Community discussions

MikroTik App
 
mikrojonathan
just joined
Topic Author
Posts: 4
Joined: Sun May 21, 2023 12:36 pm

manage map lite access point through LAN port

Sun May 21, 2023 12:46 pm

Dear all,

Apologies if this might sound as a very dumb or beginner question, but I'm having trouble allowing the follow:

Access (https) towards the map lite from the LAN port.

Scenario:

Internet > Router > vlan 2 > Map Lite (192.168.0.1) > AP DHCP (192.168.168.1/24)
Internet > Router > vlan 3 > LAN network (172.20.0.1/24)

The map lite functions as a (bridged) access point with DHCP running.
All is working (internet from wlan on the 192.168.0.1/24 subnet)

However I can only get to the management gui from the actual WLAN clients and not the LAN clients.
Routes and natting is there on the Router and debugging allows the connection correctly.

Anyone with some advice ?
Thanks
 
rbuserdl
Member Candidate
Member Candidate
Posts: 270
Joined: Thu Mar 22, 2018 1:53 pm

Re: manage map lite access point through LAN port

Tue May 23, 2023 10:23 pm

Hello MikroJonathan!!!

Not sure I understand well. I have many questions
You can access to your router from vlan2 but you can not access to your router from vlan3?
What is there in the LAN Network? The router has a ip address in the same network 172.20.0.0/24?
Which IP are you trying to reach from your LAN? Did you tried to ping this?

Regards,
Damián
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: manage map lite access point through LAN port

Tue May 23, 2023 10:44 pm

Default ether port is considered WAN on map lite and most likely your firewall will block access from WAN.
One (albeit quite raw) option is to simply add an input rule in firewall for TCP/443, no interface.
Place that rule before the input drop rule.
Then you should be able to get in from everywhere.
 
mikrojonathan
just joined
Topic Author
Posts: 4
Joined: Sun May 21, 2023 12:36 pm

Re: manage map lite access point through LAN port

Wed May 24, 2023 12:58 am

Hello MikroJonathan!!!

Not sure I understand well. I have many questions
You can access to your router from vlan2 but you can not access to your router from vlan3?
What is there in the LAN Network? The router has a ip address in the same network 172.20.0.0/24?
Which IP are you trying to reach from your LAN? Did you tried to ping this?

Regards,
Damián
I can access the map lite from the WLAN dhcp addresses but not from any vlan behind the LAN connector (wan side of the map lite)
I tried the management IP I set on this ethernet port (wan side of the map lite).
 
mikrojonathan
just joined
Topic Author
Posts: 4
Joined: Sun May 21, 2023 12:36 pm

Re: manage map lite access point through LAN port

Wed May 24, 2023 12:59 am

Default ether port is considered WAN on map lite and most likely your firewall will block access from WAN.
One (albeit quite raw) option is to simply add an input rule in firewall for TCP/443, no interface.
Place that rule before the input drop rule.
Then you should be able to get in from everywhere.
Thanks! I’ll try that tomorrow when I’m home from work!
Wilk post feedback after.
 
mikrojonathan
just joined
Topic Author
Posts: 4
Joined: Sun May 21, 2023 12:36 pm

Re: manage map lite access point through LAN port

Thu May 25, 2023 11:53 pm

Thanks for the quick resolution!
It ended up being the firewall input rule after all.
Must’ve selected something incorrectly when I tried a firewall allow policy before posting…

It works as expected now, next is to enable my ssh access instead and perhaps fine tune the firewall a bit.

This topic can be marked as resolved

Who is online

Users browsing this forum: No registered users and 38 guests