Basic routing question

RouterOS Beginner Basics
1

Hello all,

I have been working on getting an MT acting as a border router to talk to a MT which is the core router across interfaces and across vlans. First to be more descriptive, I have an RB450 that is currently set to have ether1 as 10.1.1.1/30. Then I have an x86 router os box that is going to be my core router set to 10.1.1.2/30. Then I have a route programmed in the core with 0.0.0.0/0 ether 1 (destination reachable).

In between these 2 devices I have a Dell managed switch. When I ping from 10.1.1.2, I can get 10.1.1.1, but can’t ping to 192.168.5.1 (10.1.1.1’s gateway). I then set a rule in the routes for 0.0.0.0/0 192.168.5.1. Still didn’t work. All I am trying to accomplish is this:

Internet ----> (1.1.1.1 public ip) Border Router(10.1.1.1/30 private or public) -----> switch --------> (10.1.1.2/30 wan side) Core Router (1.1.1.129/26 lan ip) ---------> (10.1.150.x customer radio/equipment) ----> (1.1.1.130-254) customer unit(router or computer)

All I am trying to do is route the traffic though the core router so that way I can do filtering and QOS at the core, not the border. If you can help me figure out routing for this, that would be great.

Once I figure it out for these interfaces, I am going to make it more complicated by adding VLAN’s.

Thanks for your help,

-z

2

Post the following output from both routers

/ip route export

/ip address export

/ip firewall filter export

Both devices need a default route. I see you mentioned that for your core router, but not the other.

3

Here is the edge router:

 /ip route
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    192.168.5.1 scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=8.8.8.0/30 gateway=\
    8.8.8.2 scope=30 target-scope=10

/ip address
add address=192.168.5.238/24 broadcast=192.168.5.255 comment="" disabled=no \
    interface=b-vlan30 network=192.168.5.0
add address=8.8.8.1/30 broadcast=8.8.8.3 comment="" disabled=no \
    interface=ether1 network=8.8.8.0

/ip firewall filter export 
<blank>

Here is the core router

/ip route
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=ether1 \
    scope=30 target-scope=10
/ip address
add address=192.168.5.244/24 broadcast=192.168.5.255 comment="" disabled=yes \
    interface=ether1 network=192.168.5.0
add adress=8.8.8.2/30 broadcast=8.8.8.3comment="" disabled=no \
    interface=ether1 network=8.8.8.0

 /ip firewall filter export 
<blank>
4 
/ip route
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=ether1 \
    scope=30 target-scope=10

Change the gateway to an actual IP address, not the interface. That only works for PTP connections.

I’m guessing it should be

add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=8.8.8.1 \
    scope=30 target-scope=10

Also should the interface on this be vlan30?

add address=192.168.5.244/24 broadcast=192.168.5.255 comment="" disabled=yes \
    interface=ether1 network=192.168.5.0
5

Hey, your right about the vlan, I shouldn’t have had that in there. I must have been going crazy. I am going to retest without the vlan.

-z