Hi,

Accessing Ethernet device via Mikrotik mAP lite wifi turn out easy (bridging wlan and ether1). The problem is I want to access the ethernet device via my home wifi. I tried station, station-pseudobridge, ap bridge, no success.
What might be the solution?

Paste your config using export hide sensitive command on terminal.

Anyway you can try to connect using MAC instead IP with Winbox.

Regards.

Thank you for your reply, krafg.

# jan/02/1970 00:15:45 by RouterOS 6.45.8
# software id = AFWX-P88V
#
# model = RBmAPL-2nD
# serial number = CF290CE910C9
/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no frequency=2462 \
mode=station-pseudobridge ssid=PrimeHome-17
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge=bridge1 interface=wlan1 trusted=yes
add bridge=bridge1 interface=ether1 trusted=yes
/ip address
add address=192.168.36.15/24 interface=wlan1 network=192.168.36.0
add address=192.168.36.120/24 interface=ether1 network=192.168.36.0

Could you see the home wifi in the SCAN and select it?
Have set the correct security profile, as needed for your home-wifi?
IP address should be on the bridge, not on WLAN1 or ETHER1 (they are slave interfaces). This does not prevent it from working but gives problems with management access to the mAP.
The modes are "station-bridge", or "station-pseudobridge". ("Station bridge" will only work as bridge with a Mikrotik that has "AP bridge" enabled)
"Station pseudobridge" will work with all AP's, but has limitations as it replaces the wifi packet MAC address with it's own.
If "station-pseudobridge" gives problems (like with DHCP leases), then use "station" , but you cannot bridge the WLAN1. WLAN1 must be defined as a WAN interface with NAT, and the bridge as LAN needs it's own DHCP server).

I can see home wifi and select it, security profile is correct.
Given that the Ethernet device has IP address 192.168.36.18, what the IP address of the bridge must be? If ether1 does not have IP address, how the communication with the Ethernet device would be possible?
Further, I got even more lost (I am sorry for my ignorance):
("Station bridge" will only work as bridge with a Mikrotik that has "AP bridge" enabled) - if I enable station-bridge, how can I enable AP bridge? I cannot choose both from the same drop list.
If I choose "station" , it cannot find network at all, while on "station-bridge" or "station-pseudobridge" it connects immediately to ess.

Hi,

is it possible the reason for connection failure to wifi to be that the flag "B" is missing in the scan tool? Only flags A and P are ON. How to make a given WIFI bridged?

Bridge mode is only in a Mikrotik. (It is used with "AP bridge" as access point, it is used in "station bridge" as client device)
It can be disabled in the wireless advanced mode setup of "AP bridge" , when not needed or wanted.
. .
That select button is missing in WinBox for virtual WLAN interfaces (CLI can be used)
.
"station pseudobridge" does not use the bridge mode of the AP. So non-Mikrotik AP's can be used. Standard wifi packets (with only 3 MAC addresses) are used then.

If ether1 does not have IP address, how the communication with the Ethernet device would be possible?

If "ether1" is connected to bridge "bridge1" as a port, then you communicate with the bridge "bridge1", and the router communicates from that bridge.
"ether1" has become a slave interface, with no IP function anymore, its getting and passing everything between the bridge and the physical ethernet port.

Thank you for your clarifications, bpwl. Understood.
I still struggle with station-pseudobridge, I have concentrated on this mode, because it is supposed to work.
Below is my current configuration:

# nov/10/2020 20:45:52 by RouterOS 6.45.8
# software id = AFWX-P88V
#
# model = RBmAPL-2nD
# serial number = CF290CE910C9
/interface bridge
add name=bridge1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" group-ciphers=tkip,aes-ccm \
management-protection=allowed mode=dynamic-keys name=profile1 \
supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no frequency=2462 \
mode=station-pseudobridge security-profile=profile1 ssid=PrimeHome-17
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=pool1 ranges=192.168.36.0-192.168.36.254
/ip dhcp-server
add address-pool=pool1 disabled=no interface=wlan1 name=server1
/interface bridge port
add interface=wlan1 trusted=yes
add interface=ether1 trusted=yes
/ip address
add address=192.168.10.10/24 interface=bridge1 network=192.168.10.0
/ip dhcp-client
add disabled=no interface=wlan1
/ip dhcp-server network
add address=192.168.2.0/24 dns-server=217.27.32.196 gateway=192.168.2.1
/ip dns
set allow-remote-requests=yes servers=217.27.32.196,8.8.8.8,8.8.4.4
/ip route
add distance=1 gateway=192.168.36.120

Any problem found?

Remove setting "frequency=2462" from /interface wireless settings. When wifi interface is in any of station modes, it has to follow AP.

With bridge-pseudobridge and everything bridged (what is perfectly OK) you should not have a DHCP server , if the "PrimeHome-17" network has a DHCP server, what should be the case.

With DHCP on "PrimeHome-17", you should have a DHCP client on the bridge or a correct fixed IP address on the bridge "bridge1", what you have now as 192.168.10.10

It's all inconsistent .... 192.168.10.0/24 , 192.168.36.0/24, 192.168.2.0/24 ......

Pool and DHCP server should be removed from this setup. And anyway a pool should never include the DHCP server IP in the range.


Inconsistent IP address.
. DHCP client must be on master interface bridge1 not on slave interface WLAN1

Inconsistent but not needed
. Make it distance =2, so that DHCP route gets priority over this one.
.
And some tuning .... consider removing TKIP as cipher, (it's too slow), use only AES .
.
If you test this setup, check if your client device is getting a DHCP lease with the correct IP address. Getting DHCP to work when using station-pseudobridge can be very tricky !!!

Remove setting "frequency=2462" from /interface wireless settings. When wifi interface is in any of station modes, it has to follow AP.

... but it will work anyway.

Thank you once again for this precious guidance. As you said, bpwl, DHCP Client does not get any IP address - please see attachment.
and below is the corrected configuration, hopefully I did all changes properly:
# nov/10/2020 20:45:52 by RouterOS 6.45.8
# software id = AFWX-P88V
#
# model = RBmAPL-2nD
# serial number = CF290CE910C9
/interface bridge
add name=bridge1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" group-ciphers=tkip,aes-ccm \
management-protection=allowed mode=dynamic-keys name=profile1 \
supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no frequency=2462 \
mode=station-pseudobridge security-profile=profile1 ssid=PrimeHome-17
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot

/interface bridge port
add interface=wlan1 trusted=yes
add interface=ether1 trusted=yes
/ip address
add address=192.168.36.10/24 interface=bridge1 network=192.168.36.0
/ip dhcp-client
add disabled=no interface=bridge1

/ip dns
set allow-remote-requests=yes servers=217.27.32.196,8.8.8.8,8.8.4.4
/ip route
add distance=2 gateway=192.168.36.120
/system clock

DHCP Client does not get any IP address -

Not what I meant. The Mikrotik should get an IP address if connected to PrimeHome-17. The problem is expected with your client devices on the ethernet port.

Still no proof here you ever connect to the PrimeHome-17 network with this Mikrotik.
What is in the wireless registration tab? The connection should be visible there!
What is in the log?

Shouldn't appropriate wireless password be set in wireless profile?

Asked already in #4:
"Have set the correct security profile, as needed for your home-wifi?"
And OP answered as yes in #5
"I can see home wifi and select it, security profile is correct."

But why there is no DHCP lease then? Somehow the connection is not operational or there is no DHCP server in the ISP-AP, what is unexpected.

Profile should be double checked for password and authentication types, unicast ciphers and group ciphers.
E.G.: The unknown ISP-AP might require WPA

Only if there is a registration in the Mikrotik , then we have a connection.

Good evening!
Thank you for your comments, bpwl.
Security profile is set correct.
On attachment is shown Wirelles Registration table is visible that wlan1 is running (R flag),though I cannot see any traffic.
By the way, "connected to ess" can happen only if tkip on Group Ciphers is ticked. Otherwise the status is "searching for network".
There is DHCP server, but why there is no DHCP lease, no idea.

Registration please and LOG info ? (After System-> Logging -> Rules + ->" topics=wireless / action = memory" is added)

Log_INFO attached after adding wireless - action -memory.

What's wrong with sharing the "Registration" information? OK Logging indicates there is a connection. (registration would indicate the details of that connection).
The "wireless debug" lines are caused by the "Station Roaming: enabled".

But why no traffic ????
The Mikrotik mAP should be able to PING 192.168.36.120. (tools / ping)
(You cannot access the devices behind the Mikrotik mAP, on the ethernet cable from the ISP-AP, until they have communicated themselves)
The ISP-AP, and even other devices connected to it if allowed, should be able to PING 192.168.36.10 (the Mikrotik mAP)

Any information on the ISP-AP? What device is this ?

The router model is PTL-VDL-N5, I could not find on the net specific manufacturer.
Anyway, I guess you are right for the ISP-AP, bpwl, because , I have tried different ISP, and indeed, there is traffic and dhcp lease (on attachment).
However, since again I could not connect to the Ethernet device (I tried with HMI, but it might be PLC, or remote IO module, etc.) I still need your instructions:
First of all, if I disconnect Mikrotik from Winbox and connect it to the HMI, I cannot reconnect to RB, though I tried with MAC and IP address of the bridge.
Further, one more question: the bridge IP address and the ethernet device IP address have to be on the same subnet, which might be different on subnet of leased DHCP, is that correct?
Or all IP addresses must be on the same subnet?

All IP addresses in the LAN need to be in the same subnet.
ISP-AP LAN (wifi) address, Mikrotik mAP bridge address, client device on ethernet port IP address.

Why not doing clean reset, then using QUICKSET -> CPE bridge to get it up and running?

If basic things don't work, Quickset is good tool to proof nothing things can work.

Thank you, bpwl and wewinet. Indeed, using Quickset it took me 2 minutes to connect to my home wifi. Therefore, ISP configuration is OK.
The problem is...I am still struggling to connect to the ethernet device...Below is the current configuration:
# nov/12/2020 19:23:07 by RouterOS 6.45.8
# software id = AFWX-P88V
#
# model = RBmAPL-2nD
# serial number = CF290CE910C9
/interface bridge
add name=bridge1
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=\
tkip,aes-ccm mode=dynamic-keys name=profile1 supplicant-identity="" \
unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=password \
wpa2-pre-shared-key=password
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no frequency=2462 \
security-profile=profile1 ssid=PrimeHome-17
/interface bridge port
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=ether1
/interface list member
add interface=wlan1 list=WAN
add list=LAN
/ip address
add address=192.168.2.20/24 interface=wlan1 network=192.168.2.0
add address=192.168.2.16/24 interface=ether1 network=192.168.2.0
/ip dhcp-client
add disabled=no interface=bridge1
/ip dns
set servers=217.27.32.196
/ip route
add distance=1 gateway=192.168.2.1

Any idea where is the problem?

By the way, the IP address of the Ethernet device is 192.168.2.18

Thank you, bpwl and wewinet. Indeed, using Quickset it took me 2 minutes to connect to my home wifi. Therefore, ISP configuration is OK.
The problem is...I am still struggling to connect to the ethernet device...Below is the current configuration:


/interface bridge port
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=ether1
/interface list member
add interface=wlan1 list=WAN
add list=LAN
/ip address
add address=192.168.2.20/24 interface=wlan1 network=192.168.2.0
add address=192.168.2.16/24 interface=ether1 network=192.168.2.0

Quickset after relaoding default config? Strange Quickset outcome .... interfaces on bridge port ... only WLAN1 member of interface list .... IP addresses on slave interfaces ??????
Quckset can never be used if not starting from the default config. After ANY modification of the default config Quickset should not be used.

OK your network seems to be 192.168.2.0/24. But here "station pseudobridge" is gone, IP address must be on bridge not on the port interfaces, and if ever there is the default firewall bridge1 should be member of the LAN interface list.

I need time to check everything, and then will revert.

Please see the settings on the tabs (on the attachment). Are they correct now? Configuration published as well below:
# nov/13/2020 20:53:43 by RouterOS 6.47.7
# software id = AFWX-P88V
#
# model = RBmAPL-2nD
# serial number = CF290CE910C9
/interface bridge
add admin-mac=48:8F:5A:28:F3:7B auto-mac=no comment=defconf name=bridge
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk group-ciphers=\
tkip,aes-ccm mode=dynamic-keys supplicant-identity=MikroTik \
unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=password \
wpa2-pre-shared-key=password
add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=\
tkip,aes-ccm mode=dynamic-keys name=profile1 supplicant-identity="" \
unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=password \
wpa2-pre-shared-key=password
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
disabled=no frequency=auto installation=indoor mode=station-pseudobridge \
multicast-buffering=disabled security-profile=profile1 ssid=PrimeHome-17 \
station-roaming=enabled
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,pas\
sword,web,sniff,sensitive,api,romon,dude,tikapp"
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface list member
add interface=wlan1 list=WAN
add interface=ether1 list=LAN
add list=LAN
add list=WAN
/ip address
add address=192.168.2.20/24 interface=bridge network=192.168.2.0
/ip dhcp-client
add disabled=no interface=bridge
add disabled=no
add disabled=no
/ip dns
set servers=217.27.32.196
/ip route
add disabled=yes distance=1 gateway=192.168.2.1
/system clock
Please comment.

Thanks a lot for the config file.

However:

Ether1 and wlan1 do need to be connected as bridge port.
Bridge "bridge" needs to be in the LAN interface list (yes, everything is LAN, the WAN/LAN transition was at the ISP-AP.)




Please share "Registration" and LOG.

To avoid screenshots, you could use following "New Terminal" commands

Thank you for your reply, bpwl.

# nov/13/2020 20:53:43 by RouterOS 6.47.7
# software id = AFWX-P88V
#
# model = RBmAPL-2nD
# serial number = CF290CE910C9
/interface bridge
add admin-mac=48:8F:5A:28:F3:7B auto-mac=no comment=defconf name=bridge
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk group-ciphers=\
tkip,aes-ccm mode=dynamic-keys supplicant-identity=MikroTik \
unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=password \
wpa2-pre-shared-key=password
add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=\
tkip,aes-ccm mode=dynamic-keys name=profile1 supplicant-identity="" \
unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=password \
wpa2-pre-shared-key=password
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
disabled=no frequency=auto installation=indoor mode=station-pseudobridge \
multicast-buffering=disabled security-profile=profile1 ssid=PrimeHome-17 \
station-roaming=enabled
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,pas\
sword,web,sniff,sensitive,api,romon,dude,tikapp"
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface list member
add interface=wlan1 list=WAN
add interface=ether1 list=LAN
add list=LAN
add list=WAN
/ip address
add address=192.168.2.20/24 interface=bridge network=192.168.2.0
/ip dhcp-client
add disabled=no interface=bridge
add disabled=no
add disabled=no
/ip dns
set servers=217.27.32.196
/ip route
add disabled=yes distance=1 gateway=192.168.2.1
/system clock

And log print:

07:19:06 system,error,critical router was rebooted without proper shutdown
07:19:07 bridge,info hardware offloading activated on bridge "bridge" ports: ether
1
07:19:07 dhcp,error temporary moving client wlan1 from slave to master port, updat
e your config!!!
07:19:08 interface,info ether1 link up (speed 100M, full duplex)
07:19:10 wireless,info F0:68:65:00:EC:0F@wlan1 established connection on 2462000,
SSID PrimeHome-17
07:19:11 dhcp,info dhcp-client on wlan1 got IP address 192.168.2.13
19:46:10 wireless,info F0:68:65:00:EC:0F@wlan1: lost connection, roaming
19:46:11 wireless,info 70:4F:57:03:13:03@wlan1 established connection on 2417000,
SSID PrimeHome-17
19:46:19 wireless,info 70:4F:57:03:13:03@wlan1: lost connection, extensive data lo
ss
19:46:22 wireless,info 70:4F:57:03:13:03@wlan1: failed to connect, on 2417/20-Ce/g
n(18dBm), authentication timeout
19:46:25 wireless,info 70:4F:57:03:13:03@wlan1 established connection on 2462000,
SSID PrimeHome-17
19:46:32 wireless,info 70:4F:57:03:13:03@wlan1: lost connection, received deauth:
sending station leaving (8)
19:46:35 wireless,info 70:4F:57:03:13:03@wlan1 established connection on 2462000,
SSID PrimeHome-17
19:46:38 dhcp,critical,error dhcp-client on wlan1 lost IP address 192.168.2.13 - r
eceived NAK from dhcp server 192.168.2.1
19:47:11 dhcp,info dhcp-client on wlan1 got IP address 192.168.2.19
19:51:54 system,info,account user admin logged in from 64:00:6A:25:19:CA via winbo
x
20:07:31 dhcp,info dhcp-client on wlan1 lost IP address 192.168.2.19 - lease stopp
ed locally
20:07:32 system,info interface list member added by admin
20:07:32 system,info dhcp client removed by admin
20:07:32 system,info address removed by admin
20:07:32 system,info address added by admin
20:07:32 system,info bridge port changed by admin
20:07:32 system,info bridge port changed by admin
20:07:32 wireless,info 70:4F:57:03:13:03@wlan1: lost connection, disabling
20:07:32 system,info device changed by admin
20:07:32 system,info device changed by admin
20:07:35 wireless,info 70:4F:57:03:13:03@wlan1 established connection on 2462000,
SSID PrimeHome-17
20:08:49 system,info address added by admin
20:08:49 system,info route changed by admin
20:09:14 system,info,account user admin logged out from 64:00:6A:25:19:CA via winb
ox
20:09:31 system,info,account user admin logged in from 90:CD:B6:04:26:E5 via winbo
x
20:09:37 system,info,account user admin logged in via local
20:10:07 system,info,account user admin logged out via local
20:13:03 system,info bridge port added by admin
20:13:05 system,info,account user admin logged out from 90:CD:B6:04:26:E5 via winb
ox
20:13:23 system,info,account user admin logged in from 90:CD:B6:04:26:E5 via winbo
x
20:13:36 system,info bridge port changed by admin
20:13:41 system,info bridge port changed by admin
20:23:03 system,info,account user admin logged in via local
20:24:49 system,info,account user admin logged out via local
20:28:30 system,info,account user admin logged out from 90:CD:B6:04:26:E5 via winb
ox
20:28:37 system,info,account user admin logged in from 90:CD:B6:04:26:E5 via winbo
x
20:29:33 wireless,info 70:4F:57:03:13:03@wlan1: lost connection, disabling
20:29:33 system,info device changed by admin
20:29:35 system,info,account user admin logged out from 90:CD:B6:04:26:E5 via winb
ox
20:29:37 wireless,info 70:4F:57:03:13:03@wlan1 established connection on 2462000,
SSID PrimeHome-17
20:29:46 system,info,account user admin logged in from 90:CD:B6:04:26:E5 via winbo
x
20:33:38 system,info route changed by admin
20:33:39 system,info interface list member removed by admin
20:33:39 system,info address changed by admin
20:33:39 system,info dhcp client changed by admin
20:38:38 system,info address removed by admin
20:38:45 system,info address changed by admin
20:38:56 wireless,info 70:4F:57:03:13:03@wlan1: lost connection, disabling
20:38:56 system,info device changed by admin
20:38:58 system,info,account user admin logged out from 90:CD:B6:04:26:E5 via winb
ox
20:39:00 wireless,info 70:4F:57:03:13:03@wlan1 established connection on 2462000,
SSID PrimeHome-17
20:42:12 system,info,account user admin logged in from 64:00:6A:25:19:CA via winbo
x
20:42:12 system,info,account user admin logged in via local
20:42:40 system,info,account user admin logged out via local
20:43:36 system,info bridge port removed by admin
20:45:28 system,info bridge port removed by admin
20:45:29 system,info bridge port removed by admin
20:47:38 system,info,account user admin logged out from 64:00:6A:25:19:CA via winb
ox
20:48:21 system,info,account user admin logged in from 12:CD:B6:04:26:E5 via winbo
x
20:48:23 system,info,account user admin logged out from 12:CD:B6:04:26:E5 via winb
ox
20:48:27 system,info,account user admin logged in from 64:00:6A:25:19:CA via winbo
x
20:53:19 system,info,account user admin logged in via local
20:53:51 system,info,account user admin logged out via local
22:19:31 system,info device changed by admin
22:19:50 system,info bridge port added by admin
22:20:00 system,info bridge port added by admin
22:20:00 bridge,info hardware offloading activated on bridge "bridge1" ports: ethe
r1
22:20:01 system,info,account user admin logged out from 64:00:6A:25:19:CA via winb
ox
22:20:28 system,info,account user admin logged in from 64:00:6A:25:19:CA via winbo
x
22:20:47 system,info interface list member removed by admin
22:20:49 system,info interface list member removed by admin
22:21:07 system,info interface list member added by admin
22:21:26 system,info,account user admin logged in via local
22:23:02 system,info,account user admin logged out via local
22:23:08 system,info,account user admin logged in via local

Sorry, to complex to decode what happens ....

You send the same old wrong config ...

# nov/13/2020 20:53:43 by RouterOS 6.47.7

.
and then some old log to weed through, until 20:53:43
The old entries learn that the ISP-AP does give out DHCP leases, and that you are able to connect.
Put then you changed ports, and bridge and lost connection several times.
At the end , after the wrong config and its corrections, nothing happened. No connection, no DHCP lease .... and it's a different bridge.
.

And log print:


20:53:19 system,info,account user admin logged in via local
20:53:51 system,info,account user admin logged out via local
22:19:31 system,info device changed by admin
22:19:50 system,info bridge port added by admin
22:20:00 system,info bridge port added by admin
22:20:00 bridge,info hardware offloading activated on bridge "bridge1" ports: ethe
r1
22:20:01 system,info,account user admin logged out from 64:00:6A:25:19:CA via winb
ox
22:20:28 system,info,account user admin logged in from 64:00:6A:25:19:CA via winbo
x
22:20:47 system,info interface list member removed by admin
22:20:49 system,info interface list member removed by admin
22:21:07 system,info interface list member added by admin
22:21:26 system,info,account user admin logged in via local
22:23:02 system,info,account user admin logged out via local
22:23:08 system,info,account user admin logged in via local

.
Suddenly with bridge1 , and no DHCP address anymore. Not sure even if there still is a connection.

Please make a correct config first, then reboot the Mikrotik mAP (for a clean start situation and clean log from that starting point.), and make the connection with the mAP and then the ethernet wired client.

OK. all done as per instructions.
New corrected configuration:
# jan/02/1970 00:03:34 by RouterOS 6.47.7
# software id = AFWX-P88V
#
# model = RBmAPL-2nD
# serial number = CF290CE910C9
/interface bridge
add name=bridge1
/interface list
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" group-ciphers=tkip,aes-ccm \
mode=dynamic-keys name=Home supplicant-identity="" wpa2-pre-shared-key=\
pass
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no frequency=2462 \
mode=station-pseudobridge security-profile=Home ssid=PrimeHome-17
/interface bridge port
add bridge=bridge1 interface=ether1 trusted=yes
add bridge=bridge1 interface=wlan1 trusted=yes
/interface list member
add interface=ether1 list=LAN
add interface=wlan1 list=LAN
add interface=bridge1 list=LAN
/ip address
add address=192.168.2.20 interface=bridge1 network=192.168.2.20

Wireless registration:

[admin@MikroTik] > interface wireless registration print stats
0 interface=wlan1 mac-address=F0:68:65:00:EC:0F ap=yes wds=no bridge=no rx-rate="117Mbps-20MHz/2S"
tx-rate="115.5Mbps-20MHz/2S/SGI" packets=1459,46 bytes=152576,2136 frames=1459,48
frame-bytes=155490,2176 hw-frames=2190,1545 hw-frame-bytes=297260,216833 tx-frames-timed-out=0
uptime=3m13s last-activity=20ms signal-strength=-79dBm@1Mbps signal-to-noise=38dB
signal-strength-ch0=-86dBm signal-strength-ch1=-82dBm
strength-at-rates=-79dBm@1Mbps 40ms,-61dBm@HT20-5 36s180ms,-60dBm@HT20-6 10s530ms,-60dBm@HT20-7
2m8s950ms
tx-ccq=85% p-throughput=80856 distance=1 last-ip=192.168.2.16 802.1x-port-enabled=yes
authentication-type=wpa2-psk encryption=aes-ccm group-encryption=tkip management-protection=no
wmm-enabled=no tx-rate-set="CCK:1-11 OFDM:6-54 BW:1x SGI:1x HT:0-15"

log print:
[admin@MikroTik] > log print
10:37:49 system,info router rebooted
10:37:51 bridge,info "bridge1" mac address changed to 48:8F:5A:28:F3:7B
10:37:51 bridge,info hardware offloading activated on bridge "bridge1" ports: ether1
10:37:52 interface,info ether1 link up (speed 100M, full duplex)
10:37:54 wireless,info F0:68:65:00:EC:0F@wlan1 established connection on 2462000, SSID PrimeHome-17
10:39:27 system,info,account user admin logged in from 64:00:6A:25:19:CA via winbox
10:40:24 system,info,account user admin logged in via local

Excellent job.
This part of the chain works as expected. How about your client device ?

Detailed reading.

Config. OK no remarks. Nicely cleaned up.

Registration ... relative weak signal, but still good rates and throughput. Last traffic to 192.168.2.16 (client device on ethernet ?)
Most readable fields ...

wds=no bridge=no
rx-rate="117Mbps-20MHz/2S", tx-rate="115.5Mbps-20MHz/2S/SGI"
frames=1459,48, hw-frames=2190,1545
signal-strength=-79dBm@1Mbps signal-to-noise=38dB
tx-ccq=85% p-throughput=80856
last-ip=192.168.2.16

LOG
no DHCP as fixed address is used. All OK.

This should all just work as intended.
The mAP itself will not find internet , as the "ip route" and "IP DNS" that are normally provided by DHCP have not been set.

Actually I do not need Internet on mAP, which is connected to PLC/HMI on ether1. The aim was to keep the Wireless adapter of PC running, so the web based platform (SCADA, OPC server) can be used normally. They require Internet. If I wanted just to connect my PC wireless to the PLC/HMI without Internet (using Mikrotik wlan1), it was piece of cake, even for my low level of Mikrotik knowledge.
Now, back to the current configuration: the way I do functional check: I disconnect the ethernet connection to the router, and I try to connect to the PLC/HMI either using OPC server, or PLC programming software. However it does not work. I even cannot connect anymore to the Router from Winbox, if there is no ethernet cable between PC and the router. What I am doing wrong?

IP address configuration is wrong, you should change it as follows:

/ip address
add address=192.168.2.20/24 interface=bridge1 network=192.168.2.0

Hopefully you can connect using Winbox via MAC connection. Since there's no configuration regarding mac-server, I guess it's allowed without restrictions.

Another thing which messes the device: bridge MAC address. If it's not set explicitly, bridge takes MAC address from first active member port and mostly that's ethernet port MAC. When you disconnected cable connection, that port became inactive and bridge likely changed MAC address to the one of WiFi adapter. If wireless connection drops for any reason, that MAC address will be gone as well.
To avoid these changes, you should statically set bridge MAC address. MAC address from your previous setup is probably a good candidate:

Network correction done. However I cannot connect to router if I remove the ethernet cable. I have tried with two MAC addresses:
48:8F:5A:28:F3:7B
F0:68:65:00:EC:0F - taken from Registration Tab
Maybe it I try using the wrong MAC? The where to take the proper one from?Or there is still something in the configuration that needs fine tuning?

It worked finally. I have forgotten to add /24 to bridge IP address. A huge thank you to you, mkx, and especially to bpwl, who had the patience to guide me the last few days.

Hello!
I have changed the Internet provider, hence SSID, password. From that time I cannot connect to my Ethernet device. Below is the new (old) configuration:
# jan/02/1970 00:28:16 by RouterOS 6.45.8
# software id = CN01-ALEW
#
# model = RBmAPL-2nD
# serial number = CF290CCFE6F5
/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no frequency=2437 \
mode=station-pseudobridge ssid=CXNK00765F8D wireless-protocol=802.11
/interface list
add include=all name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" \
group-ciphers=tkip,aes-ccm mode=dynamic-keys supplicant-identity=MikroTik \
wpa2-pre-shared-key=pass
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge=bridge1 interface=wlan1 trusted=yes
add bridge=bridge1 interface=ether1 trusted=yes
/interface list member
add interface=wlan1 list=LAN
add interface=bridge1 list=LAN
add interface=ether1 list=LAN
/ip address
add address=192.168.2.20/24 interface=bridge1 network=192.168.2.0

Registration:
/interface wireless registration print stats
0 interface=wlan1 mac-address=48:77:46:85:6B:9A ap=yes wds=no bridge=no rx-rate="1Mbps"
tx-rate="78Mbps-20MHz/2S" packets=3344,0 bytes=295987,0 frames=3344,2 frame-bytes=303439,292
hw-frames=6326,3558 hw-frame-bytes=737977,449102 tx-frames-timed-out=0 uptime=8m35s
last-activity=0ms signal-strength=-71dBm@1Mbps signal-to-noise=37dB
signal-strength-ch0=-73dBm signal-strength-ch1=-77dBm strength-at-rates=-71dBm@1Mbps 40ms
tx-ccq=59% p-throughput=55643 distance=1 802.1x-port-enabled=yes
authentication-type=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm
management-protection=no wmm-enabled=yes
tx-rate-set="CCK:1-11 OFDM:6-54 BW:1x SGI:1x HT:0-15"

Logs:
00:36:29 system,info router rebooted
00:36:30 bridge,info "bridge1" mac address changed to 48:8F:5A:28:F3:F5
00:36:31 wireless,info 48:77:46:85:6B:9A@wlan1 established connection on 2437000, SSID CX
D
00:36:37 bridge,info hardware offloading activated on bridge "bridge1" ports: ether1
00:36:39 interface,info ether1 link up (speed 100M, full duplex)
00:36:45 system,info,account user admin logged in from 64:00:6A:25:19:CA via winbox
00:36:46 system,info,account user admin logged in via local
00:36:49 system,info,account user admin logged in via local

Any idea why?