Community discussions

MikroTik App
 
juanmi113
just joined
Topic Author
Posts: 3
Joined: Wed Nov 30, 2022 4:14 pm

Transparent PtP link

Wed Nov 30, 2022 4:47 pm

Hey new here, and noob in Mikrotik.

Im tring to make a PtP link between a ONT and a home router using two oldies LHG5 dishes. I set them up in bridge mode but i cant establish connection between the ISP ont and the router. I followed tutotials and i managed to establish the RF link, set their IP addres and not much more.

Here is a schema:

ONT ------ antenna A ~~~~~~~~~~~~ antenna B ------- Router

I need the link to be transparent so the router can take the IP from the ONT. The ONT is like a simple modem, it has an public IP addres.
Antenna 1 is set as bridge and Antenna 2 as Station Bridge. Ether1 and wlan1 are set as bridge in each antenna.
I made links as this with ubiquiti equipment but i remember it was easier

Any help would be appreciated
 
sindy
Forum Guru
Forum Guru
Posts: 10205
Joined: Mon Dec 04, 2017 9:19 pm

Re: Transparent PtP link

Thu Dec 01, 2022 7:56 am

Setting the wireless interface to bridge mode is not the same as bridging the Ethernet and wireless interfaces together, so that step may be missing. To get a more useful advice, post the export of the configuration of both LHG5.
 
juanmi113
just joined
Topic Author
Posts: 3
Joined: Wed Nov 30, 2022 4:14 pm

Re: Transparent PtP link

Fri Dec 02, 2022 11:17 pm

Setting the wireless interface to bridge mode is not the same as bridging the Ethernet and wireless interfaces together, so that step may be missing. To get a more useful advice, post the export of the configuration of both LHG5.
i think i bridged eth and wlan. Here are the configs:
# dec/02/2022 22:11:38 by RouterOS 7.6
# software id = PSWE-FRMC
#
# model = RBLHG5nD
# serial number = 6F2C0676FD27
/interface bridge
add fast-forward=no name=bridge_E
/interface ethernet
set [ find default-name=ether1 ] advertise=\
    10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-onlyn channel-width=20/40mhz-XX \
    country="etsi 5.5-5.7 outdoor" disabled=no frequency=5680 frequency-mode=\
    superchannel mode=station-wds nv2-security=enabled ssid=punto1 tx-power=\
    22 tx-power-mode=all-rates-fixed wds-default-bridge=bridge_E wds-mode=\
    dynamic wireless-protocol=nv2
/interface wireless nstreme
set wlan1 enable-nstreme=yes
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys \
    supplicant-identity=MikroTik
/ip dhcp-server
add interface=bridge_E name=server1
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=dhcp_pool0 ranges=\
    185.245.145.129-185.245.145.241,185.245.145.243-185.245.145.254
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0
/interface bridge port
add bridge=bridge_E interface=ether1
add bridge=bridge_E interface=wlan1
/interface detect-internet
set detect-interface-list=all lan-interface-list=all
/interface list member
add interface=wlan1 list=WAN
add interface=ether1 list=LAN
/interface wireless align
set audio-monitor=6C:3B:6B:97:E3:3D receive-all=yes
/ip address
add address=192.168.1.21/24 interface=bridge_E network=192.168.1.0
/ip dhcp-client
add disabled=yes interface=bridge_E
/ip dhcp-relay
add dhcp-server=192.168.1.254 disabled=no interface=bridge_E name=relay1
/ip dhcp-server network
add address=185.245.145.128/25 gateway=185.245.145.242
/ip firewall nat
add action=masquerade chain=srcnat out-interface=bridge_E src-address=\
    10.10.10.0/24
/system clock
set time-zone-name=Europe/Madrid
/system identity
set name="Enlace E"

# dec/02/2022 22:13:12 by RouterOS 7.6
# software id = 8U6V-VYW1
#
# model = RBLHG5nD
# serial number = 6D0A06CF0C7B
/interface bridge
add admin-mac=6C:3B:6B:01:6F:FC auto-mac=no comment=defconf name=bridge_R
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-a/n channel-width=20/40mhz-Ce \
    country="etsi 5.5-5.7 outdoor" disabled=no frequency=5680 frequency-mode=\
    superchannel mode=bridge noise-floor-threshold=-110 nv2-security=enabled \
    ssid=punto1 tx-power=22 tx-power-mode=all-rates-fixed wds-default-bridge=\
    bridge_R wds-mode=dynamic wireless-protocol=nv2
/interface wireless nstreme
set wlan1 enable-nstreme=yes
/interface list
add name=WAN
add name=LAN
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=\
    dynamic-keys supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=0.0.0.2-255.255.255.254
/routing bgp template
set default disabled=no output.network=bgp-networks
/interface bridge port
add bridge=bridge_R comment=defconf ingress-filtering=no interface=ether1
add bridge=bridge_R ingress-filtering=no interface=wlan1
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface detect-internet
set detect-interface-list=all internet-interface-list=WAN lan-interface-list=\
    LAN wan-interface-list=WAN
/interface ovpn-server server
set auth=sha1,md5
/interface wireless align
set audio-monitor=6C:3B:6B:97:E3:3D receive-all=yes
/ip address
add address=192.168.1.20/24 interface=wlan1 network=192.168.1.0
/ip firewall nat
add action=masquerade chain=srcnat dst-address-list=192.168.1.0/24 \
    out-interface=bridge_R
/system clock
set time-zone-name=Europe/Madrid
/system identity
set name="Enlace R"
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11381
Joined: Thu Mar 03, 2016 10:23 pm

Re: Transparent PtP link

Sat Dec 03, 2022 12:11 pm

On the first unit:
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-onlyn channel-width=20/40mhz-XX \
country="etsi 5.5-5.7 outdoor" disabled=no frequency=5680 frequency-mode=\
superchannel mode=station-wdsstation-bridge nv2-security=enabled ssid=punto1 tx-power=\
22 tx-power-mode=all-rates-fixed wds-default-bridge=bridge_E wds-mode=\
dynamic wireless-protocol=nv2

You can also make station more willing to folliw AP (whatever AP does) by changing these properties: frequency=auto wireless-protocol=nv2-nstreme-802.11 ...

Also disable WDS on both devices (wds-mode=disabled), MT devices in PtP mode work best when using their proprietary mode (which is bridge <-> station-bridge).

In your particular use case I don't think it's wise to run DHCP server (ONT is supposed to give router IP address) nor DHCP client, just set IP addresses statically. Also construct firewall (on both units) for chain=input which will block any connection attempts to these two devices and only allow it from some certain IP address (so you'll have management access later). And use bridge interfaces to configure local IP address and everything else, when interfaces are bridged IP layer doesn't know anything about member ports, IP layer talks to bridge interface.
 
juanmi113
just joined
Topic Author
Posts: 3
Joined: Wed Nov 30, 2022 4:14 pm

Re: Transparent PtP link

Sun Dec 04, 2022 8:09 pm

Thanks for the replies, but the router has not internet

I dont understand the firewall set up. I mean, if i bridged ether1 and wlan1 in both antennas, and they are linked in RF, why the router cannot receive the IP from the modem?

Here are the configs now:
# dec/03/2022 18:11:17 by RouterOS 7.6
# software id = PSWE-FRMC
#
# model = RBLHG5nD
# serial number = 6F2C0676FD27
/interface bridge
add fast-forward=no name=bridge_E
/interface ethernet
set [ find default-name=ether1 ] advertise=\
    10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-onlyn channel-width=20/40mhz-XX \
    country="etsi 5.5-5.7 outdoor" disabled=no frequency=5680 frequency-mode=\
    superchannel mode=bridge nv2-security=enabled ssid=punto1 tx-power=22 \
    tx-power-mode=all-rates-fixed wds-default-bridge=bridge_E wds-mode=\
    dynamic wireless-protocol=nv2
/interface wireless nstreme
set wlan1 enable-nstreme=yes
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys \
    supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=dhcp_pool0 ranges=\
    185.245.145.129-185.245.145.241,185.245.145.243-185.245.145.254
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0
/interface bridge port
add bridge=bridge_E interface=ether1
add bridge=bridge_E interface=wlan1
/interface detect-internet
set detect-interface-list=all lan-interface-list=all
/interface list member
add interface=wlan1 list=WAN
add interface=ether1 list=LAN
/interface wireless align
set audio-monitor=6C:3B:6B:97:E3:3D receive-all=yes
/ip address
add address=192.168.1.21/24 interface=bridge_E network=192.168.1.0
/ip dhcp-client
add disabled=yes interface=bridge_E
/ip dhcp-relay
add dhcp-server=192.168.1.254 disabled=no interface=bridge_E name=relay1
/ip firewall nat
add action=accept chain=input
/system clock
set time-zone-name=Europe/Madrid
/system identity
set name="Enlace E"
The other one:

# dec/03/2022 18:11:47 by RouterOS 7.6
# software id = 8U6V-VYW1
#
# model = RBLHG5nD
# serial number = 6D0A06CF0C7B
/interface bridge
add admin-mac=6C:3B:6B:01:6F:FC auto-mac=no comment=defconf name=bridge_R
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-a/n channel-width=20/40mhz-Ce \
    country="etsi 5.5-5.7 outdoor" disabled=no frequency=5680 frequency-mode=\
    superchannel mode=station-bridge noise-floor-threshold=-110 nv2-security=\
    enabled ssid=punto1 tx-power=22 tx-power-mode=all-rates-fixed \
    wireless-protocol=nv2
/interface wireless nstreme
set wlan1 enable-nstreme=yes
/interface list
add name=WAN
add name=LAN
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=\
    dynamic-keys supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=0.0.0.2-255.255.255.254
/routing bgp template
set default disabled=no output.network=bgp-networks
/interface bridge port
add bridge=bridge_R comment=defconf ingress-filtering=no interface=ether1
add bridge=bridge_R ingress-filtering=no interface=wlan1
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface detect-internet
set detect-interface-list=all internet-interface-list=WAN lan-interface-list=\
    LAN wan-interface-list=WAN
/interface list member
add interface=wlan1 list=WAN
add interface=ether1 list=LAN
/interface ovpn-server server
set auth=sha1,md5
/interface wireless align
set audio-monitor=6C:3B:6B:97:E3:3D receive-all=yes
/ip address
add address=192.168.1.20/24 interface=bridge_R network=192.168.1.0
/ip firewall nat
add action=accept chain=input
/system clock
set time-zone-name=Europe/Madrid
/system identity
set name="Enlace R"
And the firewall ir correct?
Image

https://postimg.cc/kBBkCfPs
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11381
Joined: Thu Mar 03, 2016 10:23 pm

Re: Transparent PtP link

Mon Dec 05, 2022 12:14 pm

Perhaps I don't understand the requirements correctly, but the antennas in bridge should be completely transparent to traffic passing between modem and router. And yes, router has to get IP address from modem. Both wireless bridge devices don't have to ... in fact it's best they are hidden from modem because you want to manage them from inside your own LAN. Hence suggestion to disable DHCP client and set IP address on both wireless bridge devices.

Who is online

Users browsing this forum: teleport and 33 guests