Mikrotik Router Board RB-751G 2Hnd configured as a router with access point

Mikrotik Router Board RB-751G 2Hnd configured as a router with access point

This example is carried out to RB-751G 2Hnd

1. Ether1 will be set as "WAN" that connects to the modem or router from your ISP through "DHCP client".
2. Ether2 to ether5 will be configured as a switch to not overload the router board of the CPU.
3. A bridge will be created with the gates ether2 which master is ether3, 4, 5 and WLAN1.
4. The bridge is created an IP range and configure a DHCP server.
5. The WAN and LAN interfaces will be masked from each other by NAT.
6. The access point will be secured with WPA and WPA2

Attention! You can interfaces ether2 to ether5 just stabbing in the bridge but from the router CPU board is fully loaded with heavy data traffic and network performance goes down.

Benaam interfaces to get a clear picture of what needs to be connected to which interface. Click on "interfaces" and double-click each interface. Give each interface an appropriate name.

Connect the router interface board with "ether1-wan" and the modem of your internet provider through a network with each other.

1. In the main vester click "IP".
2. Then click on "DHCP Client".

1. Click on the blue cross to set a DHCP client.
2. Under "Interface" "ether1-wan"
3. Click "OK". The router board will now be know obtain an IP address from the modem of your internet provider.

Interfaces "ether2" to "ether5" Configuring in bridge mode.

1. In the main vester click "interfaces".
2. Double-click interface "ether3-lan."

1. When "master port", select "ether2-lan."
2. Click "OK".

1. When "master port", select back "ether2-lan."
2. Click "OK".

1. When "master port", select "ether2-lan."
2. Click "OK".

Creating a bridge and add the bridge ports.

1. Click on the head vester to "bridge".
2. Click on the blue cross in order to create a bridge.
3. When "name" give the bridge a name.
4. Click "OK".

1. Click on "ports" to stabbing interfaces in the bridge.
2. Click on the blue cross.
3. Select "ether2-lan."
4. Click "OK".

1. Click on "ports" to stabbing interfaces in the bridge.
2. Click on the blue cross.
3. Select "WLAN1".
4. Click "OK".

Configure IP address and DHCP server on the bridge

1. In the main menu click on "ip".
2. Then click "addresses".

1. Click on the blue cross in order to enter an IP address.
2. To "address" specify an IP address, for example 192.168.100.1/24
3. Under "Interface" "bridge-lan."
4. Click "OK".

You should now see two IP addresses. Those obtained from the provider and that you have created.

Configure DHCP server.

Click "IP" then "DHCP server", here are the steps that are created automatically but we will go through this once.

Click "DHCP setup".

1. When "DHCP server interface" select "bridge_lan".
2. Click "next".

"DHCP address space" is displayed automatically, click on "next".

At "gateway for DHCP network" will appear the IP address which you have given to the bridge, then click "next".

To "address to give out" (ie the IP addresses that will hand the DHCP server), click "next".

"DNS servers" fill your chosen DNS server IP addresses, for example those of your provider. Click on the arrow at the bottom to add a second DNS server (recommended). Sometimes these are added automatically. Click "next".

With "lease time" (this is the time that the DHCP server will reserve the IP address to a specific PC) the institution let alone whether to change it, click on "next".

The DHCP server is fully configured.

Configure wet settings

1. Click "ip"
2. Then "firewall

1. Click on the tab "NAT"
2. Click on the blue cross to create a nat rule.

1. In "chain" slecteer "srcnat"
2. At "Src. Address" fill in the IP address that you have given the bridge along with the subnet mask 192.168.100.0/24 in this case.
3. When "Out interface", select the "WAN Interface" (the interface that connects to the modem of your provider).
4. Click further on the tab "action".

1. In "action" select "masquerade".
2. Click "ok"

The NAT (Network Address Translation) settings are made.

The wireless configuration

1. Click on the main menu "wireless".
2. Click the "interfaces" tab.
3. Double-click "WLAN1".
4. Click the "Wireless" tab.
5. When "mode" select "ap bridge".
6. At "band" select "2GHz-B / G / N.
7. When "frequency" select a channel to be used as little as possible in your area.
8. At "SSID" enter a name in the access point must broadcast.
9. Right click below on "advanced mode".

1. With "country" select the country where the access point is located.
2. Click on the "advanced" tab.

1. If the access point is used within select at "distance" "indoors".
2. Click on the "ht" tab.

With "HT" check that all the chains are checked.

1. click "OK".

Configure wireless security.

1. Click on the tab "security profile".
2. Click on the blue cross to create a security profile.

1. Click on the blue cross
2. When "name" give the profile a name.
3. Check "WPA2 PSK" to. Check out all the excess.
4. At "unicast ciphers" check "aes ccm" to.
5. When "group ciphers" check "aes ccm" to.
6. Fill a hard to guess password that you changed regularly.
7. Click "OK".

The profile is created, return to the tab "Wireless" "interfaces".

1. Put the access point by clicking the blue tick.
2. Double-click "WLAN1".

1. Click further on the tab "Wireless".
2. For "security profile", select the profile that you have properly configured. In this example it is "home".
3. Click "ok"