WISP AP or WAN via WIFI and Routing

Hello all,

I am not new to IP, but new to mikrotik products, we want to add them to our portfolio.
WISP AP only lets me configure 5Ghz + SSID, but WAN is fixed to ETHER1, why anyway?

I tried the following:
option 1 : WISP AP
Public WIFI → Mikrotik in WISP AP Mode on WAN Internet → NAT → LAN Ports & WIFI DHCP
wlan2 = works @ 5Ghz/WPA2 clients connected
wlan1 = works @ 2Ghz/WPA1 connected to Public WIFI

I can only route when I use wan (ether1) als gateway with a fixed cable in the office.
When I change the gateway from ETHER1 to WLAN1 I get the following error:
Couldn’t change DHCP Client - can not run on slave interface (6)

opton 2: CPE
Connect to the public wifi on the left, network is connected.
Right Menu:
Router
Address Acquisition Automatic
IP 192.168.88.1
DHCP ON
NAT ON

click op apply, connection is gone and i receive an IP from the Guest WIFI, but can’t use it.

can’t be that hard :slight_smile:

best regards,
Mark

Hi Mark,

Quickset can be a handy tool, but mostly I will not use it, some unexpected behaviour can come from this.

I’d recommend resetting the device to blank (no factory default configuration) and than start building your own configuration.

Somethings you’ll need to do, you’ll need WinBox for this:

  • Create a bridge connecting the wanted ethernet + wlan interfaces for the cliënt (/bridge)
  • Add a management IP on the bridge interface (/ip address)
  • Add a DHCP server for the cliënt devices (/ip dhcp-server)
  • Add firewall rules to protect your network and RouterBoard (https://wiki.mikrotik.com/wiki/Manual:Securing_Your_Router)
  • Configure one standalone WLAN interface as the wireless client (this shouldn’t be part of the bridge)
  • Add a DHCP-cliënt on the WLAN-interface that acts as your WAN; check the add default route option so it’s used as gateway
  • Add a NAT/Masquerade rule for all outbound traffic (/ip firewall masqeruade)

If you do want to use Quickset the CPE method is the way to go. I’ve seen similair issues when configuring CPEs this way as well, you’ll need to configure the box it self first, without connecting it to the public wireless. After this configuration you should go back in and connect to the public wifi.