Community discussions

MikroTik App
 
User avatar
fibrewire
just joined
Topic Author
Posts: 22
Joined: Thu Jul 26, 2007 6:49 pm
Location: Coachella Valley
Contact:

Need other 10.X.X.X routers to route out

Fri Sep 08, 2023 8:12 am

Hi all, I have a Powerbox router that is connected to a modem on eth1, has a backhaul connection to other networking gear on eth2 as well as an AP on eth3. OSPF seems to be working correctly, and connections that originate from the Mikrotik router seem to work, but i can't seem to get traffic from anything of the other 10.X.X.X gear to route out the Powerbox router. Traceroute stops at the Mikrotik router but goes no further. If it helps there are two virtual mikrotik routers in a datacenter that are my route out via L2TP connections. Any ideas?
# sep/07/2023 21:46:58 by RouterOS 6.49.10
# software id = WUCQ-M8Q6
#
# model = 960PGS
# serial number = ABCDEFGHIJKL
/interface ethernet
set [ find default-name=ether1 ] mac-address=64:D1:54:24:2A:07 name=e1-Modem \
    speed=100Mbps
set [ find default-name=ether2 ] mac-address=64:D1:54:24:2A:08 name=\
    e2-GoNav-AP poe-out=forced-on speed=100Mbps
set [ find default-name=ether3 ] mac-address=64:D1:54:24:2A:09 name=\
    e3-GoNav-BH-GO2 poe-out=forced-on speed=100Mbps
set [ find default-name=ether4 ] mac-address=64:D1:54:24:2A:0A name=e4 speed=\
    100Mbps
set [ find default-name=ether5 ] mac-address=64:D1:54:24:2A:0B name=e5 speed=\
    100Mbps
set [ find default-name=sfp1 ] advertise=\
    10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full mac-address=\
    64:D1:54:24:2A:0C
/interface l2tp-client
add connect-to=50.7.X.X disabled=no max-mru=1460 max-mtu=1460 name=\
    l2tp-fdc1 password=subersecret user=go-nav
add connect-to=107.181.X.X disabled=no max-mru=1460 max-mtu=1460 name=\
    l2tp-stam1 password=subersecret user=go-nav
/interface list
add exclude=dynamic name=discover
add name=mactel
add name=mac-winbox
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool2 ranges=10.199.197.200-10.199.197.254
add name=dhcp_pool3 ranges=10.199.198.200-10.199.198.254
/ip dhcp-server
add address-pool=dhcp_pool2 disabled=no interface=e3-GoNav-BH-GO2 name=dhcp1
add address-pool=dhcp_pool3 disabled=no interface=e2-GoNav-AP name=dhcp2
/routing ospf area
add area-id=0.0.0.1 name=morongo
/routing ospf instance
set [ find default=yes ] router-id=10.199.198.1
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,pas\
    sword,web,sniff,sensitive,api,romon,dude,tikapp"
/ip neighbor discovery-settings
set discover-interface-list=discover
/interface list member
add interface=e2-GoNav-AP list=discover
add interface=e3-GoNav-BH-GO2 list=discover
add interface=e4 list=discover
add interface=e5 list=discover
add interface=sfp1 list=discover
add list=discover
add list=mactel
add list=mac-winbox
/ip address
add address=10.199.197.1/24 interface=e3-GoNav-BH-GO2 network=10.199.197.0
add address=10.199.198.1/24 interface=e2-GoNav-AP network=10.199.198.0
/ip dhcp-client
add add-default-route=no disabled=no interface=e1-Modem use-peer-dns=no \
    use-peer-ntp=no
/ip dhcp-server network
add address=10.199.197.0/24 dns-server=10.199.198.1 gateway=10.199.197.1
add address=10.199.198.0/24 dns-server=10.199.198.1 gateway=10.199.198.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.88.1 name=router
/ip route
add distance=1 gateway=66.74.56.1
add check-gateway=ping distance=1 dst-address=8.8.8.8/32 gateway=10.106.8.217
add distance=1 dst-address=50.7.X.X/32 gateway=66.74.X.X
add distance=1 dst-address=72.8.X.X/32 gateway=66.74.X.X
add distance=1 dst-address=107.181.X.X/32 gateway=66.74.X.X
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=both
/routing ospf interface
add cost=54 network-type=broadcast
add cost=54 interface=l2tp-fdc1 network-type=point-to-point
add cost=54 interface=l2tp-stam1 network-type=point-to-point
/routing ospf network
add area=morongo network=10.199.198.0/24
add area=morongo network=10.199.197.0/24
add area=morongo network=10.106.8.217/32
add area=morongo network=10.106.5.217/32
add area=backbone network=10.106.5.17/32
add area=backbone network=10.199.193.0/24
/system clock
set time-zone-name=America/Los_Angeles
/system identity
set name="GoNav NEW"
/system ntp client
set enabled=yes primary-ntp=66.220.10.2 secondary-ntp=45.55.58.103
/system watchdog
set ping-start-after-boot=15m ping-timeout=10m watch-address=8.8.8.8
/tool mac-server
set allowed-interface-list=mactel
/tool mac-server mac-winbox
set allowed-interface-list=mac-winbox
 
User avatar
fibrewire
just joined
Topic Author
Posts: 22
Joined: Thu Jul 26, 2007 6:49 pm
Location: Coachella Valley
Contact:

Re: Need other 10.X.X.X routers to route out  [SOLVED]

Fri Sep 08, 2023 8:17 pm

The Powerbox had a previous configuration on it, so i cleared the firewall using this command
/ip firewall filter remove [/ip firewall filter find]
Well apparently i didn't think to put the srcnat masquerade rule back in. As soon as I did the traffic started flowing again.

Thanks for looking, and thank you Gustavo!
https://fiverr.com/s/2oGmKQ

Who is online

Users browsing this forum: No registered users and 5 guests