My toppology:
/ BaseBox 5
LtAP - PowerBox Pro - BaseBox 2
\ Server
Both BaseBox are AP bridge, no routing, no DHCP client, no DHCP server, no rules, anything. PowerBox Pro also is bridging, no DHCP, no routing, no rules, anything. LtAP is the DHCP server. All are running ROS 6.45 with FW version 6.45.
These are the configs of my devices (The information marked as "XX" or "XXX" is censored information".
LtAP Config:
Code: Select all
/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] disabled=no ssid=MikroTik
/interface lte apn
add apn=XXX authentication=chap default-route-distance=1 name=Movistar user=XXX
/interface lte
set [ find ] apn-profiles=Movistar mac-address=AC:FF:FF:00:00:00 name=lte1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp_pool0 ranges=10.0.0.1-10.0.0.99
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=bridge1 lease-time=1w name=dhcp1
/system logging action
set 3 remote=10.0.0.100
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=wlan1
/interface detect-internet
set detect-interface-list=all internet-interface-list=all lan-interface-list=all wan-interface-list=all
/ip address
add address=10.1.1.1/15 interface=bridge1 network=10.0.0.0
/ip dhcp-server lease
add address=10.0.0.100 mac-address=C0:25:E9:XX:XX:XX server=dhcp1
add address=10.0.0.1 mac-address=C0:14:3D:XX:XX:XX server=dhcp1
add address=10.0.0.2 mac-address=38:80:DF:XX:XX:XX server=dhcp1
/ip dhcp-server network
add address=10.0.0.0/15 dns-server=8.8.8.8,8.8.4.4 gateway=10.1.1.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip firewall nat
add action=masquerade chain=srcnat out-interface=lte1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/snmp
set contact=XXX enabled=yes location="XXX" trap-version=2
/system clock
set time-zone-name=XXX/XXX
/system identity
set name=RBLtAP-2HnD&R11e-LTE
/system leds
# using RSRP, modem-signal-treshold ignored
add interface=lte1 leds=led1,led2,led3,led4,led5 type=modem-signal
/system logging
add action=remote topics=info
add action=remote topics=error
add action=remote topics=warning
add action=remote topics=critical
/system ntp client
set enabled=yes primary-ntp=XXX secondary-ntp=XXX
/tool sms
set port=lte1 receive-enabled=yes
Code: Select all
/interface bridge
add name=bridge1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/system logging action
set 3 remote=10.0.0.100
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
/interface detect-internet
set detect-interface-list=all internet-interface-list=all lan-interface-list=all wan-interface-list=all
/ip address
add address=10.1.1.2/15 interface=bridge1 network=10.0.0.0
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip route
add distance=1 gateway=10.1.1.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=XXX/XXX
/system identity
set name=RB960PGS
/system logging
add action=remote topics=info
add action=remote topics=error
add action=remote topics=warning
add action=remote topics=critical
/system ntp client
set enabled=yes primary-ntp=XXX secondary-ntp=XXX
Code: Select all
/interface bridge
add name=bridge1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=WPA2 supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=10 band=2ghz-b/g/n country=XXX disabled=no frequency=2422 mode=ap-bridge rx-chains=0,1 security-profile=WPA2 \
ssid=XXX tx-chains=0,1 tx-power=30 tx-power-mode=all-rates-fixed wireless-protocol=802.11 wmm-support=enabled wps-mode=disabled
/system logging action
set 3 remote=10.0.0.100
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=wlan1
/interface detect-internet
set detect-interface-list=all internet-interface-list=all lan-interface-list=all wan-interface-list=all
/ip address
add address=10.1.1.3/15 interface=bridge1 network=10.0.0.0
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip route
add distance=1 gateway=10.1.1.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/system clock
set time-zone-name=XXX/XXX
/system identity
set name=RB912UAG-2HPnD
/system logging
add action=remote topics=info
add action=remote topics=error
add action=remote topics=warning
add action=remote topics=critical
/system ntp client
set enabled=yes primary-ntp=XXX secondary-ntp=XXX
Code: Select all
/interface bridge
add name=bridge1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=WPA2 supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=13 band=5ghz-a/n channel-width=20/40mhz-XX country=XXX disabled=no mode=ap-bridge rx-chains=0,1 \
security-profile=WPA2 ssid=XXX tx-chains=0,1 tx-power=30 tx-power-mode=all-rates-fixed wireless-protocol=802.11 wmm-support=enabled wps-mode=disabled
/system logging action
set 3 remote=10.0.0.100
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=wlan1
/interface detect-internet
set detect-interface-list=all internet-interface-list=all lan-interface-list=all wan-interface-list=all
/ip address
add address=10.1.1.4/15 interface=bridge1 network=10.0.0.0
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip route
add distance=1 gateway=10.1.1.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/system clock
set time-zone-name=XXX/XXX
/system identity
set name=RB912UAG-5HPnD
/system logging
add action=remote topics=info
add action=remote topics=error
add action=remote topics=warning
add action=remote topics=critical
/system ntp client
set enabled=yes primary-ntp=XXX secondary-ntp=XXX