Good afternoon guys. I know that due to the new driver, bridge mode cannot be used as before (a huge step back, for ordinary users). I want to ask if there is a detailed, step-by-step instruction on how to still make the MikroTik hAP AX3 (and other AX models) work in classic bridge mode? I can't use different subnets, it creates huge problems in using local resources. I will be grateful for your help. I've been using MikroTik for many years and I don't want to switch to another brand because of this.

I spent a lot of time studying the documentation, but I did not find a working way to make the devices work in classic mode.

If anything, I can add RB5009 to the network as a CAPsMAN server, but then I need step-by-step instructions on how to do it. Thanks

Who said you cannot use the hapax3 in bridge mode? I have the hapax3 and am using vlan-filtering with hardware offload.
This is a very capable router!!

I would be very grateful if you would take the time to write a good instruction how do I do this? I have a main network on 10.10.10.X and it is important for me to save it and it is important that hAP ax receives the address of this network, and all clients connected to it via wifi or LAN receive addresses from this network too. Thanks a lot.

WAIT ONE - do you mean your hapax is only acting as a switch?? The below advice presumed that your hapax3 was connected to the internet via a modem and received a public IP. Do you actually mean your connected to an upstream router which provides a private LAN in the range 10.10.10.X ???

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Disregard the below if the hapax is not needed as a router but is merely acting as an AP switch.

The default setup of the hapax 3 is exactly what you need for an ROUTER SETUP.
The only difference is that the default address comes as 192.168.88.1/24 and you need it as 10.10 etc........

What I recommend you do is take one port off the bridge to do any changes so it will be less painful. Also use safe mode to make changes. https://help.mikrotik.com/docs/display/ ... Management

Enter the default config and remove ether5 as a bridge port. at the settings for /interface bridge port (remove the line)- you can always add it back later if you need it.

Then go to the address settings and add a new IP address
/ip address
add address=192.168.55.1 interface=ether5 network=192.168.55.0

Then add ether5 to the LAN interface list as a member
/interface list member
add interface=ether5 list=LAN

Then you can move your PC or laptop to ether5 directly and all you need to do is statically set your iPV4 settings to any address within that subnet so 192.168.55.5 would work just fine.
Then enter the router on ether5 to complete the config.

Change the address 192.168.88.1 interface=bridge network=192.168.88.0 to
/ip address
10.10.10.1/24 interface=bridge network=10.10.10.0

Ensure your IP DNS Settingss look like.
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,8.8.8.8

Remove this static DNS Settings ( see static on right hand menu or popup)
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan

Change your IP pools probably something like 192.168.88.2-192.168.88.254 to
/ip pool
add name=default-dhcp ranges=10.10.10.2-10.10.10.254

Change your IP DHCP Server from 192.168.88.0/24 ................ to
/ip dhcp-server network
add address=10.10.10.0/24 comment=defconf dns-server=10.10.10.1 gateway=\
10.10.10.1\

+++++++++++++++++++++++++++++

That should be about it.............

Sorry for my amateurish question, but it won't be a problem two DHCP servers on the network? The main router in my network is UDM Pro (10.10.10.1), which also acts as a DHCP server. I need only UDP Pro to be responsible for IP issuance.

Yes it will be a problem to have two dhcp servers on the same network.
Remove the UDM router it serves no purpose and only use the HAPAX3.

The reason being that for all layer3 needs, the devices will go to the UDM and not to the hapax3.
So you need to decide.

Will the hapax simply act as a switch/AP or as a router..........

What you need to think about is why do you have the AX3... what is its purpose??
Alternatively, ask yourself, what does the UDM do that the AX3 cannot do??

I don't want to start "holy wars", but UDM Pro can do a lot, it has a video surveillance system, a regional firewall and an authorization service for doors. hAP AX is planned to be used only to expand the network, I know that this is an amazing device and all my other projects are built on Mikrotik equipment, but in this particular case, I do not plan to abandon Ubiquiti equipment. At least they are much easier to manage, I'm not as big an expert as you are.

I have RB4011 on the same network and it took 10 minutes to set it up. hAP AX was bought by another person without taking into account the current configuration and hardware. Of course, the easiest way is to buy another AP ubiquiti and not suffer, but it's not interesting and boring

Okay so you want it to be an access point switch, not sure why that is so hard to say.
In that case, the default config is rather simple
Nothing much other than bridge, WIFI settings bridge ports ( assuming ether1 is connected to the UDM )

/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wifi1
add bridge=bridge comment=defconf interface=wifi2
{ and possibly some virtual wifi wlans }

and the following rules.
Everything else can be removed.

Bridge gets the address assigned by you on the 10.10.10 network
/ip address
add address=10.10.10.X/24 interface=bridge network=10.10.10.0
/interface list
add name=MGMT
/interface list member
add interface=bridge list=MGMT
/ip neighbor discovery-settings
set discover-interface-list=MGMT
/ip dns
set allow-remote-requests=yes servers=10.10.10.1
/ip route
add dst-address=0.0.0.0/0 gateway=10.10.10.1 routing-table=main
/tool mac-server
set allowed-interface-list=MGMT
/tool mac-server mac-winbox
set allowed-interface-list=MGMT

I will try this. Thank you

Thank you for your time. For some reason I don't understand, your option didn't want to work, clients get an arbitrary IP and there is no Internet. I did it differently: I configured AX3 on the 10.10.1.X network and added a route to the 10.10.10.X network on it, maybe this is not very correct, but it works. Thanks again for your help.

Post your config and I can comment on what should be changed if anything.
By the way, there is a route on the config provided ??