i have mt router rb951 .My network definition is such that a TP-Link router is connected to Mikrotik as a bridge.
There are two problems for me with this config.
1.All connected devices have internet without any problem, but Mikrotik Ping router itself does not have internet
2.I did everything to port forward, but it didn't work
Code: Select all
# feb/10/2023 21:37:15 by RouterOS 6.47.10
# software id = *******
#
# model = RB951G-2HnD
# serial number = DE3*******
/interface bridge
add name=Bridge-ether4-wlan1
/interface pppoe-client
add add-default-route=yes comment="Connect to tp-link router" \
disabled=no interface=ether5 name=isp-name password=***** user=\
user010101
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys name=HomeNetWork \
supplicant-identity="" wpa-pre-shared-key=******** \
wpa2-pre-shared-key=*******
/interface wireless
set [ find default-name=wlan1 ] disabled=no mode=ap-bridge name=\
HomeMikrotikNet security-profile=HomeNetWork ssid=HomeMikrotikNet \
wps-mode=disabled
/ip pool
add name=dhcp_pool0 ranges=\
192.168.1.1-192.168.1.10,192.168.1.12-192.168.1.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=Bridge-ether4-wlan1 name=\
dhcp1
/interface bridge port
add bridge=Bridge-ether4-wlan1 interface=ether4
add bridge=Bridge-ether4-wlan1 interface=HomeMikrotikNet
/ip address
add address=192.168.1.11/24 interface=Bridge-ether4-wlan1 network=192.168.1.0
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=8.8.8.8,4.2.2.4,1.1.1.1,185.51.200.2 \
gateway=192.168.1.11
/ip dns
set servers=8.8.8.8
/ip firewall address-list
add address=192.168.1.0/24 list=LocalAddress
/ip firewall filter
add action=add-src-to-address-list address-list=1888 address-list-timeout=10m \
chain=input dst-port=1888 in-interface=isp-name protocol=tcp
add action=drop chain=input in-interface=isp-name
add action=accept chain=input src-address-list=LocalAddress
/ip firewall nat
add action=masquerade chain=srcnat out-interface=isp-name src-address=\
192.168.1.0/24
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
