not working, because settings are ok.
i would use wds in this config because in your situation its easier to debug. eg.:
ap → wds-bridge; station → station-wds, on both units enable wds dynamic and when link is established you will see dynamically created interface wds1
which means, that you have transparent bridge.
ps. what about wireless connection quality? what signal, ccq?

12

i have no working link without wds to experiment, so its hard to comment why link is not working, because settings are ok.
i would use wds in this config because in your situation its easier to debug. eg.:
ap -> wds-bridge; station -> station-wds, on both units enable wds dynamic and when link is established you will see dynamically created interface wds1
which means, that you have transparent bridge.
ps. what about wireless connection quality? what signal, ccq?

station -> station-wds - not working at all, "searching ..."
ap -> wds-bridge - if You by "ap" mean "ap-bridge " then i cannot use if becouse reuteros is lever 3 licenced.

But if You mean bridge -> wds-bridge configuration is below.
Remember: if bridge is connected to laprops they can ping each other both ways. Problem start whet I attach one side to LAN network, to which I cannot access.
Signal level is no problem becouse anthenas are 10cm from each other.
If You have working transparent bridge configuration, then could sent me configs which I can test?


[admin@M2] > export

jan/02/1970 02:14:19 by RouterOS 6.20

/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-a/n country=poland disabled=no l2mtu=2290 mode=station-wds ssid=MikroTik wds-default-bridge=bridge1 wds-mode=
dynamic wireless-protocol=nv2-nstreme-802.11
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk group-ciphers=tkip,aes-ccm mode=dynamic-keys supplicant-identity=MikroTik unicast-ciphers=
tkip,aes-ccm wpa-pre-shared-key=password wpa2-pre-shared-key=password
/system logging action
set 2 remember=yes
/interface bridge port
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=ether1
/ip address
add address=192.168.1.44/16 interface=ether1 network=192.168.0.0
/ip route
add distance=1 gateway=192.168.1.1
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public
/system identity
set name=M2
/system leds
set 0 interface=wlan1


[admin@M1] > export

jan/02/1970 00:36:22 by RouterOS 6.20

/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-a/n country=poland disabled=no frequency=5700 l2mtu=2290 mode=bridge ssid=MikroTik wds-default-bridge=bridge1
wds-mode=dynamic wireless-protocol=802.11
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=password wpa2-pre-shared-key=
password
/system logging action
set 2 remember=yes
/interface bridge port
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=ether1
/ip address
add address=192.168.1.41/16 interface=ether1 network=192.168.0.0
/ip dhcp-client
add dhcp-options=hostname,clientid interface=bridge1
/ip route
add distance=1 gateway=192.168.1.1
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public
/system identity
set name=M1
/system leds
set 0 interface=wlan1

13

Take a look to wds ptp bridge with L3
AP (sxt 5nd) side:

# nov/07/2014 12:43:31 by RouterOS 6.19
#
/interface wireless security-profiles
set [ find default=yes ] authentication-types="" eap-methods=passthrough \
    group-ciphers=aes-ccm group-key-update=5m interim-update=0s \
    management-protection=disabled management-protection-key="" mode=none \
    mschapv2-password="" mschapv2-username="" name=default \
    radius-eap-accounting=no radius-mac-accounting=no \
    radius-mac-authentication=no radius-mac-caching=disabled \
    radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username \
    static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=\
    none static-key-0="" static-key-1="" static-key-2="" static-key-3="" \
    static-sta-private-algo=none static-sta-private-key="" \
    static-transmit-key=key-0 supplicant-identity=MikroTik tls-certificate=\
    none tls-mode=no-certificates unicast-ciphers=aes-ccm wpa-pre-shared-key=\
    "" wpa2-pre-shared-key=""
add authentication-types=wpa2-psk eap-methods="" group-ciphers=aes-ccm \
    group-key-update=5m interim-update=0s management-protection=allowed \
    management-protection-key="" mode=dynamic-keys mschapv2-password="" \
    mschapv2-username="" name=vv radius-eap-accounting=no \
    radius-mac-accounting=no radius-mac-authentication=no radius-mac-caching=\
    disabled radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username \
    static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=\
    none static-key-0="" static-key-1="" static-key-2="" static-key-3="" \
    static-sta-private-algo=none static-sta-private-key="" \
    static-transmit-key=key-0 supplicant-identity="" tls-certificate=none \
    tls-mode=no-certificates unicast-ciphers=aes-ccm wpa-pre-shared-key="" \
    wpa2-pre-shared-key=zzz
/interface wireless
set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode \
    allow-sharedkey=no ampdu-priorities=0 amsdu-limit=8192 amsdu-threshold=\
    8192 antenna-gain=0 area="" arp=enabled band=5ghz-a/n basic-rates-a/g="" \
    bridge-mode=enabled channel-width=20/40mhz-Ce compression=no country=\
    lithuania default-ap-tx-limit=0 default-authentication=yes \
    default-client-tx-limit=0 default-forwarding=yes dfs-mode=none \
    disable-running-check=no disabled=no disconnect-timeout=3s distance=14 \
    frame-lifetime=0 frequency=5560 frequency-mode=manual-txpower \
    frequency-offset=0 guard-interval=any hide-ssid=no ht-basic-mcs=\
    mcs-0,mcs-15 ht-supported-mcs="mcs-0,mcs-1,mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,m\
    cs-7,mcs-8,mcs-9,mcs-10,mcs-11,mcs-12,mcs-13,mcs-14,mcs-15,mcs-16,mcs-17,m\
    cs-18,mcs-19,mcs-20,mcs-21,mcs-22,mcs-23" hw-fragmentation-threshold=\
    disabled hw-protection-mode=none hw-protection-threshold=0 hw-retries=7 \
    interworking-profile=disabled l2mtu=1600 mac-address=XX:XX:XX:XX:XX:XX \
    max-station-count=5 mode=bridge mtu=1500 multicast-buffering=enabled \
    multicast-helper=default name=wlan1 noise-floor-threshold=default \
    nv2-cell-radius=15 nv2-noise-floor-offset=default nv2-preshared-key=\
    XXXXXXX nv2-qos=default nv2-queue-count=2 nv2-security=enabled \
    on-fail-retry-time=100ms preamble-mode=both proprietary-extensions=\
    post-2.9.25 radio-name=ap rate-selection=advanced rate-set=default \
    rx-chains=0,1 scan-list=default security-profile=AAAA ssid=YYYYY \
    station-bridge-clone-mac=00:00:00:00:00:00 supported-rates-a/g=\
    18Mbps,54Mbps tdma-period-size=2 tx-chains=0,1 tx-power-mode=default \
    update-stats-interval=disabled vlan-id=1 vlan-mode=no-tag wds-cost-range=\
    50-150 wds-default-bridge=br0 wds-default-cost=100 wds-ignore-ssid=no \
    wds-mode=dynamic wireless-protocol=nv2 wmm-support=enabled
/interface wireless manual-tx-power-table
set wlan1 manual-tx-powers="1Mbps:17,2Mbps:17,5.5Mbps:17,11Mbps:17,6Mbps:17,9M\
    bps:17,12Mbps:17,18Mbps:17,24Mbps:17,36Mbps:17,48Mbps:17,54Mbps:17,HT20-0:\
    17,HT20-1:17,HT20-2:17,HT20-3:17,HT20-4:17,HT20-5:17,HT20-6:17,HT20-7:17,H\
    T40-0:17,HT40-1:17,HT40-2:17,HT40-3:17,HT40-4:17,HT40-5:17,HT40-6:17,HT40-\
    7:17"

Client (rb911g) side:

# nov/07/2014 12:36:10 by RouterOS 6.19
#
/interface wireless security-profiles
set [ find default=yes ] authentication-types="" eap-methods=passthrough \
    group-ciphers=aes-ccm group-key-update=5m interim-update=0s \
    management-protection=disabled management-protection-key="" mode=none \
    mschapv2-password="" mschapv2-username="" name=default \
    radius-eap-accounting=no radius-mac-accounting=no \
    radius-mac-authentication=no radius-mac-caching=disabled \
    radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username \
    static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=\
    none static-key-0="" static-key-1="" static-key-2="" static-key-3="" \
    static-sta-private-algo=none static-sta-private-key="" \
    static-transmit-key=key-0 supplicant-identity=MikroTik tls-certificate=\
    none tls-mode=no-certificates unicast-ciphers=aes-ccm wpa-pre-shared-key=\
    "" wpa2-pre-shared-key=""
add authentication-types=wpa2-psk eap-methods="" group-ciphers=aes-ccm \
    group-key-update=5m interim-update=0s management-protection=allowed \
    management-protection-key="" mode=dynamic-keys mschapv2-password="" \
    mschapv2-username="" name=AAAA radius-eap-accounting=no \
    radius-mac-accounting=no radius-mac-authentication=no radius-mac-caching=\
    disabled radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username \
    static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=\
    none static-key-0="" static-key-1="" static-key-2="" static-key-3="" \
    static-sta-private-algo=none static-sta-private-key="" \
    static-transmit-key=key-0 supplicant-identity="" tls-certificate=none \
    tls-mode=no-certificates unicast-ciphers=aes-ccm wpa-pre-shared-key="" \
    wpa2-pre-shared-key=zzz
/interface wireless
set [ find default-name=wlan1 ] adaptive-noise-immunity=client-mode \
    allow-sharedkey=no antenna-gain=0 area="" arp=enabled band=5ghz-a/n \
    basic-rates-a/g=6Mbps bridge-mode=enabled channel-width=20/40mhz-ht-above \
    compression=no country=lithuania default-ap-tx-limit=0 \
    default-authentication=yes default-client-tx-limit=0 default-forwarding=\
    yes dfs-mode=none disable-running-check=no disabled=no \
    disconnect-timeout=3s distance=dynamic frame-lifetime=0 frequency=5560 \
    frequency-mode=manual-txpower frequency-offset=0 hide-ssid=no \
    ht-ampdu-priorities=0 ht-amsdu-limit=8192 ht-amsdu-threshold=8192 \
    ht-basic-mcs=mcs-0,mcs-1,mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7 \
    ht-guard-interval=any ht-rxchains=0,1 ht-supported-mcs="mcs-0,mcs-1,mcs-2,\
    mcs-3,mcs-4,mcs-5,mcs-6,mcs-7,mcs-8,mcs-9,mcs-10,mcs-11,mcs-12,mcs-13,mcs-\
    14,mcs-15,mcs-16,mcs-17,mcs-18,mcs-19,mcs-20,mcs-21,mcs-22,mcs-23" \
    ht-txchains=0,1 hw-fragmentation-threshold=disabled hw-protection-mode=\
    none hw-protection-threshold=0 hw-retries=7 interworking-profile=disabled \
    l2mtu=2290 mac-address=XX:XX:XX:XX:XX:XX max-station-count=2007 mode=\
    station-wds mtu=1500 multicast-buffering=enabled multicast-helper=default \
    name=wlan1 noise-floor-threshold=default nv2-cell-radius=30 \
    nv2-noise-floor-offset=default nv2-preshared-key=XXXXXXX nv2-qos=default \
    nv2-queue-count=2 nv2-security=enabled on-fail-retry-time=100ms \
    periodic-calibration=default periodic-calibration-interval=60 \
    preamble-mode=both proprietary-extensions=post-2.9.25 radio-name=station \
    rate-selection=advanced rate-set=default scan-list=default \
    security-profile=AAAA ssid=YYYYY station-bridge-clone-mac=\
    00:00:00:00:00:00 supported-rates-a/g=\
    6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps tdma-period-size=2 \
    tx-power-mode=default update-stats-interval=disabled wds-cost-range=\
    50-150 wds-default-bridge=wds-bridge wds-default-cost=100 \
    wds-ignore-ssid=no wds-mode=dynamic wireless-protocol=any wmm-support=\
    disabled
/interface wireless manual-tx-power-table
set wlan1 manual-tx-powers="1Mbps:17,2Mbps:17,5.5Mbps:17,11Mbps:17,6Mbps:17,9M\
    bps:17,12Mbps:17,18Mbps:17,24Mbps:17,36Mbps:17,48Mbps:17,54Mbps:17,HT20-0:\
    17,HT20-1:17,HT20-2:17,HT20-3:17,HT20-4:17,HT20-5:17,HT20-6:17,HT20-7:17,H\
    T40-0:17,HT40-1:17,HT40-2:17,HT40-3:17,HT40-4:17,HT40-5:17,HT40-6:17,HT40-\

On both devices ether and wlan are included into bridges.
both with wds dynamic.
on 13 km distance works like charm :wink: