{"id":1337,"date":"2019-05-16T09:24:01","date_gmt":"2019-05-16T06:24:01","guid":{"rendered":"https:\/\/helia.ee\/koolitus\/?page_id=1337"},"modified":"2019-05-16T09:24:02","modified_gmt":"2019-05-16T06:24:02","slug":"mikrotik-ptp-link","status":"publish","type":"page","link":"https:\/\/helia.ee\/koolitus\/?page_id=1337","title":{"rendered":"Mikrotik &#8211; PTP link"},"content":{"rendered":"\n<p>We are often asked how to make building to building or \u2018point to point\u2019 wireless links. As the MikroTik interface does not change between models this \u2018How To\u2019 can apply to any MikroTik Wireless based device. For this How To I&nbsp;will be using a pair of the new MikroTik SXT AC\u2019s, to create a L2 transparent wireless bridge in a simple point to point mode (PtP). &nbsp;This How To can also apply to point to multi point scenarios (PtMP). One SXT will be set up in&nbsp;\u2018Bridge\u2019 mode (effectively an AP)&nbsp;and the other as \u2018Station Bridge\u2019 (i.e. the \u2018client\u2019), to ensure best performance&nbsp;the link will be created and secured using the Mikrotik NV2 TDMA based protocol.<br><\/p>\n\n\n\n<p><strong>Step 1 \u2013&nbsp;<\/strong>The first port of call for configuring any Mikrotik&nbsp;device is to manually change your systems IP address in order to communicate with the Mikrotik&nbsp;equipment effectively, in this How To I will be using 192.168.88.2 as my system IP initially and then swapping back to DHCP once the link is established. (note that Mikrotik&nbsp;devices are configured on 192.168.88.1 for Ether 1&nbsp;from the manufacturer by default).<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"alignleft\"><a href=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/CaptureMT.jpg\"><img decoding=\"async\" src=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/CaptureMT.jpg\" alt=\"CaptureMT\" class=\"wp-image-1548\"\/><\/a><\/figure><\/div>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"alignleft\"><a href=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/linuxIPMT.jpeg\"><img decoding=\"async\" src=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/linuxIPMT.jpeg\" alt=\"linuxIPMT\" class=\"wp-image-1549\"\/><\/a><\/figure><\/div>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"alignleft\"><a href=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/OSX-IP-confMT.jpg\"><img decoding=\"async\" src=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/OSX-IP-confMT.jpg\" alt=\"OSX-IP-confMT\" class=\"wp-image-1550\"\/><\/a><\/figure><\/div>\n\n\n\n<p><strong>Step 2 \u2013&nbsp;<\/strong>Once a static IP has been set on your computer you will be able to log in and configure the Mikrotik Wireless device using the free Winbox tool provided by Mikrotik&nbsp;<a href=\"http:\/\/download2.mikrotik.com\/routeros\/winbox\/3.0beta3\/winbox.exe\">HERE<\/a>, there is also a web gui tool (WebFig) but we will not be using that for this How To. Once Winbox is downloaded and launched you will be able to see your first Mikrotik Wireless device under the neighbours tab (only plug in one device directly into your system at a time for initial configuration). &nbsp;If the device does not immediately appear, press the \u2018Refresh\u2019 button.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><a href=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/Winbox.jpg\"><img decoding=\"async\" src=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/Winbox.jpg\" alt=\"Winbox\" class=\"wp-image-1558\"\/><\/a><\/figure><\/div>\n\n\n\n<p><strong>Step 3 \u2013&nbsp;<\/strong>Connect to the first wireless device using its default IP of 192.168.88.1 &nbsp;default username will be admin with no password set. Once connected a new window will appear with many options, see image below for reference.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><a href=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/winboxblank.jpg\"><img decoding=\"async\" src=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/winboxblank-1024x550.jpg\" alt=\"winboxblank\" class=\"wp-image-1559\"\/><\/a><\/figure><\/div>\n\n\n\n<p><strong>Step 4 \u2013&nbsp;<\/strong>Now that we are logged into the Mikrotik we can begin configuring it for use in our PTP link, the first one we are going to configure is the access point which might&nbsp;be plugged directly into a switch in the main office, or a broadband router at home. To enable us to transparently bridge Layer 2 traffic across the link, we are going to bridge the ethernet and the wireless interfaces together. &nbsp;Doing this will also allow a&nbsp;DHCP server to assign the Mikrotik a unique Network IP which will allow for easy configuration in the future on your internal network, which may not be on the same 192.168.88.0\/24 network. To create a bridge simply select bridge from the left menu, a new window will appear within Winbox. Select the + symbol to create a new bridge and give it a meaning full name e.g.&nbsp;\u201cWireless bridge\u201d.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><a href=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/wireless-bridge.jpg\"><img decoding=\"async\" src=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/wireless-bridge-1024x535.jpg\" alt=\"wireless bridge\" class=\"wp-image-1561\"\/><\/a><\/figure><\/div>\n\n\n\n<p><strong>Step 5 \u2013&nbsp;<\/strong>Now that we have a bridge we have to assign the&nbsp;interfaces&nbsp;to it, on a Mikrotik SXT or Netmetal you normally have 2 interfaces, namely wlan1 and Ether1-local. An&nbsp;OmniTik for example will have more ethernet interfaces. To assign interfaces to the bridge simply select the ports tab under the \u2018Bridge\u2019 window and use the + to add&nbsp;the required&nbsp;interfaces, for this&nbsp;SXT I&nbsp;have assigned both \u2018ether1-local\u2019 and \u2018wlan1\u2019 to the new bridge.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><a href=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/bridge-ports.jpg\"><img decoding=\"async\" src=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/bridge-ports-1024x512.jpg\" alt=\"bridge ports\" class=\"wp-image-1562\"\/><\/a><\/figure><\/div>\n\n\n\n<p><strong>Step 6 \u2013&nbsp;<\/strong>&nbsp;Now that we have a working bridge we need to instruct that bridge to receive an IP address from the DHCP server\/router, to do this select \u2018IP\u2019 from the left hand menu followed by DHCP Client then + to add a new client interface, next select the bridge interface that we created earlier. Nothing will happen at this stage providing the Mikrotik is directly connected to your system. &nbsp;(Once we\u2019re finished, we will remove the static IP currently on ether1-local).<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><a href=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/DHCP-Client.jpg\"><img decoding=\"async\" src=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/DHCP-Client.jpg\" alt=\"DHCP Client\" class=\"wp-image-1565\"\/><\/a><\/figure><\/div>\n\n\n\n<p><strong>Step 7 \u2013<\/strong>&nbsp;Now its time to configure the Wireless interface on our Mikrotik to broadcast a secure wireless signal for our station side to connect to. This can be done by selecting Wireless from the left hand menu followed by double clicking \u2018wlan1-gateway\u2019&nbsp;from the interface list (normally only 1 Wlan interface is listed but it\u2019s actual name may change depending on the type of MikroTik RouterBoard). This will bring up a new window with many options, select the wireless tab within the new window and then click on&nbsp;\u2018Advanced mode\u2019. More options will now appear but don\u2019t panic! First thing we should configure is the frequency mode which will automatically bring the Mikrotik into Compliance with local regulatory guidelines (set by Ofcom in the UK), ensure that Frequency Mode is set to \u2018regulatory-domain\u2019 and the county is set to the country that the Mikrotik will be operating in. In this case, I have selected United Kingdom. Once this is done \u2018simple mode\u2019 can be re-selected or you can continue to work in Advanced mode.<\/p>\n\n\n\n<p><strong>Step 8 \u2013&nbsp;<\/strong>Still in the wireless tab under the wireless interface configuration window change the Mode to \u2018ap bridge\u2019 &nbsp;and the SSID to something appropriate, I used \u2018Mikrotik PTP\u2019. If the SXT only has a Level 3&nbsp;license, then the mode \u2018ap bridge\u2019 is not available, so select \u2018bridge\u2019 instead. &nbsp;For a point to point system, there is no difference between \u2018ap bridge\u2019 and \u2018bridge\u2019 wireless modes. &nbsp;For point to multi-point, you will need a MikroTik RouterBoard wireless product with a Level 4 license. Wireless protocol should now be changed to \u2018nv2\u2019, by doing this simple change we have added a substantial layer of reliability&nbsp;to the wireless signal we are producing compared to using 802.11 WiFi mode. No conventional wireless client such as laptop or phone can communicate on the NV2 protocol as they don\u2019t understand it only Mikrotik devices can use NV2. &nbsp;(Note that&nbsp;there are also no device drivers available for Windows, Linux or Mac OSX as the NV2 mode is a proprietary TDMA based system).<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><a href=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/Wirelessconf.jpg\"><img decoding=\"async\" src=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/Wirelessconf.jpg\" alt=\"Wirelessconf\" class=\"wp-image-1568\"\/><\/a><\/figure><\/div>\n\n\n\n<p><strong>Step 9 \u2013&nbsp;<\/strong>To add a significant&nbsp;amount of extra security to the link we are creating, navigate to the NV2 tab under the wireless interface configuration window, tick the security box and enter in a Preshared key of your choosing, click apply when done. &nbsp;NV2 will then switch to encrypting the wireless data using AES.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><a href=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/Nv2.jpg\"><img decoding=\"async\" src=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/Nv2.jpg\" alt=\"Nv2\" class=\"wp-image-1570\"\/><\/a><\/figure><\/div>\n\n\n\n<p><strong>Step 10 \u2013&nbsp;<\/strong>The first Mikrotik is now ready and can be plugged in to the main network (it\u2019s wise to delay actually mounting this unit, until&nbsp;the second unit is connected and tested). &nbsp;Plug in the second Mikrotik direct to your computer (this will be the Station device for the remote end we are connecting to) and repeat steps 1-7 on this second device.<\/p>\n\n\n\n<p><strong>Step 11 \u2013&nbsp;<\/strong>The mode for this Mikrotik shoudl be set to \u2018station bridge\u2019 with all other settings remaining the same as last time with the SSID set to the same as before and Wireless protocol set to nv2. Select the NV2 tab and enter the same AES preshared key as you did on the last device, Select apply.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><a href=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/wirelessst.jpg\"><img decoding=\"async\" src=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/wirelessst.jpg\" alt=\"wirelessst\" class=\"wp-image-1572\"\/><\/a><\/figure><\/div>\n\n\n\n<p><strong>Step 12 (Testing) \u2013<\/strong>&nbsp;If everything has gone to plan with the previous steps we should now have a wireless link between the 2 Mikrotik devices, therefore we will now test this link. Ensure that the AP end configured earlier is plugged into your main network and leave the station end device plugged into your computer. Do not connect the station client end into the same network as your AP device, otherwise when the wireless connects, it will create a broadcast storm! To see if the devices have connected open a winbox connection to the device you have plugged in and select Wireless from the left hand menu, select the \u2018Registration\u2019 table and you will see the connection in this window, if nothing is displayed please go over the previous steps.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><a href=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/wirelessreg.jpg\"><img decoding=\"async\" src=\"https:\/\/blog.linitx.com\/wp-content\/uploads\/2014\/10\/wirelessreg-1024x391.jpg\" alt=\"wirelessreg\" class=\"wp-image-1573\"\/><\/a><\/figure><\/div>\n\n\n\n<p>Next remove the static IPs set on each of the two devices\u2019&nbsp;ether1 interfaces and also the fixed IP on your computer&nbsp;(see step 1). Your computer should now be served an IP address over the wireless link from your own DHCP server. Providing the AP is connected to your main network which also serves the internet you will now have full internet access subject to any network access restrictions and policies already in affect. Both Mikrotik devices will also have received an IP address from the DHCP Server with means that you will be able to winbox to either device once they connected to the same network and the wireless link is connected.<\/p>\n\n\n\n<p><strong>Step 13 \u2013&nbsp;<\/strong>&nbsp;Mount both devices in the respective locations and angle them towards each other ensuring full radio line of site (remember \u2013 just because YOU can see the other end with your eyes, does not mean the same thing as the radios being able to \u2018see\u2019 each other. Read up on Fresnel Zone!) For the best connection, there are LEDs on the rear of Mikrotik PTP devices with can aid in precise positioning by indicating signal strength.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>We are often asked how to make building to building or \u2018point to point\u2019 wireless links. As the MikroTik interface does not change between models this \u2018How To\u2019 can apply to any MikroTik Wireless based device. For this How To I&nbsp;will be using a pair of the new MikroTik SXT AC\u2019s, to create a L2 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":612,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"class_list":["post-1337","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/pages\/1337","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1337"}],"version-history":[{"count":1,"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/pages\/1337\/revisions"}],"predecessor-version":[{"id":1338,"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/pages\/1337\/revisions\/1338"}],"up":[{"embeddable":true,"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/pages\/612"}],"wp:attachment":[{"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1337"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}