Strange routing issue (vlan bridge)

supfors · Thu Oct 10, 2013 4:00 pm

When i try to connect from PC1 (192.168.1.10) to PC2 (192.168.10.25) my connections get dropped by this rule. What's happening?

/ip firewall filter
chain=forward action=drop connection-state=invalid

(It has worked for a few seconds, see ping results, but now all traffic is dropped)

PING 192.168.10.25
64 bytes from 192.168.10.25: icmp_req=1 ttl=63 time=1.95ms
From 192.168.1.1: icmp_seq=2 Redirect Host(New nexthop: 192.168.10.25)
From 192.168.1.1: icmp_seq=2 Redirect Host64 bytes from 192.168.10.25: icmp_req=2 ttl=63 time=1.16ms
64 bytes from 192.168.10.25: icmp_req=3 ttl 63 time=2.17ms
64 bytes from 192.168.10.25: icmp_req=4 ttl 63 time=1.01ms

Mikrotik's eth2 goes to a managed switch. VLAN 10 untagged to PC1 & PC2
Some configuration:

/interface vlan
 #    NAME          MTU ARP              VLAN-ID INTERFACE                                                 
 1 R  vlan2.10      1500 enabled         10 ether2                                                    
 2 R  vlan2.45      1500 proxy-arp       45 ether2

/ip addresses
 #   ADDRESS            NETWORK         INTERFACE                                                                                              
 1   192.168.1.1/32     192.168.1.0        ether2
 2   192.168.10.1/32    192.168.10.0       vlan2.10                                                                                                
 3   192.168.45.1/32    192.168.45.0       vlan2.45  

/interface bridge
0  R name="bridge-lan" mtu=1500 l2mtu=1594 arp=enabled mac-address=D4:CA:6D:04:9A:2E protocol-mode=rstp priority=0x8000 auto-mac=yes 
      admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m

/interface bridge port
0    ether2              bridge-lan
1    vlan2.10            bridge-lan
2    vlan2.45            bridge-lan

/ip route
 #      DST-ADDRESS        PREF-SRC                         GATEWAY            DISTANCE
 1 A S  192.168.10.0/24    	                             bridge-lan                1
 2 ADC  192.168.10.0/32    192.168.10.1                    bridge-lan                0
 3 A S  192.168.1.0/24                                     bridge-lan                1
 4 ADC  192.168.1.0/32     192.168.1.1                     bridge-lan                0
 5 A S  192.168.45.0/24                                    bridge-lan                1
 6 ADC  192.168.45.0/32    192.168.45.1                    bridge-lan                0

Strange routing issue (vlan bridge)

Strange routing issue (vlan bridge)

Who is online