I recently upgraded my main home router from the hAP ac2 to hAP ax3. I have been using ROS for a while, but I do not change settings very often, so I am by no means an expert.
I cannot figure out what I did differently in this config than the previous (upgraded about 6 mo ago).
On the old router, I would print from my iPhone no prob, but with the new router, my iPhone just gives no air print printers found.
I can print from computers just fine and my GF can print from her Samsung phone as well (after I manually put in the IP).
Both the iPhone and the printer are on the same network (wifi 2.4gHz limitation of the printer). Using the old router, it did not matter as both the 2.4gHz and the 5gHz are in the same bridge. For some reason, the AirPrint packets are getting filtered out somewhere (I assume).
I am not knowledgeable enough to know if this is an error in my config, or if this is a bug with the new ROS 7 (hAP ac2 ran ROS 6).
My config is posted below. Please note that this is just what I have cobbled together using the default config and trying to customize for my needs (and learn).
I have been reading on the forum, but have not seen any issues like mine (again makes me think I did something wrong).
I have seen tons of posts about the how the hAP ax3 has bad wifi, but my experience has been incredible, other than this small issue. I get the full bandwidth of my service (600mb) in rooms near the router. In the near future, I plan to add a cAP ax on the other side of the house.
Feel free to pick this apart and let me know what I have done incorrectly. Thanks in advance for any advice.
I cannot figure out what I did differently in this config than the previous (upgraded about 6 mo ago).
On the old router, I would print from my iPhone no prob, but with the new router, my iPhone just gives no air print printers found.
I can print from computers just fine and my GF can print from her Samsung phone as well (after I manually put in the IP).
Both the iPhone and the printer are on the same network (wifi 2.4gHz limitation of the printer). Using the old router, it did not matter as both the 2.4gHz and the 5gHz are in the same bridge. For some reason, the AirPrint packets are getting filtered out somewhere (I assume).
I am not knowledgeable enough to know if this is an error in my config, or if this is a bug with the new ROS 7 (hAP ac2 ran ROS 6).
My config is posted below. Please note that this is just what I have cobbled together using the default config and trying to customize for my needs (and learn).
I have been reading on the forum, but have not seen any issues like mine (again makes me think I did something wrong).
I have seen tons of posts about the how the hAP ax3 has bad wifi, but my experience has been incredible, other than this small issue. I get the full bandwidth of my service (600mb) in rooms near the router. In the near future, I plan to add a cAP ax on the other side of the house.
Feel free to pick this apart and let me know what I have done incorrectly. Thanks in advance for any advice.
Code:
# 2023-12-30 09:10:11 by RouterOS 7.13# software id = 6AVW-UFWP## model = C53UiG+5HPaxD2HPaxD# serial number =/interface bridgeadd admin-mac=xx:xx:xx:xx:xx:xx auto-mac=no comment=defconf name=bridge \ port-cost-mode=short/interface ethernetset [ find default-name=ether1 ] name=ether1-WANset [ find default-name=ether2 ] name=ether2-AcrossPastureset [ find default-name=ether3 ] name=ether3-Office/interface wifiset [ find default-name=wifi1 ] channel.skip-dfs-channels=10min-cac \ configuration.country="United States" .manager=local .mode=ap \ .multicast-enhance=enabled .ssid=Computers disabled=no \ security.authentication-types=wpa2-psk,wpa3-pskset [ find default-name=wifi2 ] channel.skip-dfs-channels=10min-cac .width=\ 20mhz configuration.country="United States" .manager=local .mode=ap \ .multicast-enhance=enabled .ssid="Game Consoles" disabled=no \ security.authentication-types=wpa2-psk,wpa3-pskadd configuration.mode=ap .multicast-enhance=enabled .ssid=Guest disabled=no \ mac-address=xx:xx:xx:xx:xx:xx master-interface=wifi1 name=wifi3add configuration.mode=ap .multicast-enhance=enabled .ssid=Guest disabled=no \ mac-address=xx:xx:xx:xx:xx:xx master-interface=wifi2 name=wifi4/interface listadd comment=defconf name=WANadd comment=defconf name=LAN/ip pooladd name=dhcp ranges=192.168.15.50-192.168.15.200add name=vpn ranges=192.168.89.2-192.168.89.255/ip dhcp-serveradd address-pool=dhcp interface=bridge lease-time=10m name=defconf/ppp profileset *FFFFFFFE local-address=192.168.89.1 remote-address=xxxxxxxxxx/interface bridge filteradd action=drop chain=forward in-interface=wifi3add action=drop chain=forward out-interface=wifi3add action=drop chain=forward in-interface=wifi4add action=drop chain=forward out-interface=wifi4/interface bridge portadd bridge=bridge comment=defconf interface=ether2-AcrossPasture \ internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf interface=ether3-Office internal-path-cost=\ 10 path-cost=10add bridge=bridge comment=defconf interface=ether4 internal-path-cost=10 \ path-cost=10add bridge=bridge comment=defconf interface=ether5 internal-path-cost=10 \ path-cost=10add bridge=bridge comment=defconf interface=wifi1 internal-path-cost=10 \ path-cost=10add bridge=bridge comment=defconf interface=wifi2 internal-path-cost=10 \ path-cost=10add bridge=bridge interface=wifi3 internal-path-cost=10 path-cost=10add bridge=bridge interface=wifi4 internal-path-cost=10 path-cost=10/ip neighbor discovery-settingsset discover-interface-list=LAN/ipv6 settingsset disable-ipv6=yes/interface detect-internetset detect-interface-list=all/interface l2tp-server serverset enabled=yes use-ipsec=yes/interface list memberadd comment=defconf interface=bridge list=LANadd comment=defconf interface=ether1-WAN list=WAN/ip addressadd address=192.168.15.1/24 comment=defconf interface=bridge network=\ 192.168.15.0add address=xxx.xxx.xxx.xxx/xx interface=ether1-WAN network=xxx.xxx.xxx.xxx/ip cloudset ddns-enabled=yes/ip dhcp-clientadd comment=defconf disabled=yes interface=ether1-WAN/ip dhcp-server networkadd address=192.168.15.0/24 comment=defconf dns-server=192.168.15.1 gateway=\ 192.168.15.1 netmask=24/ip dnsset allow-remote-requests=yes servers=xxx.xxx.xxx.xxx,xxx.xxx.xxx.xxx/ip dns staticadd address=192.168.15.1 comment=defconf name=router.lan/ip firewall filteradd action=accept chain=input comment=\ "defconf: accept established,related,untracked" connection-state=\ established,related,untrackedadd action=accept chain=input comment="allow IPsec NAT" dst-port=4500 \ protocol=udpadd action=accept chain=input comment="allow IKE" dst-port=500 protocol=udpadd action=accept chain=input comment="allow l2tp" dst-port=1701 protocol=udpadd action=drop chain=input comment="defconf: drop invalid" connection-state=\ invalidadd action=accept chain=input comment="defconf: accept ICMP" protocol=icmpadd action=accept chain=input comment=\ "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1add action=drop chain=input comment="defconf: drop all not coming from LAN" \ in-interface-list=!LANadd action=accept chain=forward comment="defconf: accept in ipsec policy" \ ipsec-policy=in,ipsecadd action=accept chain=forward comment="defconf: accept out ipsec policy" \ ipsec-policy=out,ipsecadd action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ connection-state=established,related hw-offload=yesadd action=accept chain=forward comment=\ "defconf: accept established,related, untracked" connection-state=\ established,related,untrackedadd action=drop chain=forward comment="defconf: drop invalid" \ connection-state=invalidadd action=drop chain=forward comment=\ "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ connection-state=new in-interface-list=WAN/ip firewall natadd action=masquerade chain=srcnat comment="defconf: masquerade" \ ipsec-policy=out,none out-interface-list=WANadd action=masquerade chain=srcnat comment="masq. vpn traffic" src-address=\ 192.168.89.0/24/ip upnpset enabled=yes/ip upnp interfacesadd interface=bridge type=internaladd interface=ether1-WAN type=external/ipv6 firewall address-listadd address=::/128 comment="defconf: unspecified address" list=bad_ipv6add address=::1/128 comment="defconf: lo" list=bad_ipv6add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6add address=100::/64 comment="defconf: discard only " list=bad_ipv6add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6/ipv6 firewall filteradd action=accept chain=input comment=\ "defconf: accept established,related,untracked" connection-state=\ established,related,untrackedadd action=drop chain=input comment="defconf: drop invalid" connection-state=\ invalidadd action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ icmpv6add action=accept chain=input comment="defconf: accept UDP traceroute" port=\ 33434-33534 protocol=udpadd action=accept chain=input comment=\ "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ udp src-address=fe80::/10add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ protocol=udpadd action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ ipsec-ahadd action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ ipsec-espadd action=accept chain=input comment=\ "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsecadd action=drop chain=input comment=\ "defconf: drop everything else not coming from LAN" in-interface-list=\ !LANadd action=accept chain=forward comment=\ "defconf: accept established,related,untracked" connection-state=\ established,related,untrackedadd action=drop chain=forward comment="defconf: drop invalid" \ connection-state=invalidadd action=drop chain=forward comment=\ "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6add action=drop chain=forward comment=\ "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ hop-limit=equal:1 protocol=icmpv6add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ icmpv6add action=accept chain=forward comment="defconf: accept HIP" protocol=139add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ 500,4500 protocol=udpadd action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ ipsec-ahadd action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ ipsec-espadd action=accept chain=forward comment=\ "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsecadd action=drop chain=forward comment=\ "defconf: drop everything else not coming from LAN" in-interface-list=\ !LAN/ppp secretadd name=xxxxxxxxxx/system clockset time-zone-name=America/Chicago/system noteset show-at-login=no/tool mac-serverset allowed-interface-list=LAN/tool mac-server mac-winboxset allowed-interface-list=LANStatistics: Posted by wgilthorpe — Sat Dec 30, 2023 6:21 pm