Why can't winbox see Audience device?

RouterOS Wireless Networking
1

I have my audience device connected to CCR2004 router
I can ping the ip of the audience device on management VLAN1 with ip 192.168.11.253 from the CCR2004 router with VLAN1 ip of 192.168.11.254
when i connect to the audience device via wired ethernet cable, i can ping the CCR2004 router also and can also get to the internet

I can even the wireless SSID on the available wireless networks from laptop
When i try to connect it does not connect and says “no internet connection”
So need help with that also, but first why can’t winbox connect?

But winbox can not see this audience device
Why?

2

Too little information.

Here are some facts:

  • MNDP (Mikrotik’s discovery protocol) uses broadcasts … so it doesn’t traverse router and only works within same (V)LAN. It is configured under /ip/neighbour/discovery-settings, one can limit it to work only off select interfaces
  • winbox over MAC only works within same (V)LAN as it uses ethernet directly (it’s not routable). Which means that if winbox can not discover mikrotik device, it’s likely MAC connection is not possible either
  • winbox over MAC can be limited by configuring things under /tool/mac-server/ and subtree. However there are a few other settings which might block it.
  • winbox over IP is subject to firewall rules (on management computer, routers on the path and managed mikrotik device)
  • winbox over IP is subject to routing (mis)configuration on all routers on the way between winbox executable and managed mikrotik device

Since you seem to struggle configuring the whole lot (CCR, Audience, VLANs, …), it’s really hard to pin the exact point of failure in your case.

3

I have 2 other CRS switches i am able to connect fine
So why is audience differemt
Again i can ping audience IP from CCR, CRS and vice versa
audience can reach internet

surprised winbox cant connect to this thing until i connect directly to it via wired
i mean i have done similar VLAN setup as other CRS switches, and i can even see the SSID to connect to
Although am not able to connect to th wireless, as it says “no internet connection” probably because it cant get ip address from dhcp server on CCR
but that is another and net question


so i mean with all i have setup, i would expect winbox to connect same way i can with the CCR and the CRS switches

4

Can someone please help
How is it that i can see wifi SSID but winbox can not see Audience AP
What do i check to fix this?

Audience is connected to CCR router same way CRS switches are connected but winbox cant see Audience AP
It can everything else
All devices can all ping each other and all devices can reach the internet

And yes they all in same VLAN1 management VLAN and can all ping each others address, CCR, CRS and Audience
But winbox cant see audience

5

Are you able to connect to Winbox via devices that are directly connected to Audience via WiFi or downlink ports (meaning, by not traversing the uplink to the CCR/CRS/etc)?

6

That is another issue i have, the wifi SSID is on and i can see it but when i try to connect, i get “no internet connection”
I also notice whenever i try to connect to the wifi it cant get DHCP address or something, so maybe i have something off somewhere

The DHCP address is on different VLAN3 and CCR router is DHCP server for the VLAN3

7

I know on my cap ac, using it as a pure Access Point was a bit frustrating at first, since the device tries to operate in a “router” mode, and the quick webfigs didn’t make things any better.

The default settings (or whatever I clicked around with in webfig/quickWebfig) almost always made it difficult to access the AP’s management interface (either via web or WinBox) from the “uplink” side, so I always had to access the management interface from the “WiFi” or “downlink” side of things. I eventually resolved the issue, but I don’t recall how (something to do with the default bridge not including the uplink port, iirc).

If your setup has similar symptoms, perhaps we had similar configuration issues. If not, then I am not really sure.

8

I did not use default ocnfig, i wiped all of and started from scratch

9

Started from scratch… and what is, in detail, the current configuration of Audience? All ports (2x etc + 3x wlan) in one bridge, bridge as DHCP client etc?

10

@uberwebguru stop to be tedious and post all needed info, instead to not provide ANY useful information
We do not have crystal ball and the problem can be also YOU because you are unable to use the device.

11

Please post your config - if you want assistance
/export hide-sensitive file=anynameyouwish

In terms of the basics some ideas here…
https://forum.mikrotik.com/viewtopic.php?t=182276

12

Ok my next post in a few will detail settings i have for the Audience AP
Does RouterOS have option to have config file and be able to edit the file as another option to CLI or winbox or webfig?
So maybe i can just post that config file here, after changing real names and redacting stuffs ofcourse

13

@rextended @anav @AllexRo

Winbox, RouterOS 7.1.5
Here is what i have done to Audience



Pre-requiste settings on CCR2004

Created bridge “bridge”
Added the port connected to Audience to the “bridge”

Under Interfaces, created VLAN3 and VLAN4
And used “bridge” as interface for the VLAN3 and VLAN4
VLAN4 is management VLAN

Under IP => Addresses created addresses for the VLANs

VLAN3 192.168.13.1/24 interface VLAN3
VLAN4 192.168.14.1/24 interface VLAN4

Went to IP => DHCP server
created DHCP setup for the VLANS
DNS 1.1.1., 8.8.8.8


Settings on Audience

Created a bridge
Checked VLAN filtering under VLAN tab of the bridge

Interfaces => VLAN tab
Created VLAN3 and VLAN4 , VLAN4 is management VLAN
I selected the bridge created above as interface for both VLAN3 (VLAN ID 3) and VLAN4(VLAN ID 4)

Went back to bridge and created VLAN table

bridge. VLAN ID current tagged. current untagged
bridge. 3 bridge, ether1
bridge. 4 ether1
bridge 1 bridge


Went under the Ports tab
for ether1 i used bridge as bridge name and VLAN tab, i have VLAN3

Went under Wireless

Created security profile
“wifi_name_v3” with settings [Mode=dynamic keys, Authentication Types WPA PSK, WPA2 PSK, set WPA and WPA secrets]

For wlan1 i changed

mode to “ap bridge”
band to “2GHz-B/G/N”
SSID to “wifi_name_v3”
Security Profile to “wifi_name_v3”

For wlan2 i changed

mode to “ap bridge”
band to “5GHz-A/N/AC”
SSID to “wifi_name_v3”
Security Profile to “wifi_name_v3”

For wlan3 i changed

mode to “ap bridge”
band to “5GHz-A/N/AC”
SSID to “wifi_name_v3”
Security Profile to “wifi_name_v3”

Went to IP => Addresses
Created addresses for VLAN3 and VLAN4

VLAN3 192.168.13.2/24 interface VLAN3
VLAN4 192.168.14.2/24 interface VLAN4

Went to IP => Routes
Created route to internet via each VLAN gateway

dest address: 0.0.0.0/0 gateway: 192.168.13.1
dest address: 0.0.0.0/0 gateway: 192.168.14.1
dest address: 192.168.13.0/24 gateway: VLAN3
dest address: 192.168.14.0/24 gateway: VLAN4


These are what i have
If anything is not clear, please let me know and will provide details

14

I Dont have time or patience to read some non-standard format.
Why cannot you simply post your config ???

This guru is getting uber annoyed and I just might leave this web. :wink:

15

I quote myself for not write again the same, still valid:

And I quote @Anav because has already indicated the way to have help:

16

I asked how to post config and no one answered

Does RouterOS have option to have config file and be able to edit the file as another option to CLI or winbox or webfig?

https://forum.mikrotik.com/viewtopic.php?p=923235#p923141

17

How do i post the config?
Guys i am new to mikrotik
Very new, I just found about about it few months back
Not expert like you guys, and no support except in forums

18

Not sound like how I can open new terminal, paste the @anav command and after editing for remove private parts, and not removing what just for me is useless, post the file on forum?

19

Didn’t realize you posted this command
/export hide-sensitive file=anynameyouwish


ok will try that and upload

20

Here they are guys @rextended @anav @AllexRo

CCR2004

# RouterOS 7.2rc3
# model = CCR2004

/interface bridge
add name=bridge
/interface ethernet
set [ find default-name=sfp-sfpplus1 ] comment=AUDIENCE
set [ find default-name=sfp-sfpplus2 ] comment=CRS326
set [ find default-name=sfp-sfpplus12 ] comment=ISPROUTER
/interface vlan
add interface=bridge name=vlan10 vlan-id=10
add interface=bridge name=vlan11 vlan-id=11
add interface=bridge name=vlan20 vlan-id=20
add interface=bridge name=vlan30 vlan-id=30
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.10.2-192.168.10.254
add name=dhcp_pool1 ranges=192.168.20.2-192.168.20.254
add name=dhcp_pool2 ranges=192.168.30.2-192.168.30.254
add name=dhcp_pool3 ranges=192.168.11.2-192.168.11.254
/ip dhcp-server
add address-pool=dhcp_pool0 interface=vlan10 name=dhcp1
add address-pool=dhcp_pool1 interface=vlan20 name=dhcp2
add address-pool=dhcp_pool2 interface=vlan30 name=dhcp3
add address-pool=dhcp_pool3 interface=vlan11 name=dhcp4
/port
set 0 name=serial0
set 1 name=serial1
/interface bridge port
add bridge=bridge comment=CRS326 interface=sfp-sfpplus2
add bridge=bridge comment=AUDIENCE interface=sfp-sfpplus1
add bridge=bridge comment=ISPROUTER interface=sfp-sfpplus12
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip address
add address=188.88.88.85/27 interface=sfp-sfpplus12 network=188.88.88.0
add address=192.168.20.1/24 interface=vlan20 network=192.168.20.0
add address=192.168.30.1/24 interface=vlan30 network=192.168.30.0
add address=192.168.10.1/24 interface=vlan10 network=192.168.10.0
add address=192.168.11.1/24 interface=vlan11 network=192.168.11.0
/ip dhcp-server network
add address=192.168.20.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=192.168.20.1
add address=192.168.30.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=192.168.30.1
add address=192.168.10.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=192.168.10.1
add address=192.168.11.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=192.168.11.1
/ip dns
set servers=1.1.1.1,8.8.8.8
/ip firewall nat
add action=masquerade chain=srcnat out-interface=bridge
add action=accept chain=srcnat disabled=yes dst-address=188.88.88.85 \
    out-interface=bridge src-address=192.168.20.0/24
/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=188.88.88.86 \
    pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=10
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=redacted
/tool romon
set enabled=yes

AUDIENCE

# RouterOS 7.1.5
# model = AUDIENCE

/interface bridge
add fast-forward=no ingress-filtering=no name=bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] comment=CCR2004
/interface vlan
add interface=bridge name=vlan10 vlan-id=10
add interface=bridge name=vlan11 vlan-id=11
add interface=bridge name=vlan20 vlan-id=20
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" mode=dynamic-keys \
    name=wifi_ssid_10 supplicant-identity=""
add authentication-types=wpa-psk,wpa2-psk eap-methods="" mode=dynamic-keys \
    name=wifi_ssid_11 supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no mode=ap-bridge \
    security-profile=wifi_ssid_10 ssid=wifi_ssid_10
set [ find default-name=wlan2 ] band=5ghz-a/n/ac disabled=no mode=ap-bridge \
    security-profile=wifi_ssid_10 ssid=wifi_ssid_10
set [ find default-name=wlan3 ] band=5ghz-a/n/ac disabled=no mode=ap-bridge \
    security-profile=wifi_ssid_10 ssid=wifi_ssid_10
/interface bridge port
add bridge=bridge ingress-filtering=no interface=ether1 pvid=20
add bridge=bridge interface=wlan1
add bridge=bridge interface=wlan2
add bridge=bridge interface=wlan3
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface bridge vlan
add bridge=bridge tagged=ether1,bridge vlan-ids=20
add bridge=bridge tagged=ether1,wlan1,wlan2,wlan3 vlan-ids=10
add bridge=bridge tagged=ether1 vlan-ids=11
/ip address
add address=192.168.20.2/24 interface=vlan20 network=192.168.20.0
add address=192.168.10.2/24 interface=vlan10 network=192.168.10.0
add address=192.168.11.2/24 interface=vlan11 network=192.168.11.0
/ip dns
set servers=1.1.1.1,8.8.8.8
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.20.1
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.10.1 routing-table=\
    main suppress-hw-offload=no
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.11.1 routing-table=\
    main suppress-hw-offload=no
/system clock
set time-zone-name=redacted
/system package update
set channel=development
/system routerboard settings
set cpu-frequency=auto