Hi,
I have installed a mikrotik router 95 series on an existing router as a subnet to get more IP’s. I have made following settings but I am unable to get more than 175 IP’s. I needed around 1000 IP’s but as soon as I hook up more than 175 IP’s the network does not accept more IP and crashes everything until I remove the devices.
Please help me in getting this resolved. I was hoping somebody would be able to guide me in the right direction. Thanks.
I guess that the problem is that no one of those capable of analysing your trouble uses the QuickSet.
So please go to the Terminal window and follow the instruction in my automatic signature (type /export hide-sensitive in that window, copy-paste the output etc.).
In the better case the QuickSet has configured something else than what you’ve filled in.
It would also be fine to see the log from the time when you attempt to add the 176th device.
Got it. I will get that data very soon. thank you.
Please see below data. I’m not able to get more than 175 IPs. Help is much much appreciated. Thanks
——————————————————————-
[admin@MikroTik] > /export hide
/interface bridge
add admin-mac=YY auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether3 ] master-port=ether2-master
set [ find default-name=ether4 ] master-port=ether2-master
set [ find default-name=ether5 ] master-port=ether2-master
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=MikroTik-EBF65D wireless-protocol=802.11
/ip neighbor discovery
set ether1 discover=no
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=10.0.0.3-10.0.255.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=bridge comment=defconf interface=wlan1
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip accounting
set threshold=500
/ip address
add address=10.0.0.1/16 comment=defconf interface=ether2-master network=10.0.0.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=10.0.0.0/16 comment=defconf gateway=10.0.0.1 netmask=16
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/system clock
set time-zone-name=MARS/ELONMUSKCITY
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=bridge
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=bridge
Change From:
/ip address
add address=10.0.0.1/16 comment=defconf interface=ether2-master network=10.0.0.0
To:
/ip address
add address=10.0.0.1/16 comment=defconf interface=bridge network=10.0.0.0
Not related, but you might also want to change from:
/ip dns static
add address=192.168.88.1 name=router.lan
To:
/ip dns static
add address=10.0.0.1 name=router.lan
Thank you CZFan. So this will help get me more than 1500 IP? Do you think this router is robust enough to handle that? Please let me know. Thanks
Do you also think the NAT should be checked or unchecked in the configuration? Thanks
One thing is not clear to me, what exactly crashes and how?
I have no idea. It’s very strange it’s dojng that. I have this as a subnet on the main router provided by the ISP. The router provided by ISP is complete BS and doesn’t take more than 500 IP. The entire system crashes if it goes more than 500 some IPs. So I bought this router thinking it will handle more because I have heard good things about mikrotik. But it doesn’t take more than 175 for some reason. It crashes the system of it goes more than that. One more thing to note is that the IP assignment starts from the back. That means the last IP will get assigned to the first device first and so on. I’m really hoping the config from CZFan solves this. Because I have 5 Mikrotik routers at this point because I needed 1500 ips. I have created 5 subnet at the moment and it’s a mess when it comes to monitoring. Thanks and please let me know if there is any other suggestion. Thanks
What do you mean by “hook up more than 175 IPs”?
Do you mean you’ve got 175 devices connecting to the 2.4GHz WLAN? Or you’ve got more than 175 devices connecting to the wired port?
Are you handing out the IPs by DHCP, or are these statically assigned?
And we need more explanation what “crashes everything” means — describe the symptoms, what does and doesn’t work, whether you can ping the router from existing devices or whether it stops working on new devices, whether you can ping the Internet, reach the management interface of the MikroTik, etc — because we’re just a bunch of random people on the forum trying to help you.
Do you have some specific reason to run a pre-6.41 version of the software? There is nothing complex about your configuration so no trouble to be expected when migrating to 6.43.2, and it is well possible that there is some bug in 6.40.4 which causes the issue, so I would upgrade to 6.42.3 as the first step.
It may easily not be 175 IPs but 175 wireless devices, or the 176th device may be doing something weird if you always test using the same device. As @maznu has already said, your description of what happens and under what exact confitions is too general.
Nothing that should cause any trouble exists in your simple configuration, but there may be issues like not enough RAM for the firewall’s connection tracker if each of the 175 devices sets up lots of connections, or you may run out of free TCP and/or UDP ports on the WAN IP as you NAT these connections. So while you have those 175 devices connected, what does /system resource print and /ip firewall connection print count-only show?
BTW, the hAP has a USB port, so you can use an USB-to-serial adaptor to connect a serial console to the device, so if the issue only affects the network connectivity, you may still be able to see the log and current status that way, or at least an error message explaining what happened.
So you don’t think I need to change the config suggested by CZFAN? Also, should NAT be unchecked or checked? When I upgrade the firmware will it go back to factory settings? Thanks
Of course you do need to do the change suggested by @CZfan, the IP address and the dhcp server must be both bound to the bridge, not to one of its slave members. I just didn’t expect you not to do that yet as he’s suggested it already yesterday. So I should have written “except the issue already pointed out by @CZFan, …”
What surprises me, however, is that you’ve ended up with such configuration if you were using Quickset all the time, because Quickset should not make such a mistake if you’ve used the “home AP” setup and haven’t made any modifications to it using WebFig.
And now as thinking about it, if your WAN address eventually also comes from the 10.0.0.0/16, your issue may be that one of the devices connected to the LAN side gets the IP address of the WAN gateway, so what does /ip route print and /ip address print show?
Normally, you can upgrade without need to set factory defaults. There is a theoretical chance that the upgrade could fail and then you would need to set factory defaults, but you haven’t done too many changes so it should not be a big deal to make these changes again.
The NAT must be set somwehere (not necessarily on your Mikrotik) if you want your LAN devices to access the Internet. If there are proper routes elsewhere in your infrastructure, the NAT on Mikrotik itself may not be necessary.
Thank you. So when I made the changes via the quickset it was under “WISP AP” and not under “Home AP”. Just mentioning incase that changes things
As already said, little people on this forum who can advise something use the Quickset. I cannot tell you the difference between the “WISP AP” and “Home AP” templates. In any case, having an IP address on a slave interface is a wrong configuration, so if Quickset itself has attached the IP address to ether2-slave and the DHCP server to bridge using the WISP AP template, that template it is simply wrong.
So do the change suggested by @CZFan and use /ip address print to check whether the WAN IP address you’ve got from the ISP’s DHCP server doesn’t begin with 10.
I know this is a very old topic but I never got to make the changes suggested by the members. I just kept buying more mikrotik routers and daisy chained them. Now it is at a point where I have too many Mikrotik routers and still too many IPs and there are times where I still overload them.
I want to request if somebody can walk me through or prepare a video on how I can change the IPs in the terminal. I have no clue how to do this and I need to take advantage of this great piece of device by making a small little change so I can extend the number of IPs I have.
Would somebody be able to please help me?
I am very new at this so my level is at 0 of what people write here but I will try my best to follow the instructions.
Thank you.
My suggestion will be for you to attend MTCNA training at an accredit Mikrotik trainer or hire services of a certified Mikrotik consultant
I have few questions before think about your situation:
Tips:
Disable it:
/ip accounting set threshold=500
Using terminal: /ip accounting set enabled=no