Community discussions

MikroTik App
 
Adamzsite
newbie
Topic Author
Posts: 26
Joined: Sat Oct 31, 2020 4:06 pm

LTE Bridge Vlan help.

Sun Sep 05, 2021 12:07 pm

Hi Everyone

I'm having a lot of fun trying to figure out why i cant see the internet on my LtAP LTE6 kit unit after i have setup vlan passthrough.
I know i have not done something right i just need pointing in the right direction.

My Problem: I have been using the unit as default for mouths, getting great speeds and very happy. then I started to think i was time to learn the system/unit, i figured out i could vlan the lte modem using a passthrough to my main router and then have the unit on a static ip address. all went well very happy. the problem now I cant see the internet on the unit, it can see all my network but no the outside world, i cant do updates etc.

my setup is this
lte modem passthrough vlan 3 on eth1 ( all working )
eth1 no vlan static ip address ( all working )

i feel this is where my problem comes from and will be fixed,. I felt the bridge interface in as default.

can anyone understand me and help
Adam
 
sindy
Forum Guru
Forum Guru
Posts: 10205
Joined: Mon Dec 04, 2017 9:19 pm

Re: LTE Bridge Vlan help.

Sun Sep 05, 2021 12:44 pm

Have you configured a default route on the LtAP via the address of the main router in the subnet attached to the ether1 interface on the LtAP?
 
User avatar
SiB
Forum Guru
Forum Guru
Posts: 1888
Joined: Sun Jan 06, 2013 11:19 pm
Location: Poland

Re: LTE Bridge Vlan help.

Mon Sep 06, 2021 6:25 am

It's because that feature give back IP and "Internet" to next device. This next device is your main router now and he can at other vlan or default vlanid1 give you internet again.
Like RB_LTE ----vlan 3 ---> IP to WAN Main Router
Main Router at his LAN ----- no vlan ---> RB_LTE via DHCP . This means you can do dhcp-client at your managemet link and receive internet.
 
Adamzsite
newbie
Topic Author
Posts: 26
Joined: Sat Oct 31, 2020 4:06 pm

Re: LTE Bridge Vlan help.

Mon Sep 06, 2021 10:01 pm

Hi

I have set a static ip address and dns but do luck dose it need to be dhcp for the lte unit to get the internet.

Adam
 
sindy
Forum Guru
Forum Guru
Posts: 10205
Joined: Mon Dec 04, 2017 9:19 pm

Re: LTE Bridge Vlan help.

Mon Sep 06, 2021 10:21 pm

Again, what is the default route on the LtAP?

Using DHCP is just one possible way to make it work.
 
Adamzsite
newbie
Topic Author
Posts: 26
Joined: Sat Oct 31, 2020 4:06 pm

Re: LTE Bridge Vlan help.

Mon Sep 20, 2021 12:32 pm

Sorry guys been away

Right I have had some luck and no good luck,

I found that the static ip address i set using the winbox on quick setup. using LTE defaults. dose not use like dns ( or use dns settings not sure why will find out later ).

If i set a dhcp client up using the bridge interface ( which i found my router was trying to give this interface a address) it all starts working ( i can get updates and see the internet ).

the problem is i have now two interface with address e.g 192.168.1.4 /24 det my static on quick setup and dhcp on the briige interface 192.168.1.***/24

I'm doing something wrong can you help.
 
User avatar
SiB
Forum Guru
Forum Guru
Posts: 1888
Joined: Sun Jan 06, 2013 11:19 pm
Location: Poland

Re: LTE Bridge Vlan help.

Mon Sep 20, 2021 1:24 pm

Adamzsite
I found that the static ip address i set using the winbox on quick setup. using LTE defaults.
QuickSet is good only at first run device, all next configuration should be by WebFig/WinBox/ssh etc.

dose not use like dns ( or use dns settings not sure why will find out later ).
? You need DNS from ISP if you not use passthrough. And opposite, with passthrough DNS from ISP is not for your unit but for next main router. You will stuck in offline.

If i set a dhcp client up using the bridge interface ( which i found my router was trying to give this interface a address) it all starts working ( i can get updates and see the internet ).
When? With or without passthrough.
passthrough on: LTE unit not should have DHCP Server, you can do a DHCP Client at additional ethernet port or vlan to bring internet around back to LTE unit.
passthrough off: lte1 give internet to LTE unit. Only DHCP Server is used for giving IP to clients.

the problem is i have now two interface with address e.g 192.168.1.4 /24 det my static on quick setup and dhcp on the briige interface 192.168.1.***/24
Give some diagram.

I'm doing something wrong can you help.
I sure, but we try help if you help us too :).
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 18959
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: LTE Bridge Vlan help.

Mon Sep 20, 2021 2:47 pm

Please post configs on both units.

/export hide-sensitive file=anynameyouwish
 
Adamzsite
newbie
Topic Author
Posts: 26
Joined: Sat Oct 31, 2020 4:06 pm

Re: LTE Bridge Vlan help.

Mon Oct 04, 2021 11:40 am

Hi Everyone

Sorry about the delay a family member got covid, we are all ok everyone is good and safe.
Anyway back to the problem I will export the config using the command given.

Adam
 
Adamzsite
newbie
Topic Author
Posts: 26
Joined: Sat Oct 31, 2020 4:06 pm

Re: LTE Bridge Vlan help.

Mon Oct 04, 2021 11:44 am

Hi all

i please find my config hop this help. explain things

Adam

Config
# sep/14/2021 22:48:52 by RouterOS 6.48.4
# software id = PYY0-J8DC
#
# model = RBLtAP-2HnD
# serial number = B7270B37EDB8
/interface bridge
add admin-mac=C4:AD:34:70:B4:76 auto-mac=no comment=defconf name=bridge
/interface lte
set [ find ] allow-roaming=no band=3 name=lte1 network-mode=3g,lte
/interface vlan
add interface=ether1 name=vlan3LTE vlan-id=3
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface lte apn
set [ find default=yes ] apn=three.co.uk passthrough-interface=vlan3LTE \
passthrough-mac=auto
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" mode=dynamic-keys \
name=Staff supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
country="united kingdom" distance=indoors frequency=auto installation=\
outdoor mode=ap-bridge security-profile=Staff ssid=WC&CPWiFi-Staff \
wireless-protocol=802.11 wps-mode=disabled
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp interface=bridge name=defconf
/port
set 1 baud-rate=115200 name=gps
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=all
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=lte1 list=WAN
/ip address
add address=192.168.1.4/24 comment=defconf interface=bridge network=\
192.168.1.0
/ip dhcp-client
add disabled=no
/ip dns
set allow-remote-requests=yes servers=192.168.1.1,1.1.1.1
/ip dns static
add address=192.168.1.4 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
ipsec-policy=out,none out-interface-list=WAN
/ip upnp interfaces
add interface=bridge type=internal
add interface=lte1 type=external
/system clock
set time-zone-name=Europe/London
/system gps
set port=gps
/system leds
# using RSRP, modem-signal-threshold ignored
set 0 interface=lte1 type=modem-signal
/system routerboard settings
set auto-upgrade=yes
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN



anynameyouwish.rsc
You do not have the required permissions to view the files attached to this post.
 
sindy
Forum Guru
Forum Guru
Posts: 10205
Joined: Mon Dec 04, 2017 9:19 pm

Re: LTE Bridge Vlan help.

Mon Oct 04, 2021 12:39 pm

As anticipated. You've got no /ip route configured on the LtAP, and you've got only a single /interface lte apn item defined, so the LtAP itself doesn't get its own IP address and default route from the LTE modem (I'm not sure how your mobile operator would deal with this, it works with some operators but may not with others, and it may cause some billing issues).

So to reach internet, the LtAP needs to use the main router as its default gateway. So
/ip route add gateway=192.168.1.1 (or what is the address of the main router in 192.168.1.0/24) should resolve the issue. The fact that the main router will in turn send the packet physically via VLAN3 on ether1 to the LTE modem is not important, the LtAP cannot take any shortcut except the one stated above (two APN profiles with different settings).

You've also got an issue in the configuration of the LtAP. ether1 is a member port of the bridge, so the /interface vlan should also be attached to the bridge rather than to ether1 directly. Or, if you don't plan to use the wireless interface of the LtAP, you may instead move its own IP address (192.168.1.4) from the bridge to ether1 and then release ether1 from the bridge.

You may also want to disable the dhcp server attached to the bridge.
 
Adamzsite
newbie
Topic Author
Posts: 26
Joined: Sat Oct 31, 2020 4:06 pm

Re: LTE Bridge Vlan help.

Mon Oct 04, 2021 4:27 pm

Hi All
I added the route and all came great, i moved vlan3 to the bridge, all working fine, i will look into the dhcp server later.
thanks again.

Adam

Who is online

Users browsing this forum: Bing [Bot] and 91 guests