how do i configure RIP for sxt in this scenario??

shahin97 · Fri Mar 01, 2013 9:01 pm

Hello
We have some networks(subnets) that connected to each other with sxt or sextant ptp link.
Our network is same bellow picture:
all IP's Subnet: 24 (255.255.255.0)

3-1-2013 9-15-45 PM.jpg

The 1,2,3,4,5,6,7 are pc or server(windows server.)
A,B,C,D are Mikrotik SXT 5HnD
Befor now, all IPs is in one range and all sxt’s ports was in bridge1 so all clients see other. For example: client 1 see client 7.
But now I want every network has different IP range.
I need your help to configure RIP so that client 1 can get client 7’s ping or client 4 can get client 7’s ping.

How I do configure RIP for this scenario??

petrn · Fri Mar 01, 2013 9:33 pm

Hi

router B ether1 should be 192.168.1.2 (typo?), networks on wlan segments overlap, i think RIP will be confused.Use:

router A wlan1=192.168.10.1/255.255.255.252
router C wlan1=192.168.10.2/255.255.255.252
router B wlan1=192.168.10.5/255.255.255.252
router D wlan1=192.168.10.6/255.255.255.252

and RIP v2

shahin97 · Sat Mar 02, 2013 6:49 am

Hi

router B ether1 should be 192.168.1.2 (typo?), networks on wlan segments overlap, i think RIP will be confused.Use:

router A wlan1=192.168.10.1/255.255.255.252
router C wlan1=192.168.10.2/255.255.255.252
router B wlan1=192.168.10.5/255.255.255.252
router D wlan1=192.168.10.6/255.255.255.252

and RIP v2

very thank for your help.
yes. it's typo.

Ok. i will use them.

but i don't know how configure rip.

if possible tell me how i do this.

for example tell me :"roater A: routing>rip>networks> add >address:192.168.1.0/24>ok,add> Address:192.168.10.0/24"
or "router A: routing>RIP>Interface>Add>Interface: all,Recive: v1-2, send: v2>ok"

shahin97 · Sat Mar 02, 2013 11:11 pm

Problem Solved
in one sxt ARP of wlan1 was disabled.
solution: interface>wlan1>general tab>ARP: enabled !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

shahin97 · Sun Mar 03, 2013 1:45 pm

problem not solved completly
now clinet 1 have ping of router C > ether1(192.168.2.1) but can't ping of Client 4(request timed out)

petrn · Sun Mar 03, 2013 4:38 pm

problem not solved completly
now clinet 1 have ping of router C > ether1(192.168.2.1) but can't ping of Client 4(request timed out)

You have to post some configurations and outputs from your routers.

Here are my testbed configurations (all are almost bare minimum, there is way to get rid of 3 lines):

# mar/03/2013 13:53:33 by RouterOS 5.24
# software id = B9EB-8XWG
#
/system identity set name=routerA
/ip address add address=192.168.1.1/24 interface=ether1
/ip address add address=192.168.10.1/30 interface=wlan1
/routing rip network add network=192.168.10.0/24
/routing rip network add network=192.168.1.0/24

# mar/03/2013 13:54:02 by RouterOS 5.24
# software id = 85F0-Y53F
#
/system identity set name=routerB
/ip address add address=192.168.1.2/24 interface=ether1
/ip address add address=192.168.10.5/30 interface=wlan1
/routing rip network add network=192.168.1.0/24
/routing rip network add network=192.168.10.0/24

# mar/03/2013 13:53:16 by RouterOS 5.24
# software id = VDSN-8H03
#
/system identity set name=routerC
/ip address add address=192.168.2.1/24 interface=ether1
/ip address add address=192.168.10.2/30 interface=wlan1
/ip route add distance=1 gateway=192.168.2.2
/routing rip set distribute-default=always redistribute-connected=yes
/routing rip network add network=192.168.10.0/24

# mar/03/2013 13:53:48 by RouterOS 5.24
# software id = RJNF-SSM3
#
/system identity set name=routerD
/ip address add address=192.168.10.6/30 interface=wlan1
/ip address add address=192.168.3.1/24 interface=ether1
/routing rip set redistribute-connected=yes
/routing rip network add network=192.168.10.0/24

Default gateway, if necessary on routerC. Whoa i haven't configured RIP for years, surprisingly it still works.... :-)

petrn · Sun Mar 03, 2013 5:00 pm

BTW, i found bug:

normal export works fine

ros code

# /export
/routing rip network
add disabled=no network=0.0.0.0/0

compact export strips "network=0.0.0.0/0"

ros code

# /export compact
/routing rip network
add

and here is attempt to use compact export:

ros code

[admin@routerA] /routing rip network> add
network: 
interrupted
           value of network must contain '/'
[admin@routerA] /routing rip network>

shahin97 · Sun Mar 03, 2013 11:20 pm

error......
goto next post

shahin97 · Sun Mar 03, 2013 11:31 pm

see this picture:

3-4-2013 12-44-32 AM.jpg

and mikrotik sxt's configuration:

[admin@RouterA] > export
# jan/02/1970 00:55:36 by RouterOS 6.0rc5
# software id = 3VSY-KATS
#
/interface wireless
set 0 allow-sharedkey=yes band=5ghz-onlyn country=india disabled=no frequency=\
    5220 frequency-mode=superchannel ht-rxchains=0,1 ht-txchains=0,1 l2mtu=2290 \
    mode=station-bridge nv2-preshared-key=********* nv2-security=enabled \
    scan-list=5150-5250 ssid=Test wmm-support=enabled
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods=passthrough \
    mode=dynamic-keys supplicant-identity=M
    *********
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none 
/ip pool
add name=pool1 ranges=192.168.1.10-192.168.1.254
/ip dhcp-server
add add-arp=yes address-pool=pool1 disabled=no interface=ether1 lease-time=1d \
    name=server1
/ip address
add address=192.168.10.1/24 comment=WLAN1 i
nterface=wlan1 network=192.168.10.0
add address=192.168.1.1/24 comment=ether1 i
nterface=ether1 network=192.168.1.0
/ip dhcp-server network
add address=192.168.1.0/24 gateway=192.168.1.1 netmask=24
/routing rip
set distribute-default=always redistribute-
connected=yes redistribute-ospf=yes \
    redistribute-static=yes
/routing rip interface
add interface=wlan1 receive=v2
add interface=ether1 receive=v2
/routing rip network
add network=192.168.1.0/24
add network=192.168.10.0/24
/system identity
set name=RouterA
/system leds
set 0 interface=wlan1
set 1 interface=ether1
[admin@RouterA] >

[admin@RouterB] > export
# jan/02/1970 00:57:13 by RouterOS 6.0rc5
# software id = 2KPE-5XZI
#
/interface wireless
set 0 band=5ghz-onlyn disabled=no frequency=5220 frequency-mode=superchannel \
    ht-rxchains=0,1 ht-txchains=0,1 l2mtu=2290 mode=bridge nv2-preshared-key=\
    ********* nv2-security=enabled scan-list=5300-5400 ssid=Test \
    wireless-protocol=nv2
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods=\
    passthrough mode=dynamic-keys supplicant-identity=MikroTik \
    wpa2-pre-shared-key="**********"
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
/ip pool
add name=pool1 ranges=192.168.2.10-192.168.2.254
/ip dhcp-server
add add-arp=yes address-pool=pool1 disabled=no interface=ether1 lease-time=1d \
    name=server1
/ip address
add address=192.168.10.2/24 comment=WLAN1 interface=wlan1 network=\
    192.168.10.0
add address=192.168.2.1/24 comment=ether1 interface=ether1 network=\
    192.168.2.0
/ip dhcp-server network
add address=192.168.2.0/24 gateway=192.168.2.1 netmask=24
/routing rip
set distribute-default=always redistribute-connected=yes redistribute-ospf=\
    yes redistribute-static=yes
/routing rip interface
add interface=ether1 receive=v2
add interface=wlan1 receive=v2
/routing rip network
add network=192.168.10.0/24
add network=192.168.2.0/24
/system identity
set name=RouterB
/system leds
set 0 interface=wlan1
set 1 interface=ether1
[admin@RouterB] >

-------------
now clientA could ping 192.168.1.1 & 192.168.10.1 & 192.168.10.2 & 192.168.2.1
but could not ping 192.168.2.254 (request timed out)
why??

petrn · Mon Mar 04, 2013 7:29 am

now clientA could ping 192.168.1.1 & 192.168.10.1 & 192.168.10.2 & 192.168.2.1
but could not ping 192.168.2.254 (request timed out)
why??

Well, troubleshooting 101:
Can RouterB ping 192.168.2.254? Perhaps firewall in ClientB is blocking ICMP ....

shahin97 · Mon Mar 04, 2013 10:35 am

Well, troubleshooting 101:
Can RouterB ping 192.168.2.254? Perhaps firewall in ClientB is blocking ICMP ....

in tools>ping:
no, but when "interface=ether1" and "ARP ping=checked" ping is ok.

in routerA there is also this problem.

routerB can't ping 192.168.2.254 but clientB can ping 192.168.10.2
routerA can't ping 192.168.1.254 but clientA can ping 192.168.10.1

petrn · Mon Mar 04, 2013 11:17 am

Perhaps firewall in ClientB is blocking ICMP ....

shahin97 · Mon Mar 04, 2013 12:08 pm

Perhaps firewall in ClientB is blocking ICMP ....

thank you very very much

When i disable eset smart security firewall and i set windows firewall to off ping will be ok.

But when firewalls is off or disabled, maybe will happen security problems.

thank you again.

petrn · Mon Mar 04, 2013 12:23 pm

But when firewalls is off or disabled, maybe will happen security problems.

I guess that ping is not a main function of clientB, and BTW you enable ping in firewall settings and have firewall on.

shahin97 · Mon Mar 04, 2013 8:04 pm

But when firewalls is off or disabled, maybe will happen security problems.
I guess that ping is not a main function of clientB, and BTW you enable ping in firewall settings and have firewall on.

ping is not problem.
problem is: clientB is a server. in this server we have some website and ISA server. when firewall is on website and internet or ... is unreachable.