Hi again!
I make configuration reset without default configuration and then my previous configuration is working perfectly!
Thanks to all. I have solved my problem myself…
on my headinn, I’ve done what mikrotik support has said what to do…but nothing works… I made a vlan on e1 made a vlan for wlan1, made a bridge with ports for vlan-wlan1 and vlan-e1…still nothing works…i’m trying to make three vap’s with them having there own vlan’s…on the bridge nat…mac-protocol is vlan with bridge interfaces in an out
nm…I just realized that my rb 433 has a switch1 IC pus 175C…doesn’t work if u have a C…I need a D…unbelievable..
as many know I'm using a rb433AH with a switch1 IC175D .... I need to know what im missing to make 3 vap's to work with 3 vlan's with using my bridge nat,,,so everything is just at my headinn....but will service the ten customers that I have... heres my config on my testing boards, i'velearned not to do it on the live system....people don't like it when they cant get on.......
[admin@MikroTik1] > export
jan/02/1970 17:10:16 by RouterOS 6.24
software id = 772X-5XGT
/interface bridge
add mtu=1500 name=bridge10
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g disabled=no l2mtu=2290 mode=
ap-bridge ssid=MikroTik
/interface ethernet
set [ find default-name=ether1 ] mac-address=00:0C:42:5E:9D:84
set [ find default-name=ether2 ] mac-address=00:0C:42:5E:9D:85
set [ find default-name=ether3 ] mac-address=00:0C:42:5E:9D:86 master-port=
ether2
/ip neighbor discovery
set ether1 discover=no
/interface vlan
add interface=ether3 l2mtu=1518 name=vlan-local vlan-id=1
add interface=wlan1 l2mtu=2286 name=vlan-wan vlan-id=1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
add hotspot-address=9.9.9.1 name=hsprof1
/ip pool
add name=dhcp_pool2 ranges=10.0.1.2-10.0.1.254
add name=dhcp_pool1 ranges=10.0.6.2-10.0.6.254
add name=hs-pool-4 ranges=9.9.9.2-9.9.9.126
/ip dhcp-server
add address-pool=dhcp_pool2 always-broadcast=yes disabled=no interface=ether2
lease-time=3d name=dhcp1
add address-pool=dhcp_pool1 disabled=no interface=ether3 lease-time=3d name=
dhcp2
add address-pool=hs-pool-4 disabled=no interface=wlan1 lease-time=1h name=
dhcp3
/ip hotspot
add address-pool=hs-pool-4 disabled=no interface=wlan1 name=hotspot1 profile=
hsprof1
/port
set 0 name=serial0
/system logging action
set 1 disk-file-name=""
/ip firewall connection tracking
set enabled=yes
/interface wireless access-list
add interface=wlan1 mac-address=00:15:6D:6A:A4:70
/ip address
add address=10.0.0.1/32 interface=bridge10 network=10.0.0.1
add address=10.0.1.1/24 interface=ether2 network=10.0.1.0
add address=10.0.6.1/24 disabled=yes interface=ether3 network=10.0.6.0
add address=9.9.9.1/25 interface=wlan1 network=9.9.9.0
add address=10.10.10.3/24 interface=vlan-local network=10.10.10.0
add address=10.10.10.4/24 interface=vlan-wan network=10.10.10.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no
interface=ether1
/ip dhcp-server network
add address=9.9.9.0/25 comment="hotspot network" gateway=9.9.9.1
add address=10.0.1.0/24 gateway=10.0.1.1
add address=10.0.6.0/24 gateway=10.0.6.1
/ip dns
set allow-remote-requests=yes max-udp-packet-size=512 servers=192.168.1.1
/ip firewall address-list
add address=192.168.88.0/24 list=wlan1
add address=192.169.89.0/24 list=ether2
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=
"place hotspot rules here" disabled=yes
add chain=forward connection-state=established protocol=tcp
add chain=forward connection-state=related protocol=tcp
add action=drop chain=forward connection-state=invalid protocol=tcp
add chain=forward protocol=tcp
add chain=forward protocol=udp
add chain=forward protocol=icmp
add chain=input protocol=icmp
add chain=input connection-state=established in-interface=ether1
add chain=input connection-state=related in-interface=ether1
add action=drop chain=input in-interface=ether1
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat out-interface=ether1 src-address=
10.0.1.0/24
add action=dst-nat chain=dstnat disabled=yes dst-address=192.168.1.7
to-addresses=10.0.1.0/24
add action=src-nat chain=srcnat disabled=yes src-address=10.0.1.0/24
to-addresses=192.168.1.7
add chain=srcnat disabled=yes out-interface=wlan1
add action=masquerade chain=srcnat comment=dchp_ether2 disabled=yes
src-address=192.169.89.0/24
add action=dst-nat chain=dstnat disabled=yes dst-address=192.168.1.7
to-addresses=192.169.89.0/24
add action=src-nat chain=srcnat disabled=yes src-address=192.169.89.0/24
to-addresses=192.168.1.7
add action=masquerade chain=srcnat disabled=yes out-interface=ether1
add chain=dstnat disabled=yes in-interface=wlan1
add action=masquerade chain=srcnat comment="masquerade hotspot network"
out-interface=ether1 src-address=9.9.9.0/25
add action=masquerade chain=srcnat out-interface=ether1 src-address=
10.0.6.0/24
/ip hotspot user
add name=admin password=Maco583cvs
/ip route
add comment="default route forward 2nd router" distance=1 dst-address=
10.0.0.0/8 gateway=10.0.1.2
add distance=1 dst-address=10.0.0.0/21 gateway=10.0.6.2 pref-src=10.0.1.1
add comment="default route forward to get to 4th router" distance=1
dst-address=192.168.0.0/21 gateway=10.0.1.2
/system identity
set name=MikroTik1
I forgot this part
[admin@MikroTik1] > interface bridge
[admin@MikroTik1] /interface bridge> export
jan/02/1970 17:17:28 by RouterOS 6.24
software id = 772X-5XGT
/interface bridge
add name=bridge-vlan
add mtu=1500 name=bridge10
/interface bridge nat
add chain=srcnat mac-protocol=vlan vlan-id=1
add chain=dstnat mac-protocol=vlan vlan-id=1
/interface bridge port
add bridge=bridge-vlan interface=vlan-local
add bridge=bridge-vlan interface=vlan-wan
add bridge=bridge-vlan interface=wlan1
[admin@MikroTik1] /interface bridge>
cmanciu,
I went looking for information on how to use bridge nat to assign a new VLAN id, but it does not appear to be possible. Perhaps sergejs can come back and provide us with a working example.
According to the wiki, and command completion, the only actions available are:
/interface bridge nat> add action=
accept arp-reply drop dst-nat jump log mark-packet passthrough redirect return set-priority src-nat
There does not appear to be an option to set/add a new vlan tag.
What would be REALLY cool, is if they were to add an option under wireless to set the bridge and vlan-id:
/interface wireless add master-interface=wlan1 ssid=vap1 bridge=lan_bridge vlan-id=10
FYI, there are some interesting VLAN options for wireless present in wireless-fp package. You can set tagging options for interface and for individual clients in access list. I’m not sure if it’s the answer to your problem, because I’m a little lost in this thread. But it may be worth checking out.
thank u guys…after I get a break from my other job, ill check it out thanks again
Mr. Sob…I believe what your on is right…wanta make a script for us and put it on here? sorry been trying to do this for a very long time…im stressed out about the whole thing 
i can only use 900mhz where im at…nothing else works…to many trees! ill try to explain this as best as I can…what I understand I can take a wlan turn it into vap’s…which is done…I just need three of them to work for these customers…width is 10… I cant use 20…all of my equipment is mikrotik…my first board is my headinn, that feed three other mikrotik boards… using bridge nat assign/deassign vlan’s to the vap’s…if I can get this to work…I can send 10megs to each customer using a 60 meg package from a local provider…so each vap will send 10megs a piece to each customer, instead of these three people sharing 10 meg… can anyone help out with a script? I’ve been trying to do this for a very long longtime now…or tell me where I screwed up! thanx
cmanciu,
Until and/or unless Serge comes back to tell us how to do this with the bridge firewall, I think you’re stuck doing it the other way.
So, you have your VAPs created, the only thing left is to bridge them to your VLANs.
/interface wireless
add master-interface=wlan1 name=wlan1.10 ssid=ssid10
add master-interface=wlan1 name=wlan1.20 ssid=ssid20
/interface vlan
add vlan-id=10 interface=ether1 name=ether1.10
add vlan-id=20 interface=ether1 name=ether1.20
/interface bridge
add name=native
add name=vlan20
add name=vlan30
/interface bridge port
add bridge=native interface=ether1
add bridge=native interface=wlan1
add bridge=vlan10 interface=ether1.10
add bridge=vlan10 interface=wlan1.10
add bridge=vlan20 interface=ether1.20
add bridge=vlan20 interface=wlan1.20
Way off topic for this thread, but considering the numbers you mentioned for bandwidth, I think you’ll get some rather unexpected results. If you want to continue this part of the discussion, please start a new thread and PM me with a link, and I’ll be more than happy to help run the numbers with you.