Hello, I just bought a 750GL and managed to get my connection working on it.
I have a FTTH connection 25mbit down and 100mbit up, it receives a dynamic IP over pppoe.
First problem is that I can’t get port forwarding working. I tried stuff like this
add action=dst-nat chain=dstnat disabled=no dst-address-type=local dst-port=
1000 protocol=tcp to-addresses=192.168.88.100 to-ports=22
(want to get ssh working on 192.168.88.100)
But it doesn’t work.
Second problem is with dhcp, how do I get one server working on all interfaces (except WAN)
Currently I have it like this.
And third problem is that I just tried upgrading to 5.6 and internet speed dropped from 93-94mbit down to ~75. Tested on ndt.arnes.si - it’s very accurate.
Weird thing is that CPU usage on 5.2 went 85-90% and it delivered 94mbit, now cpu usage is 60-70% and i get 75mbit.
It looks like other ports are slaves to other port - why do you need 4 DHCPs with same address pull? Create a bridge or a switch group and use one DHCP server
BTW reset to default and ether2-ether5 will already configured as LAN, connect your ISP to ether1 and enjoy
That should work fine. The NAT rule is reasonable, there are no firewall filters in the way.
Time to check the host. What is 192.168.88.100? Is it configured with a host firewall? Is that firewall configured to accept this traffic? Does that host use 192.168.88.1 as a default gateway to the Internet? Can that host otherwise access the Internet?
Host is just a Linux PC(Ubuntu 11.04, default configuration, no firewall), I can ssh to it via local address - 192.168.88.100.
It uses Mikrotik as gateway.
From 192.168.88.100:
traceroute to www.arnes.si (193.2.1.87), 30 hops max, 60 byte packets
1 router (192.168.88.1) 0.295 ms 0.367 ms 0.689 ms
2 postojna1.amis.net (212.18.32.171) 2.125 ms 2.204 ms 2.298 ms
3 six.amis.net (193.2.141.40) 3.083 ms 3.076 ms 3.135 ms
4 six.arnes.si (193.2.141.33) 3.842 ms 3.835 ms 4.014 ms
5 lljtpl1-v472.arnes.si (88.200.2.169) 4.679 ms 4.671 ms 4.717 ms
6 * * *
7 * * *
route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.88.0 * 255.255.255.0 U 1 0 0 eth0
link-local * 255.255.0.0 U 1000 0 0 eth0
default router 0.0.0.0 UG 0 0 0 eth0
That also looks fine. Maybe double check the firewall, I guess, via “iptables -L -n” - but if you say it’s not running a host firewall we can rule that out.
How are you testing the SSH port forward? Are you initiating the SSH connection from outside the router (traffic would enter the router via the ether1-gateway interface), or inside the router (traffic would enter the router via one of the other four ports)?
I was trying to connect to local computer, but using external IP address (assigned by pppoe).
It works if I connect to that IP from a computer that is not in my network (from the internet).
iperf-test.arnes.si resolves to a public IP to me. Are you testing across a WAN circuit? If so, 91Mbps is pretty damn close to the 100Mbps limit your provider is giving you.
What kind of firewall rules/NAT do you have? The router is spending 42% of its time in the firewall, yet your export from earlier is only showing a few NAT rules.
Yes, I am testing WAN. The speed is fine, but the router is at edge of capacity (download speed drops if I am doing iperf at the same time).
I have no firewall rules at all and also no queues. Two port forwarding rules are all I have.
I have also removed a bridge that was doing nothing, bridging is not in “Profile” anymore.
Firewall 40%+
Queuing 25%
Ethernet 25%
