Community discussions

MikroTik App

Search found 13 matches

by JamesC
Thu May 22, 2014 9:11 pm
Forum: General
Topic: Hairpin NAT with R0S 6.12/RB2011 and Dynamic Public IP
Replies: 3
Views: 2783

Re: Hairpin NAT with R0S 6.12/RB2011 and Dynamic Public IP

That worked! Thank you so much. Now that I have read the wiki for dst-address-type it makes perfect sense. For others searching, here is my complete NAT rules: [admin@MikroTik] /ip firewall nat> pri Flags: X - disabled, I - invalid, D - dynamic 0 ;;; default configuration chain=srcnat action=masquer...
by JamesC
Thu May 22, 2014 8:40 pm
Forum: General
Topic: Hairpin NAT with R0S 6.12/RB2011 and Dynamic Public IP
Replies: 3
Views: 2783

Hairpin NAT with R0S 6.12/RB2011 and Dynamic Public IP

Hello all, I have searched many times, read many posts, read and re-read the wiki page, but I unable to get Hairpin NAT working with a dynamic public IP. This is for a RB2011 with default settings. I disabled the dhcp-client on ether1-gateway and statically assign the IP so it is easier to change du...
by JamesC
Wed May 07, 2014 6:30 pm
Forum: General
Topic: [SOLVED] Cloud Router Switch CRS125 Unable to ping hosts on
Replies: 1
Views: 750

[SOLVED] Cloud Router Switch CRS125 Unable to ping hosts on

So this was my own fault. The client devices are Windows 7 and when it detects the default gateway device has changed it switches to Public network mode. This blocks pings by default. Once the network mode was changed to Home or Work everything is working.

Sorry for the noise.

Thank you,
James
by JamesC
Wed May 07, 2014 5:52 pm
Forum: General
Topic: [SOLVED] Cloud Router Switch CRS125 Unable to ping hosts on
Replies: 1
Views: 750

[SOLVED] Cloud Router Switch CRS125 Unable to ping hosts on

Hi all, I have a Cloud Switch Router CSR125. ether1 is connected to a cable modem with a static IP. I can connect to the router (using ssh, or winbox) from the Internet to the IP on ether1. ether2 is the master port for ether3-ether24. I am unable to ping from winbox to any device connected to ether...
by JamesC
Mon Mar 03, 2014 6:46 pm
Forum: General
Topic: IPSec Tunnel - add new network at remote end
Replies: 5
Views: 1376

[SOLVED] Re: IPSec Tunnel - add new network at remote end

After getting traffic from the WatchGuard (central office) through the tunnel to the RB, I started thinking over my RB setup. In the RB, I have two rules that prevent traffic that should go over the IPSec tunnels from getting NATed. Here are the rules: add action=accept chain=srcnat comment=\ "...
by JamesC
Mon Mar 03, 2014 6:40 pm
Forum: General
Topic: IPSec Tunnel - add new network at remote end
Replies: 5
Views: 1376

Re: IPSec Tunnel - add new network at remote end

I made a little progress.

I am actually using the 172.20.0.0/16 subnet of the 172.16.0.0/12 network. Just on a whim I tried to change my tunnel config to be 172.20.0.0/16.

After changing both ends, I can ping from the WatchGuard end to the RB end.

Thank you,
James
by JamesC
Mon Mar 03, 2014 6:06 pm
Forum: General
Topic: IPSec Tunnel - add new network at remote end
Replies: 5
Views: 1376

Re: IPSec Tunnel - add new network at remote end

Yes. Both ends of the tunnel have been updated. The central office is a WatchGuard so the terminology is not the same as MikroTIk devices, but the settings match.
by JamesC
Mon Mar 03, 2014 3:49 pm
Forum: General
Topic: IPSec Tunnel - add new network at remote end
Replies: 5
Views: 1376

IPSec Tunnel - add new network at remote end

Hello all, I have several RB2011 devices connected to a central office using IPSec in tunnel mode. Each remote site has a 192.168.x.0/24 network. The existing IPSec policy has src-address=192.168.x.0/24 and dst-address=192.168.0.0/16. Using this setup each remote site can communicate through the cen...
by JamesC
Thu Oct 03, 2013 7:57 pm
Forum: General
Topic: AT&T Static IP Setup DSL pppoe
Replies: 6
Views: 2856

[Working!!!] Re: AT&T Static IP Setup DSL pppoe

So I have it working now!!! Yay! I have two connections to this RB. The one that has been working for sometime is a wireless (using a NetBridge cellular to ethernet bridge) connection on ether2. I added an AT&T DSL modem (in bridge mode) on ether1. My DSL connection had a /28 IP block. 8 IPs tot...
by JamesC
Thu Oct 03, 2013 3:36 pm
Forum: General
Topic: AT&T Static IP Setup DSL pppoe
Replies: 6
Views: 2856

Re: AT&T Static IP Setup DSL pppoe

The setup described in my previous post is not correct. The PPPoE connection uses the IP I assigned for the local address, but receives its remote IP from the AT&T PPPoE server. I moved the src-nat rule for pppoe interface above my src-nat rule for the backup connection. As soon as the rules cha...
by JamesC
Thu Oct 03, 2013 2:36 pm
Forum: General
Topic: AT&T Static IP Setup DSL pppoe
Replies: 6
Views: 2856

Re: AT&T Static IP Setup DSL pppoe

Thanks for the info lunchboxrts. I am working remotely through a backup connection and do not want to lose it before I am ready to set the default route to the PPPoE connection. Here is my static block x.x.x.176/28 .177 - Router/modem address .178 - First usable .182 - Last usable I tried creating a...
by JamesC
Tue Oct 01, 2013 11:37 pm
Forum: General
Topic: AT&T Static IP Setup DSL pppoe
Replies: 6
Views: 2856

AT&T Static IP Setup DSL pppoe

I am having trouble getting my AT&T DSL connection setup correctly. I have a block of static IPs (8 assigned, 5 usable). I have the DSL modem in bridge mode. I created a pppoe client on interface ether1 and it connects just fine. The IP address assigned by AT&T to the pppoe interface is not ...
by JamesC
Thu Sep 26, 2013 7:32 pm
Forum: General
Topic: Static IP issued from Bellsouth\ATT DSL configuration
Replies: 15
Views: 11299

Re: Static IP issued from Bellsouth\ATT DSL configuration

Can someone comment on setting up AT&T (was BellSouth) pppoe with a block of 8 (5 usable) static IPs? I have a block assigned and I know my pppoe user/password. The modem is in bridge mode. I created a pppoe client on interface ether1. When I activate the pppoe client it connects and receives an...