Hi, I am very new to mikrotik and everything so please be gentle. I found myself in a situation and I now need help. For some reason, I can connect perfectly to the router using winbox. Problem comes in when I try WinBoxing into the access points. At that point a crazy thing happens. It connects to one AP but not to the rest. All APs are from the same company, all have internet access. What could be the matter?
most probably firewall blocking access from wan port (ethernet1)
I have disabled firewall on laptop still no change. 
I have disabled all firewall on laptop still no change, or you mean on the router?
yes i mean on the ap, the out of the box configuration of example wap ac is
#| * WAN port is protected by firewall and enabled DHCP client
#| * Wireless interfaces are part of LAN bridge
connect form the wireless side and you will be able to connect through winbox, and then set a firewall rule to allow a certain lan ip on the wan port, place it before the drop wan rule
I have been connected using wireless. It might not be a firewall issue. If it was I would not be able to connect to any AP.
Still, nobody can help? I expected more. It seems guys here are colder than the Linux community!
We’re warm and welcoming community (well, sort of, generally, on average, … 
). It’s just that with many people asking many questions, we tend to pick either interesting ones or those where it looks like the poster is really trying. You know, it’s a hobby for us, not a job, it’s supposed to be fun and enjoyable. Many posted questions are none of that. Or - and it’s not necessarily the last possibility - we simply don’t know.
In your case, you didn’t really provide too many details, did you? You’re trying to connect to some APs using WinBox. How exactly, using IP or MAC address? What about the network? Are those APs in same LAN or on the other end of world behing ten VPNs? You’ll hardly get better answer than “something somewhere is probably blocked, default WinBox port is tcp/8291, good luck finding it”.
Have you set the country settings? on your country.
Go to “wireless” double click on de wlan device and below klik on advanced.
Look if the coutry settings are good.
Go also to “new terminal” and write “export” copy and paste the result on this forum
It’s a simple network. Router connected to 4 access points. I see all of them in the winbox. I can connect to the router well. I can also connect to one access point well. The other three will not connect via any method. I tried both the MAC and IP method. Yes, the APs are on the same LAN and no VPN.
Thank you for offering to assist. Yes, I set the country right. Here is the configuration
jan/28/2017 08:13:35 by RouterOS 6.38.1
software id = 1UPY-4HTC
/interface bridge
add admin-mac=D4:CA:6D:00:8D:F2 auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether3 ] master-port=ether2-master
set [ find default-name=ether4 ] master-port=ether2-master
set [ find default-name=ether5 ] master-port=ether2-master
set [ find default-name=ether6 ] name=ether6-master
set [ find default-name=ether7 ] master-port=ether6-master
set [ find default-name=ether8 ] master-port=ether6-master
set [ find default-name=ether9 ] master-port=ether6-master
set [ find default-name=ether10 ] master-port=ether6-master
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=kenya disabled=no
distance=indoors frequency=2452 mode=ap-bridge ssid=MikroTik-008DFB
wireless-protocol=802.11
/ip neighbor discovery
set ether1 discover=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=
dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=401137012
wpa2-pre-shared-key=401137012
/ip hotspot
add disabled=no idle-timeout=none interface=bridge name=server1
/ip hotspot profile
set [ find default=yes ] dns-name=whitehouse.net login-by=
cookie,http-chap,https
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/ip hotspot user profile
add address-pool=dhcp name=tenant rate-limit=412k/412k
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=bridge comment=defconf interface=ether6-master
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=wlan1
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether2-master network=
192.168.88.0
add address=197.248.163.174/8 interface=ether1 network=197.0.0.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=41.203.208.18,41.203.208.19
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here"
disabled=yes
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept established,related"
connection-state=established,related
add action=drop chain=input comment="defconf: drop all from WAN" in-interface=
ether1
add action=fasttrack-connection chain=forward comment="defconf: fasttrack"
connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related"
connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=
invalid
add action=drop chain=forward comment=
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat
connection-state=new in-interface=ether1
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here"
disabled=yes
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=
ether1
/ip hotspot user
add name=A1 password=melon profile=tenant
add name=A2 password=zebra profile=tenant
add name=A3 password=aple profile=tenant
add name=A4 password=lion profile=tenant
add name=A5 password=iran profile=tenant
add name=A6 password=orange profile=tenant
add name=A7 password=plam profile=tenant
add name=A8 password=mali profile=tenant
add name=A9 password=maembe profile=tenant
add name=A10 password=blue profile=tenant
add name=A11 password=tank profile=tenant
add name=A12 password=egypt profile=tenant
add name=B1 password=yemen profile=tenant
add name=B2 password=north profile=tenant
add name=B3 password=embu profile=tenant
add name=B4 password=pink profile=tenant
add name=B5 password=kenya profile=tenant
add name=B6 password=lamu profile=tenant
add name=B7 password=angola profile=tenant
add name=B8 password=indigo profile=tenant
add name=B9 password=niger profile=tenant
add name=B10 password=france profile=tenant
add name=B11 password=march profile=tenant
add name=B12 password=uganda profile=tenant
add name=C1 password=black profile=tenant
add name=C2 password=zambia profile=tenant
add name=C3 password=siaya profile=tenant
add name=C4 password=june profile=tenant
add name=C5 password=fish profile=tenant
add name=C6 password=ghana profile=tenant
add name=C7 password=kisii profile=tenant
add name=C8 password=violet profile=tenant
add name=C9 password=libya profile=tenant
add name=C10 password=korea profile=tenant
add name=C11 password=rwanda profile=tenant
add name=C12 password=west profile=tenant
add name=Admin password=********
/ip route
add distance=1 gateway=197.248.163.173
/system clock
set time-zone-autodetect=no time-zone-name=Africa/Nairobi
/system identity
set name="WhiteHouse Router"
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=bridge
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=bridge
[admin@WhiteHouse Router] >
What router have you?
I try this configuration out for you
Greatings
What do you need from me?
Accurate model of router board
That’s all
Thank you so very much.
From WinBox the router described as RB2011UiAs-2HnD.
The four Aps are board RB Groove A-52Hpn
Everything is working properly.
All the Ap’s have internet.
Only problem is I can only WinBox into the router and one Ap.
And the only Ap I can winbox into has 2 IP’s? The configuration is up there if you need it.
Check if on some AP on wireless/wlan1/wireless default forward must ne ENABLED for reach the devices on same network
check on tools/mac server/winbox if winbox is enabled on all interfaces (default = NO)
check on ip/neighbor/discovery interface if all interface are enabled for neighbor discovery
Check if on some AP on wireless/wlan1/wireless default forward must ne ENABLED for reach the devices on same network
check on tools/mac server/winbox if winbox is enabled on all interfaces (default = NO)
check on ip/neighbor/discovery interface if all interface are enabled for neighbor discovery[/quote]
All seems fine except the ipv6 which is disabled on all Ap I cannot connect to. and enable on the one I can
is also the RouterOS version… on others are 6.18…
try to enable ipv6 package and reboot (no config of ipv6 is needed)
channel: current
current-version: 6.38.1
status: finding out latest version…
The groove have 6.18…