Community discussions

Search found 44 matches

by JRayfield
Fri Jun 28, 2019 4:58 am
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

I did find information on how to set a NAT rule to correct the problem of clients not showing the correct public ip address. That works fine now. I also found that I needed a couple of filters in the firewall rules to allow inbound and outbound traffic that's using the public ip addresses. I also fo...
by JRayfield
Fri Jun 28, 2019 12:22 am
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

So, this does work to give internet access from a Client Router/Network/Device. But, the IP address that always shows as the public IP, such as when I browse to ipchicken.com, is my Edge Router's WAN IP address (the 'default' IP address for my network), and not the public IP address that is set in t...
by JRayfield
Thu Jun 27, 2019 1:32 am
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

So, here's what I'll do: Edge Router - Route: 198.1.2.128/27 Gateway: 10.0.247.101 'This gives me 30 usable IP addresses through Site Router 1. Route: 198.1.2.160/29 Gateway: 10.0.247.102 'This gives me 6 usable IP addresses through Site Router 2. Route: 198.1.2.168/29 Gateway: 10.0.247.104 'This gi...
by JRayfield
Wed Jun 26, 2019 7:06 pm
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

Ah, yes. I had forgotten about needing the gateway ip for the 198.1.2.x network up addresses, in each site router.

John
by JRayfield
Wed Jun 26, 2019 5:53 pm
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

Or would this be more correct: Edge Router route: Destination Address: 198.1.2.128/29 Gateway Address: 10.0.247.101 where 198.1.2.128/29 sets up 6 usable IP addresses and routes those to the Network 2 (which is the first Site Router network) Destination Address: 198.1.2.136/29 Gateway Address: 10.0....
by JRayfield
Wed Jun 26, 2019 5:34 pm
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

And I made a mistake. It's 198.1.2.128/26, not /29. Let me back up here a bit. Edge Router-->Network 1-->Site Router 1-->Network 2-->Client Router-->Network 3-->Client PC So, on the Edge Router, I set up a route to Network 2: Destination Address: 198.1.2.131 Gateway: 10.0.247.101 where 198.1.2.131 i...
by JRayfield
Wed Jun 26, 2019 3:33 pm
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

No, the 38.1.2.128/29 range is provided by the upstream provider as a 'transport' only. The client 'block is the 198.1.2.128/29 range. Something else that others, with whom I've spoken to about this subject, had mentioned was the necessity to break the 198.1.2.128/29 block into smaller blocks to ass...
by JRayfield
Wed Jun 26, 2019 12:26 am
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

I think I've got it! That actually sounds pretty simple. :-) So I just need to set up incoming routes to get traffic to the correct Client Router/Network. You mention the firewall and NAT. Even with the routes, this incoming traffic will still be going through the firewall/NAT, correct? So I might n...
by JRayfield
Tue Jun 25, 2019 5:35 pm
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

So now I would like to go a step further, now that I -think- I understand the routing aspects of this. :-) I've used port forwarding a lot to get outside connections into specific machines in networks. But the routing public IP addresses to Clients' networks is not clear to me. Currently, I have one...
by JRayfield
Mon Jun 24, 2019 8:51 pm
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

That makes sense. ICMP is enabled with Input, but not forward. That's going to stop it from passing -through- the router to the next router. And yes, it worked. So, other 'regular' traffic should pass then, correct? Unless it's specifically blocked in the firewall of one of the routers. Correct? I r...
by JRayfield
Mon Jun 24, 2019 8:35 pm
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

I've typed /24 too many times. Yes, it's 0.0.0.0/0 on all routers.

John
by JRayfield
Mon Jun 24, 2019 7:49 pm
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

They are set up as a chain. Client Router has 0.0.0.0/24 with Gateway as 10.1.1.254 (which is one of the LAN IP addresses on the Site Router). Site Router has 0.0.0.0/24 with Gateway as 10.0.247.254 (which is one of the LAN IP addresses on the Edge Router). Client routers have internet access just f...
by JRayfield
Mon Jun 24, 2019 7:01 pm
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

Let me set up this scenario (which is real). Here's how it's physically set up. The IP addresses shown for each Router are the WAN port IP addresses (Gateways for the 'next' network). Edge Router-->Network 1-->Site Router 1-->Network 2-->Client Router-->Network 3-->Client PC ::::::::::::::::::10.0.2...
by JRayfield
Sun Jun 23, 2019 8:14 pm
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

I sure appreciate all of this help. I need to 'digest it', but this is the kind of help that I need.

Thank you both!

John
by JRayfield
Sun Jun 23, 2019 4:49 pm
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

mducharme, I think I understand what you're saying. I think this again goes back to my background in communications. I'm definitely going to have to 'reshape' my thinking. :-) And there's obviously going to have to be routes in the Client Router to reach the internet, correct? Jebz, I see what you m...
by JRayfield
Sun Jun 23, 2019 5:45 am
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

These IP addresses will definitely not be 'going to waste'. This is a network for a new WISP network, not a private network.

John
by JRayfield
Sat Jun 22, 2019 8:34 pm
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

One problem that I think I'm having is that I don't think in terms of 'networks'. I think in terms of 'devices'. I do think of a point-to-point 'network' as a 'path', but I think of it as a 'path' between two 'devices'. And one 'device' doesn't communicate with a 'network', but communications with a...
by JRayfield
Thu Jun 20, 2019 3:15 pm
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

Ok. Now let's expand this a bit. If the 'device' is another route that's on the other side of another router, like this: Edge Router --> Router 1 --> Client Router Then, I would need a route (static or use something like OSPF) in the Edge Router, to route a public IP to the Client Router, since the ...
by JRayfield
Thu Jun 20, 2019 4:05 am
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Re: Routing a Block of Public IP Addresses

I understand that each 'device' on the network would be programmed with it's own public IP address. I realize that I didn't mention that I understood that.

Would I still have to have routes to reach each device from the 'outside world'?

John
by JRayfield
Thu Jun 20, 2019 1:04 am
Forum: General
Topic: Routing a Block of Public IP Addresses
Replies: 37
Views: 2192

Routing a Block of Public IP Addresses

I understand how to set up a Mikrotik router in an office environment where there's one public IP on the WAN port and there's a route such as "0.0.0.0/" with the Gateway IP address to the ISP's gateway router, and then using NAT in the router. But now I'm trying to learn how to set up a MikroTik rou...
by JRayfield
Sat Apr 27, 2019 8:46 pm
Forum: General
Topic: Public IP Addresses on WISP Network
Replies: 11
Views: 571

Re: Public IP Addresses on WISP Network

This is the kind of help that I was hoping to get. Thanks to both of you. No management system at this point. Everything is done manually, which can continue for a little while. We're not building out fast (yet). So,it sounds like setting up each site router as a PPPoe server would work. And if I el...
by JRayfield
Sat Apr 27, 2019 4:09 pm
Forum: General
Topic: Public IP Addresses on WISP Network
Replies: 11
Views: 571

Re: Public IP Addresses on WISP Network

Pretty obvious that I need to be using PPPoe. I've found a good article on setting up PPPoe, both server side and client. It actually looks pretty simple to set up. What the article doesn't address is how this can work (or not) where there are multiple NATs involved. So, if I have the client router,...
by JRayfield
Sat Apr 27, 2019 6:20 am
Forum: General
Topic: Public IP Addresses on WISP Network
Replies: 11
Views: 571

Re: Public IP Addresses on WISP Network

You were correct. There is one main router/firewall (with NAT), multiple site routers/firewalls (with NAT), and then client routers/firewalls (with NAT). I can see now that this was a bad idea, at least for this type of network. As I've been thinking about this, I can see that I don't need the main ...
by JRayfield
Fri Apr 26, 2019 5:33 pm
Forum: General
Topic: Public IP Addresses on WISP Network
Replies: 11
Views: 571

Re: Public IP Addresses on WISP Network

My idea was to have three 'private' networks: Backhaul, Tower/AP, Client.

John
by JRayfield
Fri Apr 26, 2019 12:08 am
Forum: General
Topic: Public IP Addresses on WISP Network
Replies: 11
Views: 571

Public IP Addresses on WISP Network

I know that this topic has come up before in these forums and I have found some posts regarding it. But, I know that certain specific things in a network may have a bearing on how using public IP addresses for clients is done. I have a lot of experience with RF (over 40 years), but some experience w...
by JRayfield
Wed Aug 01, 2018 12:29 am
Forum: Announcements
Topic: v6.42.6 [current]
Replies: 102
Views: 29097

Re: v6.42.6 [current]

I've got a CRS125-24G-1S that has Routerboard 3.41 in it and RouterOS is 6.40.4.

I've tried several times to upgrade the RouterOS version to 6.42.6 as well as to 6.40.5. Neither will work. After rebooting, the CRS125 still shows RouterOS at 6.40.4.

Suggestions?

John Rayfield, Jr.
by JRayfield
Fri Jul 20, 2018 9:14 pm
Forum: General
Topic: RB951 ETH1 LED Always ON
Replies: 1
Views: 256

RB951 ETH1 LED Always ON

I have two RB951 units on which the ETH1 LEDs are ON all the time, whether there's anything plugged into the ETH1 port or not.

Seems like a hardware failure, but I thought I'd ask here to see if anyone else has ever see this before?

John Rayfield, Jr.
by JRayfield
Thu Apr 05, 2018 5:10 pm
Forum: General
Topic: Sniffer Tool
Replies: 3
Views: 403

Re: Sniffer Tool

I thought that would be the case, but wanted to confirm. Thanks!

John
by JRayfield
Thu Apr 05, 2018 6:50 am
Forum: General
Topic: Sniffer Tool
Replies: 3
Views: 403

Sniffer Tool

When using the Sniffer Tool to stream data to Wireshark, if the Sniffer Tool is set to get data from Interface ether1, then is the data being captured before or after the firewall (before filtering and NAT or after filtering and NAT)?

John Rayfield, Jr.
by JRayfield
Fri Jun 30, 2017 5:14 am
Forum: Wireless Networking
Topic: Expected Throughput with 900 Mhz AP
Replies: 0
Views: 502

Expected Throughput with 900 Mhz AP

We just put up a 900 Mhz MikroTik Metal 9 AP set to 20 Mhz wide channel and NV2 protocol. The antenna is a 4db gain omni at about 140 feet. Download speed is limited to around 15 Mbps on the network connection to the AP, but upload will top out at about 90 Mbps on the network connection to the AP. I...
by JRayfield
Fri Jun 02, 2017 7:11 am
Forum: Wireless Networking
Topic: Speed through PTMP versus PTP
Replies: 0
Views: 279

Speed through PTMP versus PTP

I've set up a PTP link using Netmetal 5 radios (dual chain) with mANT30 antennas. The path is good with signal levels at around -55dbm. I'm feeding this PTP link from a fiber connection through a Hex Lite router. The other side of the PTP link is connected to an RB2011 router. A speed test at either...
by JRayfield
Wed Jul 06, 2016 2:46 am
Forum: Wireless Networking
Topic: PtP bandwidth check with a pair of SXT5ac
Replies: 1
Views: 578

Re: PtP bandwidth check with a pair of SXT5ac

I finally gave up trying to get accurate (or even close to accurate) tests with the MikroTik bandwidth test software.  I found a couple of other software packages that worked much better.  One is even free:  www.tamos.com.  Download their Throughput Test software and try it.  You'll need to run the ...
by JRayfield
Mon Jul 04, 2016 5:31 am
Forum: Wireless Networking
Topic: Metal 9HPn Units Will Not Connect
Replies: 2
Views: 685

Metal 9HPn Units Will Not Connect

I’ve got two Metal 9HPn units that I’m trying to set up for testing.  I have dummy antenna loads connected to them, and they’re within a few feet of each other, so they should ‘see’ each other. I've confirmed that they're both transmitting (using a commercial communications service monitor/spectrum ...
by JRayfield
Fri May 20, 2016 9:36 pm
Forum: Beginner Basics
Topic: Routing Public IP Addresses through RB2011 - No NAT
Replies: 1
Views: 953

Routing Public IP Addresses through RB2011 - No NAT

I’m trying to set up an RB2011, which will feed an access point and several other routers, as follows: I have multiple public IP addresses, coming in on a fiber connection through a media converter, which I need to put into Eth1, and then route those public IP addresses out Eth2, Eth3, etc. I do not...
by JRayfield
Tue Oct 27, 2015 6:06 pm
Forum: General
Topic: FIPS 140-2 Compliant
Replies: 0
Views: 660

FIPS 140-2 Compliant

I would like to use MikroTik routers in applications where it's required that the router be FIPS 140-2 certified. I know that the MikroTik routers, as a complete 'unit' are not certified, but it appears that as long as a router uses a cryptographic module that is FIPS 140-2 certified, then the 'unit...
by JRayfield
Mon Sep 21, 2015 3:43 am
Forum: Beginner Basics
Topic: CRS125-24G-1S Instead of RB2011?
Replies: 9
Views: 1357

Re: CRS125-24G-1S Instead of RB2011?

From a performance standpoint, I think the CRS125 would work fine for both router and switch. Thanks for the help. This is exactly what I needed to know. I couldn't see why this wouldn't work, but I just wanted to make sure that I wasn't overlooking something, since I'm so new to working with MikroT...
by JRayfield
Mon Sep 21, 2015 2:07 am
Forum: Beginner Basics
Topic: CRS125-24G-1S Instead of RB2011?
Replies: 9
Views: 1357

CRS125-24G-1S Instead of RB2011?

I have a customer who has a Netgear router and two TP-Link 8-port switches. I want to replace this equipment with MikroTik equipment. I need more 'diagnostics' in the equipment, to determine what's happening in the network, and I need to set up bandwidth limiting and prioritization based on IP addre...
by JRayfield
Thu Jun 04, 2015 2:07 am
Forum: Beginner Basics
Topic: Routing Between Subnets with RB750's.
Replies: 1
Views: 670

Routing Between Subnets with RB750's.

I'm needing help with setting up some routing in an RB750. Here's a diagram showing how this system is put together. The blue lines designate the 1st physical ethernet network, and the red lines designate the 2nd physical ethernet network (which must remain physically separate from the 1st ethernet ...
by JRayfield
Wed Dec 24, 2014 11:32 pm
Forum: Beginner Basics
Topic: SFP Module in CRS226-24G-2S+RM
Replies: 2
Views: 1101

SFP Module in CRS226-24G-2S+RM

I've got a couple of CRS226-24G-2S+RM Routers/Switches with which I'm trying to use MikroTik S-85DLC05D Transceivers. According to the documentation, these should work in the SFP+1 cages. I can install Mikro-Tik S-85DLC03D Transceivers in these two routers, in the SFP+1 cages, connect a short cable ...
by JRayfield
Tue Sep 02, 2014 3:34 pm
Forum: Beginner Basics
Topic: 'Separating' a Network
Replies: 8
Views: 1855

Re: 'Separating' a Network

I've been wondering if using VLANs would be the answer. I'm not real familiar with using VLANS, so I need to read up more on setting them up.

John
by JRayfield
Tue Sep 02, 2014 4:52 am
Forum: Beginner Basics
Topic: 'Separating' a Network
Replies: 8
Views: 1855

Re: 'Separating' a Network

After looking over the document referenced, I don't think that's exactly what I need. It's close, but not quite. Here's a drawing that shows the current configuration of the system/network. Basically, I need to get the WAN2 port on the RB2011iL connected to the Internet connection at the Courthouse,...
by JRayfield
Sat Aug 30, 2014 7:23 am
Forum: Beginner Basics
Topic: Total Newbee advice Port opening
Replies: 7
Views: 1412

Re: Total Newbee advice Port opening

I'm going to jump in here and ask a related question:

I saw somewhere, where "netmap" was used, instead of "dst-nat", in the Action field, for IP/Port Forwarding.

What would be the difference in operation between using these two different Action settings?

John Rayfield, Jr.
by JRayfield
Wed Aug 20, 2014 11:43 pm
Forum: Beginner Basics
Topic: 'Separating' a Network
Replies: 8
Views: 1855

Re: 'Separating' a Network

That might work. I actually only need the failover in 'one direction' right now, but we did intend on setting it up the other 'direction', too.

I'll study over this and may have more questions later.

Thanks!

John Rayfield, Jr.
by JRayfield
Tue Aug 19, 2014 8:48 pm
Forum: Beginner Basics
Topic: 'Separating' a Network
Replies: 8
Views: 1855

'Separating' a Network

I have a requirement for an unusual system configuration and I think the RB2011iL will work. I'm new to these routers, so please bear with me. I have network (10.0.0.x) in building A, for an IP phone system, that is fed from a cable modem through a Netgear router. A second network (192.168.1.x) exis...