Community discussions

MikroTik App
 
georgi
just joined
Topic Author
Posts: 2
Joined: Sat Dec 25, 2021 12:32 pm

No internet on guest Wi-Fi

Sat Dec 25, 2021 12:52 pm

I see this problem on the forum again and again but I couldn't take a hint from the existing posts.
Please help.
My config is available in the attachment.

TL;DR
The configuration includes:
1. a security group
2. two virtual interfaces, one for each Wi-Fi hardware interface
3. a bridge with ports, the two virtual interfaces
4. a subnet associated to the bridge
5. a DHCP setup for the subnet
6. a (currently disabled) masquarade rule for the subnet
7. firewall rules separating the public from the private subnets

Now, connecting from my phone I get an IP in the guest network, however, I cannot access the internet.
I cannot ping 192.168.88.1, where the private subnet gateway is as it is forbidden by the router firewall.
However, nothing answers also on 192.168.0.1, where the guest subnet gateway is. I get destination host unreachable.
How can I debug this issue?
You do not have the required permissions to view the files attached to this post.
 
ConnyMercier
Forum Veteran
Forum Veteran
Posts: 724
Joined: Tue Dec 17, 2019 1:08 pm

Re: No internet on guest Wi-Fi  [SOLVED]

Sun Dec 26, 2021 4:46 pm

However, nothing answers also on 192.168.0.1
Because your Router wasn`t assigned the 192.168.0.1 IP-Address...
You have an Error in your Config:

/ip address
add address=192.168.88.1/24 comment=defconf interface=local network=192.168.88.0
add address=192.168.0.0/24 interface=guest network=192.168.0.0
 
holvoetn
Forum Guru
Forum Guru
Posts: 5403
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: No internet on guest Wi-Fi

Sun Dec 26, 2021 8:39 pm

/ip address
add address=192.168.88.1/24 comment=defconf interface=local network=192.168.88.0
add address=192.168.0.0/24 interface=guest network=192.168.0.0
Doesn't that bold part need to be 192.168.0.1/24 ?
 
ConnyMercier
Forum Veteran
Forum Veteran
Posts: 724
Joined: Tue Dec 17, 2019 1:08 pm

Re: No internet on guest Wi-Fi

Sun Dec 26, 2021 8:41 pm

Yes , that`s the mistake =)
 
holvoetn
Forum Guru
Forum Guru
Posts: 5403
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: No internet on guest Wi-Fi

Sun Dec 26, 2021 8:42 pm

Yes , that`s the mistake =)
I see.
It was a test :lol:
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19101
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: No internet on guest Wi-Fi

Sun Dec 26, 2021 9:50 pm

You guys both need help.......... ;-)
Here's my teaching point for today..

"Because your Router wasn`t assigned the 192.168.0.1 IP-Address...
You have an Error in your Config:

FROM
/ip address
add address=192.168.88.1/24 comment=defconf interface=local network=192.168.88.0
add address=192.168.0.0/24 interface=guest network=192.168.0.

TO
/ip address
add address=192.168.88.1/24 comment=defconf interface=local network=192.168.88.0
add address=192.168.0.1/24 interface=guest network=192.168.0.
 
ConnyMercier
Forum Veteran
Forum Veteran
Posts: 724
Joined: Tue Dec 17, 2019 1:08 pm

Re: No internet on guest Wi-Fi

Sun Dec 26, 2021 9:52 pm

Thanks DAD !

=)
 
georgi
just joined
Topic Author
Posts: 2
Joined: Sat Dec 25, 2021 12:32 pm

Re: No internet on guest Wi-Fi

Tue Dec 28, 2021 11:10 am

Thank you, experts. It may be obvious but I would not have known to fix the address space to "...0.1/24".
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19101
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: No internet on guest Wi-Fi

Tue Dec 28, 2021 3:01 pm

Do not despair I too was at that point in the past!
The nice thing about MT routers is that you learn many new skills and some basic knowledge along the way.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5403
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: No internet on guest Wi-Fi

Tue Dec 28, 2021 3:44 pm

Ditto.
The advantage learning like this is that you will most likely not make that mistake again. Oh well, maybe once or twice :lol:
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19101
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: No internet on guest Wi-Fi

Tue Dec 28, 2021 4:01 pm

Well it is confusing
what the heck is the difference between
a. 192.168.1.1/24 and
b. 192.168.1.0/24

a. 192.168.1.0/24 is a subnet identifier for the subnet 192.168.1.0 to 192.168.1.255
b. 192.168.1.1 is the first usable host address on that subnet. The /24 simply indicates that the subnet in the host should be using a mask of 255.255.255.0.
(the mask describes the number of useable IP addresses on that subnet?)

a. By definition, 192.168.1.0/24 is the network address of the subnet beginning with 192.168.1.0 and ending with 192.168.1.255
b. 192.168.1.1/24 is the first host address within that subnet.

a. The former is a network address
b. The latter is an ip address of a device in that network.

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

In short very confusing as we use 192.168.1.1 for the IP address in MT but it is not for an actual device!
It saying perhaps this entity (in our case a virtual subnet) has an IP address of 192.168.1.1 on a network described by 192.168.1.0/24 with useable IPs from 192.168.1.2 to 192.168.1.254
 
holvoetn
Forum Guru
Forum Guru
Posts: 5403
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: No internet on guest Wi-Fi

Tue Dec 28, 2021 4:05 pm

That last part should be 1 to 254.
/24 is 3 octets, 24 bits starting from left.
So the last octet is taken full.
With 0 being the subnet itself and 255 being broadcast.

That's how I remember it from long time ago.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19101
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: No internet on guest Wi-Fi

Tue Dec 28, 2021 5:36 pm

Well it states that useable IPs from 192.168.2-.254
So 0 gone, 255 gone, and .1 is not for any fricken device, its the address for the Virtual ENTITY............
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11433
Joined: Thu Mar 03, 2016 10:23 pm

Re: No internet on guest Wi-Fi

Tue Dec 28, 2021 8:51 pm

Well it states that useable IPs from 192.168.2-.254
So 0 gone, 255 gone, and .1 is not for any fricken device, its the address for the Virtual ENTITY............

It's customary to assign lowest IP address from subnet to router - default gateway. In a /24 subnet that's .1 address and is thus unavailable for otger uses (static address assignment, DHCP server address pool, ...).

If one abhors traditions, then any address other than network address (lowest address covered by netmask) and broadcast address (highest address covered by netmask) is available ... and tgat includes .1 in /24 subnet.
 
Sob
Forum Guru
Forum Guru
Posts: 9119
Joined: Mon Apr 20, 2009 9:11 pm

Re: No internet on guest Wi-Fi

Tue Dec 28, 2021 10:28 pm

I strongly believe that .1 is the right choice for gateway. That's why at home I have .5 as gateway. :D I originally had .1, but back then the router was also a Linux server. Then I got RB as gateway, but renumbering server is much more annoying than renumbering gateway.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5403
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: No internet on guest Wi-Fi

Tue Dec 28, 2021 10:37 pm

Biggest provider Proximus in Belgium uses .254 for their business routers in MPLS setup.
It doesn't always have to be .1.
 
Sob
Forum Guru
Forum Guru
Posts: 9119
Joined: Mon Apr 20, 2009 9:11 pm

Re: No internet on guest Wi-Fi

Tue Dec 28, 2021 11:04 pm

Well, technically it doesn't matter. But it's perfect candidate to have strong "religious" views on it. ;)
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11433
Joined: Thu Mar 03, 2016 10:23 pm

Re: No internet on guest Wi-Fi

Tue Dec 28, 2021 11:41 pm

I guess that value of least significant octet in router's IP address is as religious as selecting the second least significant octet for LAN address in the 192.168.x.0/24 address space. Technically any value is equally good. But I guess if one would make some research and statistics, some values would stick out as being used much more often than others ... probably somehow correlated to what different vendors use as default (e.g. Mikrotik uses 88).

As to the useable address range: at home I like to have whole range 1-254 available for DHCP server pool, so I use /23 subnet mask ... which allows me to allocate addresses 1-254 to DHCP server pool. I'm considering switching over to /22 which will allow me to use full range 0-255 (not just one, I'd be able use two!). Not that I forsee using so many addresses at the same time, but why not? I have to adapt to using /56 IPv6 prefix :wink:

Who is online

Users browsing this forum: duman, spookymulder84, synchro and 23 guests