logo elektroda
logo elektroda
X
logo elektroda
Advanced Search
logo elektroda

Mikrotik LTE Setup with Huawei E3372h HiLink Modem: APN Settings, Fixed Public IP & VPN Access

klidan 16446 17
Best answers

How can I configure the APN and get VPN access on a Mikrotik using a Huawei E3372h HiLink modem?

You cannot set the APN in MikroTik’s LTE tab with a HiLink E3372h because the modem behaves like its own router; set the APN on the modem’s web interface at http://192.168.8.1/ and use the MikroTik WAN as DHCP [#16628285][#16628290] For inbound VPN access, you need port forwarding/DMZ on the modem side, or you must unlock advanced routing, turn off HiLink, or change the firmware [#16628285][#16722630][#17654550] If the goal is better MikroTik compatibility, one user reported that firmware 21.180.09.00.264 and 21.200.07.00.209_M_02 work, while 21.180.01.00.143 does not [#17654809] If the modem still blocks outside access, the practical workaround discussed was to use a non-HiLink/regular modem instead of HiLink [#16721735]
Generated by the language model.
ADVERTISEMENT
Treść została przetłumaczona polish » english Zobacz oryginalną wersję tematu
Report a violation of the law
| New topic
  • #1 16628277
    klidan
    Level 9  
    Posts: 22
    Rate: 3
    Hi, I have a problem because I bought Huawei E3372h modems HiLink .
    Now in Mikrotik settings I do not use PPP because it does not see the USB input. Instead, he sees the modem as LTE.
    I can't set APN in LTE settings.
    .
    I have to do this because I have a fixed public IP address.
    I need to enter APN: m2m.plusgsm.pl
    User: plusgsm
    Password: plusgsm

    Without it, I can't get to the router using a VPN tunnel. I will add that on standard settings the internet works but I would like to get to the router using a VPN, and without a fixed public IP I can't do it.

    Why can't I set the APN in the LTE tab?
    Mikrotik LTE Setup with Huawei E3372h HiLink Modem: APN Settings, Fixed Public IP & VPN Access
  • ADVERTISEMENT
  • #2 16628285
    Heinzek
    Network and Internet specialist  
    Posts: 3732
    Help: 554
    Rate: 493
    If you have them as HiLink then the modem is a "router" and you connect to it, set APN and redirect ports. Set everything as standard on http://192.168.8.1/
    In the mikrotiku WAN connection as DHCP.
  • #3 16628290
    bogiebog
    Level 43  
    Posts: 24793
    Help: 2569
    Rate: 1528
    MT sees 3372 hilink as an internal IP router, i.e. MT talks with 3372 as if from the outside of an IP router.

    APN is your modem settings, and your 3372 is not a modem, but a device with an IP address.

    To set the forward port enter configuration 3372 via IP address 3372.

    Added after 1 [minutes]:

    When you connect 3372 directly to your computer, what is the default gateway in your computer? this address is configuration address 3372.
  • #4 16721735
    klidan
    Level 9  
    Posts: 22
    Rate: 3
    Thank you all for the answers.
    I have purchased public permanent IP in PLus.
    That's also how I set up the HiLink modem and I actually get these public IPs.
    Its configuration IP is 192.168.8.1. I don't see the option to redirect ports on the modem. :(
    After connecting to the mikrotik is working internet. It configures itself well.

    I create a VPN server on mikrotiku. Unfortunately, I can't get to the mikrotik from the outside. In my opinion, the HiLink Modem blocks outside access.

    It seems that the only option is to convert HiLink to a regular modem. Unfortunately, no soft I want to upload to the modem (I have 6)
    I have bought 3 regular modems for now, because I don't have enough strength for HiLinks. I can't convert them.
  • #5 16722630
    pitron
    Level 24  
    Posts: 811
    Help: 51
    Rate: 99
    I don't know this modem, but to get what I write, you need to do one of three things in the modem:
    1. Unlock advanced routing options.
    2. Turn off Hlink
    3. Change the firmware
  • ADVERTISEMENT
  • #6 16813672
    klidan
    Level 9  
    Posts: 22
    Rate: 3
    I bought regular modems with firmware no Hilink but the Mikrotik Router only shows the status: "Link established"
    And it should be written: "Connected"
    WHAT is wrong with these modems?
  • #7 16813696
    bogiebog
    Level 43  
    Posts: 24793
    Help: 2569
    Rate: 1528
    Winbox, terminal.

    ping 192.168.8.1

    what shows
  • ADVERTISEMENT
  • #8 16813712
    klidan
    Level 9  
    Posts: 22
    Rate: 3
    bogiebog wrote:
    Winbox, terminal.

    ping 192.168.8.1

    what shows

    It shows "no route to host". This is a NIE Hilink modem. So plain.
    You can see it by PPP but it doesn't connect. :(
  • #9 16813753
    bogiebog
    Level 43  
    Posts: 24793
    Help: 2569
    Rate: 1528
    Have you looked at trzepak.pl? there is a whole bunch of rad / battle specialists with this equipment.

    Added after 35 [seconds]:

    klidan wrote:
    You can see it by PPP but it doesn't connect.

    Connected to the computer works?

    Is something interesting in the MT log?
  • #10 16813773
    klidan
    Level 9  
    Posts: 22
    Rate: 3
    It is working properly when connected to the computer. I install software on a PC and connect to the internet.
    I have another old modem identical and this one works with Mikrotik. It connects normally.
    Mikrotika Support only advised RouterOS upgrade. :(
  • #11 16813786
    bogiebog
    Level 43  
    Posts: 24793
    Help: 2569
    Rate: 1528
    klidan wrote:
    I have another old modem identical and this one works with Mikrotik

    Identical firmware also?
  • #12 16813809
    klidan
    Level 9  
    Posts: 22
    Rate: 3
    Working firmware: 21.180.09.00.264
    Inoperative firmware: 21.180.01.00.143
  • #13 16813852
    bogiebog
    Level 43  
    Posts: 24793
    Help: 2569
    Rate: 1528
    By the way, you didn't try to upload a working firmware to a broken one?
  • #14 16813854
    klidan
    Level 9  
    Posts: 22
    Rate: 3
    bogiebog wrote:
    klidan wrote:
    I have another old modem identical and this one works with Mikrotik

    Identical firmware also?

    I did change the firmware to E3372h-153_Update_21.200.07.00.209_M_02
    according to this guide: http://www.bez-kabli.pl/viewtopic.php?t=45272
    It looks like the internet is now working.

    I can't find this working clothes to download.
    I have another for it. Mods.

    I was already depressed because I bought 10 such modems for PLN 1,300.
    I hope that in the next ones I will be able to change the firmware so easily.
  • #15 17654493
    czaq
    Level 11  
    Posts: 13
    Rate: 4
    and how did you do? I fight it too, until I got here ;) In the Hilink version everything works, but there is no port forwarding, and the modem bought in the version without hilink, does not work on MT. On wines, of course, combines
  • ADVERTISEMENT
  • #16 17654550
    makosuu
    Network and Internet specialist  
    Posts: 2984
    Help: 369
    Rate: 369
    Change FW to e.g. modulated HiLink it will be possible to set DMZ or convert it to normal (not HiLink). I don't know what to do or not to do on MT.
  • #17 17654809
    klidan
    Level 9  
    Posts: 22
    Rate: 3
    Not all firmware is compatible with the mikrotkik.
    Below is my conversation with Mikrotik support. I did the tests and these versions work for me. Of course, these are usually not HiLink versions. You can flash them. I cut the casing and grounding a little to reset the whole modem, because sometimes it can scream when flashing.

    > I changed firmware from 21.180.01.00.143 - NOT work
    > To Firmware: 21.180.09.00.264 or 21.200.07.00.209_M_02 - Work Well
  • #18 17666288
    czaq
    Level 11  
    Posts: 13
    Rate: 4
    klidan wrote:
    Not all firmware is compatible with the mikrotkik.
    Below is my conversation with Mikrotik support. I did the tests and these versions work for me. Of course, these are usually not HiLink versions. You can flash them. I cut the casing and grounding a little to reset the whole modem, because sometimes it can scream when flashing.

    > I changed firmware from 21.180.01.00.143 - NOT work
    > To Firmware: 21.180.09.00.264 or 21.200.07.00.209_M_02 - Work Well


    Thanks! I have already uploaded 21.200.07.00.209_M_02 - tomorrow I will check my MT rb750gr3
| New topic
Report a violation of the law

Topic summary

✨ The discussion revolves around configuring a Mikrotik router with a Huawei E3372h HiLink modem. The user faces challenges in setting the APN (m2m.plusgsm.pl) due to the modem being recognized as an internal IP router rather than a standard modem. Responses suggest accessing the modem's settings via its IP address (192.168.8.1) to configure the APN and port forwarding. Users report that the HiLink version of the modem restricts external access, prompting some to consider converting it to a non-HiLink version. Firmware compatibility issues are also highlighted, with specific versions (21.180.09.00.264 and 21.200.07.00.209_M_02) noted as functional for Mikrotik integration. The conversation emphasizes the need for proper modem configuration to enable VPN access and public IP functionality.
Generated by the language model.

FAQ

TL;DR: With Huawei E3372h, treat HiLink as a router: set APN/port rules at 192.168.8.1 and use DHCP on MikroTik. In tests, 2 of 3 firmware builds worked; “Not all firmware is compatible with the mikrotik.” [Elektroda, klidan, post #17654809]

Why it matters: This setup enables fixed public IP and VPN access without guesswork for MikroTik + E3372h owners.

Quick Facts

How do I set APN for Huawei E3372h HiLink when using MikroTik?

Open http://192.168.8.1, log in, and set your APN there. Leave MikroTik’s WAN interface as a DHCP client to the modem. This avoids double configuration and lets the HiLink handle registration while MikroTik receives an IP via DHCP. Use this flow before configuring VPN or firewall rules on MikroTik. [Elektroda, Heinzek, post #16628285]

Why can’t I edit APN in MikroTik’s LTE tab with a HiLink E3372h?

HiLink operates as a mini-router, not a raw modem. MikroTik sees it as an upstream IP device, so APN lives on the HiLink’s web UI. Configure APN and any port rules on the modem itself at its management address. “APN is your modem settings.” [Elektroda, bogiebog, post #16628290]

How do I get fixed public IP and VPN access on Plus (Poland)?

Purchase a fixed public IP from Plus and set APN m2m.plusgsm.pl with user plusgsm and password plusgsm on the HiLink UI. After that, your VPN server on MikroTik becomes reachable from outside, provided ports are forwarded if needed. [Elektroda, klidan, post #16628277]

Where do I enable port forwarding or DMZ on E3372h HiLink?

Sign in to the HiLink admin page at 192.168.8.1. Use its port forwarding or DMZ settings, then keep MikroTik WAN as DHCP. This places MikroTik behind the HiLink’s NAT, so forwarding must be done on the modem. [Elektroda, Heinzek, post #16628285]

My non‑HiLink E3372h shows “Link established” but not “Connected” on MikroTik. Fix?

Use a MikroTik‑compatible firmware. Users reported success with 21.180.09.00.264 and 21.200.07.00.209_M_02, while 21.180.01.00.143 failed. “Not all firmware is compatible with the mikrotik.” [Elektroda, klidan, post #17654809]

Which E3372h firmware builds have known MikroTik compatibility?

Working: 21.180.09.00.264 and 21.200.07.00.209_M_02. Not working: 21.180.01.00.143. In one report, 2 of 3 tested versions worked. Upgrade to a working build if you see PPP or connection stalls. [Elektroda, klidan, post #17654809]

How do I flash or recover the E3372h if the update hangs?

If the updater stalls, a hard reset may be required before reflashing. One user opened the casing and briefly grounded to reset the modem, then flashed a working non‑HiLink build successfully. Proceed carefully to avoid damage. [Elektroda, klidan, post #17654809]

Can I disable HiLink to avoid double NAT and get direct PPP/LTE on MikroTik?

Yes. Options include unlocking advanced routing, turning off HiLink, or changing the firmware to a non‑HiLink variant. This restores classic modem behavior for MikroTik’s PPP/LTE client. [Elektroda, pitron, post #16722630]

How can I verify the modem’s management IP from MikroTik?

From Winbox or terminal, run: ping 192.168.8.1. A response confirms reachability of the HiLink UI. If you get “no route to host,” you may not be on a HiLink build or routing is misconfigured. [Elektroda, bogiebog, post #16813696]

It works on a Windows PC but not on MikroTik—what should I check?

Confirm the modem works on a PC, then inspect MikroTik logs for negotiation errors. Firmware compatibility is a common cause. Update RouterOS if advised, but prioritize flashing a known‑working modem firmware. [Elektroda, bogiebog, post #16813753]

I can’t find port forwarding on my HiLink UI—does that block VPN?

If the HiLink build lacks port forwarding, external access to the MikroTik VPN will fail. Convert to non‑HiLink or use a HiLink firmware that exposes DMZ/port forwarding. Then forward the VPN port to MikroTik. [Elektroda, klidan, post #16721735]

What do APN, HiLink, PPP, and DMZ mean in this setup?

APN selects your carrier profile for network access. HiLink is the E3372h’s router mode with its own web UI. PPP/LTE client is MikroTik’s direct‑modem method. DMZ forwards all inbound traffic to a single LAN host. HiLink shifts APN and forwarding to the modem UI. [Elektroda, bogiebog, post #16628290]

Do I need to change MikroTik WAN settings for HiLink?

Yes. Leave MikroTik’s WAN as a DHCP client that obtains an IP from the HiLink. Configure APN and any forwarding on 192.168.8.1. This is the simplest stable topology for quick internet and later VPN access. [Elektroda, Heinzek, post #16628285]

Edge case: Which specific firmware failed to establish a session on MikroTik?

Firmware 21.180.01.00.143 showed link but no full connection on MikroTik, while another identical modem worked. Upgrading resolved the issue. [Elektroda, klidan, post #16813809]

Quick 3‑step: How to set up MikroTik + E3372h HiLink for VPN reachability?

  1. Plug in E3372h, set MikroTik WAN as DHCP client.
  2. Log into 192.168.8.1, set APN m2m.plusgsm.pl (plusgsm/plusgsm), and enable port forwarding/DMZ to MikroTik.
  3. Run VPN server on MikroTik and test from outside. [Elektroda, Heinzek, post #16628285]
Generated by the language model.
ADVERTISEMENT