I'm getting started with a Mikrotik LtAP6. Reset to factory defaults. AT&T SIM card (verified it works in an AT&T compatible tablet) inserted into Slot 2.
Mikrotik UI shows the signal strength and AT&T as the carrier.
I cannot ping 8.8.8.8 from any interface.
Logs shows "lte registered home"
What do I need to configure for this to work?
Re: Mikrotik LtAP: No internet
Did you use Quickset to perform the very first config ?
Best to export config, post here between code quotes (after additionally reviewing the output for private info like passwords, public IP, etc.)
/export hide-sensitive file=anynameyouwish
Best to export config, post here between code quotes (after additionally reviewing the output for private info like passwords, public IP, etc.)
/export hide-sensitive file=anynameyouwish
-
-
conectandonet
just joined
- Posts: 2
- Joined:
Re: Mikrotik LtAP: No internet
Do a trace route (Tools-->Traceroute) to 8.8.8.8 to see where it times out
Re: Mikrotik LtAP: No internet
Code: Select all
# jan/02/1970 03:06:17 by RouterOS 7.4
# software id = 80QS-W6RL
#
# model = RBLtAP-2HnD
# serial number = zzzzz
/interface bridge
add admin-mac=DC:2C:6E:AE:3D:A3 auto-mac=no comment=defconf name=bridge
/interface lte
# A newer version of modem firmware is available!
set [ find ] allow-roaming=no band="" name=lte1 network-mode=gsm,lte
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
disabled=no distance=indoors frequency=auto installation=outdoor mode=\
ap-bridge ssid=MikroTik-AE3DA4 wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface lte apn
set [ find default=yes ] use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp interface=bridge name=defconf
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=wlan1
/interface detect-internet
set detect-interface-list=all
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=lte1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
192.168.88.0
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=\
192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related hw-offload=yes
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
ipsec-policy=out,none out-interface-list=WAN
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" port=\
33434-33534 protocol=udp
add action=accept chain=input comment=\
"defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
ipsec-esp
add action=accept chain=input comment=\
"defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment=\
"defconf: drop everything else not coming from LAN" in-interface-list=\
!LAN
add action=accept chain=forward comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment=\
"defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
ipsec-esp
add action=accept chain=forward comment=\
"defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment=\
"defconf: drop everything else not coming from LAN" in-interface-list=\
!LAN
Last edited by oguruma on Sun Jul 24, 2022 7:23 pm, edited 1 time in total.
Re: Mikrotik LtAP: No internet
Remove serial number please.
I'll have a look later.
No APN info from provider ?
I'll have a look later.
No APN info from provider ?
Re: Mikrotik LtAP: No internet
Can you also provide output from
/ip address print
/ip route print
/ip address print
/ip route print
Last edited by holvoetn on Sun Jul 24, 2022 9:17 am, edited 1 time in total.
Re: Mikrotik LtAP: No internet
Is that config export complete ?
It looks like it was truncated at the end.
How is your device supposed to be connected to ISP ?
I will assume you need to get an IP from ISP and then continue from there.
Or is there pass-through mode involved (most likely not) ?
I am puzzled by the fact you have no APN info
(this is how my LTE section looks like: first definition of APN profile, then use that profile when setting up LTE interface)
yet the part of /interface lte shows a remark a new firmware is available. Which would mean there is connection otherwise it could not check ? Still is possible since that modem is sitting before the router part, it makes direct connection.
/ip address print and /IP route print outputs will tell more ...
But as far as I know there should be some APN info with setting of default route. I guess that's why it doesn't work.
It looks like it was truncated at the end.
How is your device supposed to be connected to ISP ?
I will assume you need to get an IP from ISP and then continue from there.
Or is there pass-through mode involved (most likely not) ?
I am puzzled by the fact you have no APN info
(this is how my LTE section looks like: first definition of APN profile, then use that profile when setting up LTE interface)
Code: Select all
/interface lte apn
set [ find default=yes ] add-default-route=yes apn=free authentication=none default-route-distance=5 ip-type=ipv4 \
name=FRFree use-network-apn=no use-peer-dns=yes
/interface lte
set [ find ] allow-roaming=yes apn-profiles=FRFree band="" disabled=no !modem-init mtu=1500 name=lte1 network-mode=\
3g pin=<secret>
/ip address print and /IP route print outputs will tell more ...
But as far as I know there should be some APN info with setting of default route. I guess that's why it doesn't work.
Re: Mikrotik LtAP: No internet
Code: Select all
Columns: ADDRESS, NETWORK, INTERFACE
# ADDRESS NETWORK INTERFACE
;;; defconf
0 192.168.88.1/24 192.168.88.0 bridge
Code: Select all
Flags: D - DYNAMIC; A - ACTIVE; c, y - COPY
Columns: DST-ADDRESS, GATEWAY, DISTANCE
DST-ADDRESS GATEWAY DISTANCE
DAc 192.168.88.0/24 bridge 0
Re: Mikrotik LtAP: No internet
You're not getting an address.
What provider are you with for the SIM card ?
What APN info do they require (can be found on their website, I hope) ?
What provider are you with for the SIM card ?
What APN info do they require (can be found on their website, I hope) ?
Re: Mikrotik LtAP: No internet
This is AT&T (in the U.S). Their website, doesn't specify anything about how to configure with none-phone/tablet modems.You're not getting an address.
What provider are you with for the SIM card ?
What APN info do they require (can be found on their website, I hope) ?
https://www.att.com/support/article/wireless/KM1062162/
Re: Mikrotik LtAP: No internet
According to that page you linked, APN has to be set to NXTGENPHONE
So:
/interface lte apn
set [ find default=yes ] add-default-route=yes apn=NXTGENPHONE authentication=none default-route-distance=5 ip-type=ipv4 \
name=ATT use-network-apn=no use-peer-dns=yes
/interface lte
set [ find ] allow-roaming=yes apn-profiles=ATT band="" disabled=no !modem-init mtu=1500 name=lte1 network-mode=\
3g,lte pin=<fill in your pin>
So:
/interface lte apn
set [ find default=yes ] add-default-route=yes apn=NXTGENPHONE authentication=none default-route-distance=5 ip-type=ipv4 \
name=ATT use-network-apn=no use-peer-dns=yes
/interface lte
set [ find ] allow-roaming=yes apn-profiles=ATT band="" disabled=no !modem-init mtu=1500 name=lte1 network-mode=\
3g,lte pin=<fill in your pin>
Re: Mikrotik LtAP: No internet
Adding:
since in your first post you say that SIM works in a AT&T compatible tablet, what are the APN settings on that device ?
Use the same settings.
since in your first post you say that SIM works in a AT&T compatible tablet, what are the APN settings on that device ?
Use the same settings.