PROBLEMS:
1. can ping 1.1.1.1 from AP but can from PC connected to AP
This is just now config
Reset from factory default
AP can get ip and gateway from dhcp
Problem still the same
# show version
E410-9B6365 cnPilot E410 Dual Band Indoor Integrated
Regulatory domain ROW
Software version 4.0-r17
# sh ip interface br
DEVICE ADDRESS RX-PTKS TX-PTKS RX-BYTES TX-BYTES TX-PTK-DROPS RX-PTK-DROPS AVG-TX(kbps) MAX-TX MIN-TX AVG-RX MAX-RX MIN-RX
PORT-CHANNEL1 0.0.0.0 0 0 0 0 0 0 0 0 0 0 0 0
VLAN1 192.168.88.174 4724 429 359621 56477 0 0
ETH1 0.0.0.0 5495 444 489563 57603 0 55 0 4 0 0 5 3
# sh ip route
DESTINATION MASK GATEWAY FLAGS METRIC INTERFACE
0.0.0.0 0.0.0.0 192.168.88.1 UG 0 VLAN1
169.254.0.0 255.255.0.0 0.0.0.0 U 0 VLAN1
192.168.88.0 255.255.255.0 0.0.0.0 U 0 VLAN1
# show config
!
management user admin password $crypt$1$DcUFwcKeUU7OaaS7sAheqBYT0jMwvS8O
no management radius-auth
management cambium-remote
management cambium-remote validate-server-cert
no management telnet
management ssh
management ssh idle-timeout 300
no management http
management http port 80
management https
management https port 443
led
lldp
no poe-out
country-code CN
wpa2-handshake-retry 4 4
wpa2-handshake-timeout 100 500 1000
wpa2-handshake-log-level 4
placement indoor
!
wireless radio 1
no shutdown
channel auto
channel-width 20
channel-list all-channels
data-rate unicast 6b 9 12 18 24 36 48 54
data-rate non-unicast highest-basic
power auto
mode gn
airtime-fairness
antenna-gain 5
beacon-interval 100
off-channel-scan dwell-time 50
auto-rf
auto-rf channel-selection-mode interference
auto-rf chan-hold-time 120
auto-rf interference-diff-threshold 10
auto-rf packet-error-rate-threshold 30
auto-rf channel-utilization-threshold 25
multicast-to-unicast max-stream 40
multicast-to-unicast max-stream-per-client 25
mesh-xtnded-dev-list
wmm-parameters downstream txoplimit vi 3008
wmm-parameters downstream txoplimit vo 1504
wmm-parameters upstream txoplimit vi 3008
wmm-parameters upstream txoplimit vo 1504
!
wireless radio 2
no shutdown
channel auto
channel-width 80
channel-list prefer-non-dfs
data-rate unicast 6b 9 12b 18 24b 36 48 54
data-rate non-unicast lowest-basic
power auto
no airtime-fairness
antenna-gain 5
beacon-interval 100
off-channel-scan dwell-time 50
auto-rf channel-selection-mode interference
auto-rf chan-hold-time 120
auto-rf interference-diff-threshold 10
auto-rf packet-error-rate-threshold 30
auto-rf channel-utilization-threshold 25
multicast-to-unicast max-stream 40
multicast-to-unicast max-stream-per-client 25
mesh-xtnded-dev-list
wmm-parameters downstream txoplimit vi 3008
wmm-parameters downstream txoplimit vo 1504
wmm-parameters upstream txoplimit vi 3008
wmm-parameters upstream txoplimit vo 1504
!
wireless wlan 1
ssid E410B
no shutdown
vlan 1
security wpa2-psk
protected-mgmt-frames state optional
protected-mgmt-frames sa-query-retry-time 100
protected-mgmt-frames association-comeback 1
passphrase $crypt$1$dE+sdRuH+n+iWkRwXWDDxVzp29rAmI7N
band both
dtim-interval 1
max-associated-client 127
network-policy-id 0
mac-authentication policy deny
no guest-access
!
rogue-ap detection
!
!
interface portchannel 1
switchport mode access
switchport access vlan 1
!
interface eth 1
switchport mode access
switchport access vlan 1
!
interface vlan 1
ip address zeroconf
ip dhcp request-option-all
ipv6 request-option-all
management-access all
ipv6 address autoconfig
ip address dhcp
!
hostname E410-9B6365
timezone Asia/Jakarta
snmp-server
snmp-server read-community public
snmp-server write-community private
firewall dos-protection ip-spoof
firewall dos-protection ip-spoof-log
firewall dos-protection smurf-attack
firewall dos-protection icmp-frag
!
ip gw-source-precedence static 1
ip gw-source-precedence dhcpc 2
ip gw-source-precedence pppoe 3
ipv6 gw-source-precedence static 1
ipv6 gw-source-precedence auto-config/dhcpc 2
logging syslog 7
UPDATE1:
-this is nothing to do with e410
I beleive because of setting in Mikrotik that from certain ip ranges blocked to certain ip ranges