Community discussions

MikroTik App
 
lami16
just joined
Topic Author
Posts: 3
Joined: Fri May 07, 2021 3:08 pm

No webfig access, also no access in Winbox via IP - Solved

Fri May 07, 2021 5:01 pm

Hi everyone,

I have a wAP ac LTE6, connected to my laptop via Ethernet1 port. After having reset the Mikrotik device I can NOT connect to it via http://192.168.88.1/webfig as I could earlier.
Neither can I connect to it via IP address in Winbox.
In the browser I get a 404 error. (Tried both Firefox and Chrome)
In Winbox (using the latest 3.27 x64 Windows version) I also get an error when I try to connect to it via its IP address: "ERROR: could not connect to 192.168.88.1"

BUT I can connect to it by typing its MAC address in Winbox. So that works.

I updated the firmware, reseted all setting, still no success connecting to it via webfig
I also compared the previous config (which had webfig access) with the current one, and saw no real difference.

All config output via /export hide-sensitive compact
[admin@MikroTik] >> /export hide-sensitive compact      
# may/07/2021 09:30:38 by RouterOS 6.46.8

/interface bridge
add admin-mac=C4:AD:34:A9:XX:XX auto-mac=no comment=defconf name=bridge
/interface lte
set [ find ] mac-address=AC:50:43:1A:XX:XX name=lte1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
    country=hungary disabled=no distance=indoors frequency=auto installation=\
    outdoor mode=ap-bridge ssid=MikroTik-A9FB2E wireless-protocol=802.11
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-XXXX \
    country=hungary disabled=no distance=indoors frequency=auto installation=\
    outdoor mode=ap-bridge ssid=MikroTik-A9FB2F wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface lte apn
set [ find default=yes ] apn=net
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
    dynamic-keys supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf interface=wlan2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=lte1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether1 network=\
    192.168.88.0
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
    invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" \
    connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=\
    out,none out-interface-list=WAN
/ip service
set www-ssl disabled=no
/system clock
set time-zone-name=Europe/Budapest
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN

I tried many different network settings on my laptop as well, including setting fixed IP:
Ethernet adapter Ethernet:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) Ethernet Connection (6) I219-LM
   Physical Address. . . . . . . . . : B0-5C-DA-AA-XX-XX
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 192.168.88.11(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.88.1
   DHCPv4 Class ID . . . . . . . . . : ra006
   DNS Servers . . . . . . . . . . . : 192.168.88.1
   NetBIOS over Tcpip. . . . . . . . : Disabled
Please give me some tips, what am I missing.

Update:
This gets more interesting:
I can connect to it from other laptop as usual, with IP. And if I change the IP of the LTE router bridge to something else, then I can connect to it even from my main laptop. So this is apparently some firewall, laptop network settings issue.

Any hint is welcome even if it turns out not to be a MikroTik issue :)

Update2:
The solution is that looking at the ipconfig /all output more carefully I realized, that the newly installed VMware Workstation Pro occupies the 192.168.88.0 subnet as well. So the laptop, on which I have this, can't connect to my MikroTik LTe router.

Who is online

Users browsing this forum: Bing [Bot], carcuevas and 24 guests