Wifi clients cannot use network anymore after power outage

beppuz66 · April 22, 2026, 4:27pm

Hi all,

here is my configuration:

where:

the bridge between the two wireless cube pro is the PTP tunnel as default from factory (bought the pre-configured pair of devices)
AP01-05 are ubiquiti unifi access points that manage 3 wireless networks, each on its own VLAN

Everything was working fine till a power outage (with relevant electrical instability over 60 minutes). After that event Client01 and Client02 see the wireless networks and are authenticated by AP04 and AP05, BUT they don’t receive network configuration from DHCP server anymore. If I manually configure the network on the client, it cannot use it (cannot reach the gateway, ping other hosts, browse internet).

What I tried sofar:

plug AP04 to Switch 01: works ok (like AP01, AP02 and AP03). Client04 can use it to connect and use the network.
replaced Switch 02 with the one I had before (and that worked with the same APs): Client01 and Client02 can authenticate to the wireless network, but cannot use the network
sniffed packets while connecting client01 to wifi network for VLAN tagging:
[station]

INTERFACE         TIME    NUM  DIR  SRC-MAC            DST-MAC            VLAN
wlan60-station-1  24.051   37  <-   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
bond1             24.051   38  <-   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
ether1            24.051   39  ->   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
bridge            24.051   40  <-   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
wlan60-station-1  26.577   41  <-   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
bond1             26.577   42  <-   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
ether1            26.577   43  ->   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
bridge            26.577   44  <-   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
wlan60-station-1  28.364   45  <-   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
bond1             28.364   46  <-   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
ether1            28.364   47  ->   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
bridge            28.364   48  <-   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
wlan60-station-1  35.7     49  <-   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
bond1             35.7     50  <-   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
ether1            35.7     51  ->   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
bridge            35.7     52  <-   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
wlan60-station-1  36.195   53  <-   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
bond1             36.195   54  <-   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
ether1            36.195   55  ->   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
bridge            36.195   56  <-   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20[

[AP]

INTERFACE  TIME    NUM  DIR  SRC-MAC            DST-MAC            VLAN
ether1     19.784   37  <-   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
bond1      19.784   38  ->   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
wlan60-1   19.784   39  ->   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
bridge     19.784   40  <-   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
ether1     22.31    41  <-   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
bond1      22.31    42  ->   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
wlan60-1   22.31    43  ->   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
bridge     22.31    44  <-   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
ether1     24.097   45  <-   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
bond1      24.097   46  ->   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
wlan60-1   24.097   47  ->   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
bridge     24.097   48  <-   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
ether1     31.433   49  <-   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
bond1      31.433   50  ->   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
wlan60-1   31.433   51  ->   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
bridge     31.433   52  <-   DA:2B:B0:90:06:F9  33:33:00:00:00:02    20
ether1     31.928   53  <-   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
bond1      31.928   54  ->   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
wlan60-1   31.928   55  ->   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20
bridge     31.928   56  <-   DA:2B:B0:90:06:F9  FF:FF:FF:FF:FF:FF    20

It seems to me that VLAN tags are preserved.

explicitly configured VLANs on the bridge (on both ends) (1 is untagged, 20,40,60 are tagged):
BRIDGE VLAN-IDS

0 bridge 1
1 bridge 20
40
60
–>No change.

So I am out of ideas and looking for help to diagnose and fix this issue.

I’m not sure it’s a problem of the ptp bridge, but the fact that AP04 works correctly if plugged to switch 01 points me to this direction: please be patient if i am OT.

Any hint will be greatly appreciated,

Giuseppe

jaclaz · April 22, 2026, 4:48pm

Well, post the configurations of the two cubes, they should be default or allmost default, the whole "wireless wire" idea is that the set of two cubes should behave as a wire, or as two switches connected by a wire.

cpunk · April 22, 2026, 5:47pm

You have replaced Switch 02 and tested with AP04 connected to Switch 01.

Have you tried the next step of connecting the original Switch 02 to Switch 01 with a wire, using the same ports used by the Wireless Cube Pro units? Connect AP04 to Switch 02 in that configuration to fully eliminate the Mikrotik parts from the config as a test.

beppuz66 · April 23, 2026, 6:00am

Good idea. I’ll try tomorrow. Thankyou

beppuz66 · April 23, 2026, 6:51am

Here is AP config:

# 2026-03-27 10:16:53 by RouterOS 7.22.1
# software id = MYAR-BEUS
#
# model = CubeG-5ac60ay
# serial number = *************
/interface bridge
add admin-mac=************** auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-a/n/ac channel-width=\
    20/40/80mhz-XXXX disabled=no frequency=auto installation=outdoor mode=\
    station-bridge ssid=MikroTik-********
/interface w60g
set *3 disabled=no mode=station-bridge name=wlan60-1 ssid=MikroTik-*******
/interface bonding
add comment=defconf mode=active-backup name=bond1 primary=wlan60-1 slaves=\
    wlan60-1,wlan1
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk comment=defconf \
    disable-pmkid=yes mode=dynamic-keys supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=bond1
/interface bridge vlan
add bridge=bridge untagged=ether1,bond1 vlan-ids=1
add bridge=bridge tagged=ether1,bond1 vlan-ids=20,40,60
/ip address
add address=10.0.0.203/24 comment=defconf interface=bridge network=10.0.0.0
/system clock
set time-zone-name=Europe/Rome

and station:

# 2026-03-28 06:29:52 by RouterOS 7.22.1
# software id = 7VAI-RECB
#
# model = CubeG-5ac60ay
# serial number = ************
/interface bridge
add admin-mac=*************** auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-a/n/ac channel-width=\
    20/40/80mhz-XXXX disabled=no frequency=auto installation=outdoor mode=\
    bridge ssid=MikroTik-*******
/interface w60g
set *4 disabled=no mode=bridge name=wlan60-1 ssid=MikroTik-******
/interface w60g station
add comment=defconf mac-address=************** name=wlan60-station-1 \
    parent=wlan60-1 remote-address=********************
/interface bonding
add comment=defconf mode=active-backup name=bond1 primary=wlan60-station-1 \
    slaves=wlan60-station-1,wlan1
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk comment=defconf \
    disable-pmkid=yes mode=dynamic-keys supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=bond1
/interface bridge vlan
add bridge=bridge untagged=ether1,bond1,bridge vlan-ids=1
add bridge=bridge tagged=ether1,bond1 vlan-ids=20,40,60
/ip address
add address=10.0.0.201/24 comment=defconf interface=bridge network=10.0.0.0

BartoszP · April 23, 2026, 9:17am

Please edit post and remove serials and other secrets if any.

jaclaz · April 23, 2026, 9:19am

Point #21 here:
GP & CSA (Good Practice and Common Sense Advice) for Mikrotik devices

On both devices "set *3" and "set *4" should be "set [ find ]", compare with this default configuration:
Wireless Wire Cube (Preconfigured) Plug 'n' Play...Doesn't - #8 by radiobob

As a side note, explicit use of vlan 1 is strongly discouraged, but if you actually need it and it works for you, fine.

beppuz66 · April 29, 2026, 2:46pm

Today I had finally the time to try. Thanks to your hint I discovered that station network cable had been plugged in a wrong port in switch 01. This port was not configured for VLANs so, obviously, it didn’t allow the VLANs to be used by remote clients

Znevna · April 29, 2026, 2:51pm

These power outages are getting smarter day by day, replugging ethernet cables in switches in the wrong ports and stuff

BartoszP · April 30, 2026, 5:53am

No ... the outgage was just a sign from IT Heavens that a mistake was done. You have to "read the cables signs" properly

beppuz66 · April 30, 2026, 6:01am

Sorry for having stolen valuable time and attention, but I was sure to have checked the switch port as I began to debug the issue: the IT heaven is telling me there is a saboteur in my organization?

BartoszP · April 30, 2026, 6:05am

There would have been a lightning, if you have a spy

jaclaz · April 30, 2026, 8:51am

Courtesy of Gemini:

infabo · April 30, 2026, 9:06am

Prompt: "visualize mikrotik hex pro in modern Latvia. Patch cable plugged into first Ethernet port."

patrikg · April 30, 2026, 9:11am

I like the Swappable RG45 Port