Community discussions

MikroTik App
 
Monarchistt
just joined
Topic Author
Posts: 6
Joined: Fri Oct 28, 2022 6:16 pm

No Wireless connection But Ethernet works

Wed Nov 30, 2022 5:22 pm

hello! Hope you all are doing well! I am currently running a PA-820 as my router and a CRS326 as my switch, and my two AP's are cAP AC's . The problem is the WIFI / wireless networking does not seem to work at all. It connects but says no internet and gives the error DNS probe possible most of the time. But all of the other devices over ethernet work perfect!
I hope you all can help me troubleshoot this.

let me know what kind of info you may need to help me out here!

Thanks!
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11381
Joined: Thu Mar 03, 2016 10:23 pm

Re: No Wireless connection But Ethernet works

Wed Nov 30, 2022 9:31 pm

Start off by posting full configuration of one of your cAP acs. Execute /export hide-sensitive file=anynameyouwish in terminal window, fetch resulting file from device, open it with text editor, redact any remaining sensitive information (e.g. serial number, any usernames or passwords) and copy-paste it inside [code] [/code] block.
 
Monarchistt
just joined
Topic Author
Posts: 6
Joined: Fri Oct 28, 2022 6:16 pm

Re: No Wireless connection But Ethernet works

Wed Nov 30, 2022 9:36 pm

Start off by posting full configuration of one of your cAP acs. Execute /export hide-sensitive file=anynameyouwish in terminal window, fetch resulting file from device, open it with text editor, redact any remaining sensitive information (e.g. serial number, any usernames or passwords) and copy-paste it inside [code] [/code] block.
# jan/04/1970 20:56:18 by RouterOS 7.6
# software id = V72X-Q95Z
#
# model = RBcAPGi-5acD2nD
# serial number = REDACTED
/interface bridge
add admin-mac=18:FD:74:5E:75:95 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
    country="united states3" disabled=no distance=indoors frequency=auto \
    installation=indoor mode=ap-bridge ssid="The Wave Admin" \
    wireless-protocol=802.11
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=\
    20/40/80mhz-XXXX disabled=no distance=indoors frequency=auto \
    installation=indoor mode=ap-bridge ssid="The Wave Admin" \
    wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
    dynamic-keys supplicant-identity=MikroTik
add name=profile supplicant-identity=MikroTik
/interface wireless
add disabled=no mac-address=1A:FD:74:5E:75:97 master-interface=wlan2 name=\
    wlan3 security-profile=profile ssid="The Wave Visitor"
add disabled=no mac-address=1A:FD:74:5E:75:96 master-interface=wlan1 name=\
    wlan4 security-profile=profile ssid="The Wave Visitor"
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp disabled=yes interface=bridge name=defconf
/interface bridge filter
add action=drop chain=forward in-interface=wlan3
add action=drop chain=forward out-interface=wlan3
add action=drop chain=forward in-interface=wlan4
add action=drop chain=forward out-interface=wlan4
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf interface=wlan2
add bridge=bridge interface=wlan3
add bridge=bridge interface=wlan4
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/interface wireless access-list
add ap-tx-limit=16 interface=wlan4
add ap-tx-limit=16 interface=wlan3
/ip address
add address=192.168.88.3/24 comment=defconf interface=bridge network=\
    192.168.88.0
add address=192.168.88.3/24 interface=ether1 network=192.168.88.0
/ip dhcp-client
add comment=defconf disabled=yes interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=\
    192.168.88.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,1.0.0.1
/ip dns static
add address=192.168.88.3 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related hw-offload=yes
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" disabled=yes \
    ipsec-policy=out,none out-interface-list=WAN
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
    icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" port=\
    33434-33534 protocol=udp
add action=accept chain=input comment=\
    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
    udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
    protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
    ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
    ipsec-esp
add action=accept chain=input comment=\
    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment=\
    "defconf: drop everything else not coming from LAN" in-interface-list=\
    !LAN
add action=accept chain=forward comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment=\
    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
    hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
    icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
    500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
    ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
    ipsec-esp
add action=accept chain=forward comment=\
    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment=\
    "defconf: drop everything else not coming from LAN" in-interface-list=\
    !LAN
/system routerboard mode-button
set enabled=yes on-event=dark-mode
/system script
add comment=defconf dont-require-permissions=no name=dark-mode owner=*sys \
    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    source="\r\
    \n   :if ([system leds settings get all-leds-off] = \"never\") do={\r\
    \n     /system leds settings set all-leds-off=immediate \r\
    \n   } else={\r\
    \n     /system leds settings set all-leds-off=never \r\
    \n   }\r\
    \n "
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11381
Joined: Thu Mar 03, 2016 10:23 pm

Re: No Wireless connection But Ethernet works

Wed Nov 30, 2022 10:28 pm

The cAP ac is configured as router with ether1 as WAN interface. If you want to make cAP ac a simple AP, which will make clients normal members of the rest of LAN, then you have to reconfigure device. I'm not sure if QuickSet offers appropriate mode (manual page doesn't show one), so you'll have to do it manually.

The basic idea is the following: reset device to empty config (no default config). After that connect using winbox, create bridge, add all interfaces to bridge (both ether ports and both wireless ports), add DHCP client on bridge. Then set up wireless parameters.
If you want to add guest wireless, you'll have to configure a few other things (a separate subnet with DHCP server, firewall protecting the rest of LAN, etc)

Your current config shows guest wlan setup, but clients can not possibly use it. Bridge filter rules block any teaffic between guest wlan interfaces and the rest of network (so only communication with cAP ac is possible), but DHCP server is disabled. Also setup is trying to use both WAN interface (ether1) and bridge with same IP address / subnet which makes lots of confusion when it tries to route packets between both sides.
 
gotsprings
Forum Guru
Forum Guru
Posts: 2087
Joined: Mon May 14, 2012 9:30 pm

Re: No Wireless connection But Ethernet works

Thu Dec 01, 2022 2:18 am

I don't know what the router is... But I don't think it's a Tik.

Put caps-man config on the switch. Make it the manager. Set local forwarding and client to client forwarding.
 
Monarchistt
just joined
Topic Author
Posts: 6
Joined: Fri Oct 28, 2022 6:16 pm

Re: No Wireless connection But Ethernet works

Thu Dec 01, 2022 2:22 am

I don't know what the router is... But I don't think it's a Tik.

Put caps-man config on the switch. Make it the manager. Set local forwarding and client to client forwarding.
my PA-820 is my router
 
gotsprings
Forum Guru
Forum Guru
Posts: 2087
Joined: Mon May 14, 2012 9:30 pm

Re: No Wireless connection But Ethernet works

Thu Dec 01, 2022 5:17 am

Now that I looked it up...

I still say... Make the switch the caps-manager. Then default both Caps and set them to caps-mode.

Who is online

Users browsing this forum: Google [Bot] and 35 guests