RB1100AH and a few RB951 How should they be configured?

mansoub1 · Tue Apr 12, 2016 7:40 pm

In a building where I live. I have 100 MB fiber optic line.
So it is the optical modem Next RB1100AH Next a few RB 951s. one in each apartment. We are cousins, so security is not an issue.
Should I leave the default configuration for each?
I have a DVR and an IP phone PBX connected to the RB 1100AH. I have been trying forwarding ports for weeks now, but no success. Can someone help me with port forwarding for the RB 1100AH?
Thank you in advance

soonwai · Tue Apr 12, 2016 9:13 pm

Port forwarding is quite simple. For example:

/ip firewall nat
add action=dst-nat chain=dstnat dst-port=8008 in-interface=pppoe1 protocol=tcp to-addresses=10.0.1.9 to-ports=8008

The above is to forward port 8008 to my DVR at 10.0.1.9.

My ISP is using PPPoE for the internet hence the "in-interface=pppoe1" above. Yours might be different.

Are the RB951s just acting as simple access points? If they're then you can remove most of the pre-configured rules and filters. It all depends on how your network is setup.

mansoub1 · Thu Apr 14, 2016 6:44 pm

Thank you for your post
i would prefer to make RB 951 act as access points only but I couldn't find the best way to do that
Thanks again
Iwill try the port forward as you said and see

freemannnn · Thu Apr 14, 2016 7:30 pm

Remove configuration, bridge ether1 and wlan and u have an access point.

soonwai · Thu Apr 14, 2016 7:38 pm

For a basic AP, this is all you need:

# apr/13/2016 12:27:53 by RouterOS 6.34.4
# software id = UIZV-RX3X
#
/interface bridge
add auto-mac=yes name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce \
    disabled=no distance=indoors max-station-count=50 mode=ap-bridge \
    radio-name=AP1 ssid=FREEWIFI wireless-protocol=802.11
/interface ethernet
set [ find default-name=ether2 ] master-port=ether1
set [ find default-name=ether3 ] master-port=ether1
set [ find default-name=ether4 ] master-port=ether1
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
    mode=dynamic-keys wpa-pre-shared-key=awesome wpa2-pre-shared-key=\
    awesome
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=wlan1
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no \
    interface=bridge1
/system identity
set name="WIFI AP 1"

Start from a no-default configuration, import the above and you're good to go. If you prefer, you can remove the DHCP client and assign an IP address to it. Of course, change the variables to your liking.

mansoub1 · Sat Apr 16, 2016 12:13 am

Thank you very much
I guess it is working fine now