Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I use 2 Mikrotik wireless router, the first one is connected to modem and it works perfectly (SSID: server-one (hidden)).

Second router ID:


wlan1: dhcp-client


SSID: skywifi

Then, i tried to configure the second router. I set wlan1 to connect to server-one, as a station and dhcp client and received as its IP, as its gateway.

I set wlan2 as an ap-bridge, and set it as dhcp server. Then I create a static route to through

Connection OK, DNS to device connecting skywifi works perfectly, i can nslookup The problem is, when i tried to ping, it always give request time out reply. (Note that I also tried to ping another host too (Wikipedia,Yahoo, etc). The result is also request time out.

Any idea why this things happened? Thanks,

share|improve this question

The first router has no idea that it's supposed to NAT for the second router's clients, nor does it have any route to their IP addresses. As far as it's concerned the IP addresses the second router assigns to its clients are foreign to it, reachable only through its default route to the Internet, and it has no idea they belong on its LAN interface.

I wouldn't suggest a setup like this in the first place. Without knowing your exact requirements, it's hard to suggest a more sensible setup. But having a router NAT for more than one LAN is more complex than you probably need or want.

Networks with more than one LAN IP range, more than one router, and unbridged WiFi networks are complex. They should be set up by people who understand IP routing and the limitations of WiFi client connections. I'd suggest hiring a competent consultant who can ask you the right questions and ensure your design will do what you really need it to while avoiding pitfalls like double NAT, relaying WiFi on the same channel that halves bandwidth, or fake, unreliable WFi bridging.

share|improve this answer

You also must activate NAT on second router...

/ip firewall nat add chain=srcnat out-interface=wlan1 action=masquerade
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.