Good morning all,
I’m strugglling with some bridging issues in my lab and don’t get what’s going wrong.
So I’ve set up a PPPoE server and client, both terminating on a RSTP-enabled bridge w/ two interfaces and bigger MTU. Working as expected.
The PPPoE interfaces are then terminated in a local bridge in the routers.
This bridge has one physical interface facing outside to connect clients.
These bridges are a separate RSTP domain for high availability reasons. RSTP is blocked against the physical interface and a new isolated RSTP domain will be built from there at each client.
So far everything is working as expected, the network is transparently bridged.
The funny thing about it is that I can only connect to the production bridge IP address of the far router, not the local.
i.e. when I’m connected to the LAN-facing side of the AC (10.250.0.110/16), I can only connect to the client router (10.250.0.120/16). Telnet from client router to AC works perfectly.
The local router does not show up in WinBox discovery nor does it answer pings.
When trying to connect from the local router to local resources (i.e. a switch directly connected to ether1), it fails - ARP remains empty. Access from the remote router works.
What am I doing wrong here? rOS is 6.40.1, devices are 750Gr3 for lab, to be ported to CCR once that is working.
Any hint is highly appreciated.
AC config:
/interface bridge
add admin-mac=64:D1:54:04:9D:9E auto-mac=no fast-forward=no name=bri-prod priority=0x2000
add fast-forward=no name=bri-transport priority=0x2000
/interface ethernet
set [ find default-name=ether1 ] name=ether1-production
set [ find default-name=ether2 ] l2mtu=2026 mtu=1930 name=ether2-trans-ccw
set [ find default-name=ether3 ] l2mtu=2026 mtu=1930 name=ether3-trans-cw
/interface pppoe-server
add name=IDF-01 service=IDFtransport user=IDF01
add name=IDF-02 service=IDFtransport user=IDF02
/interface list
add name=IDFs
add name=phys-prod
/ip pool
add name=idf-pool ranges=172.16.254.100-172.16.254.200
/ppp profile
add bridge=bri-prod change-tcp-mss=yes local-address=idf-pool name=IDF-transport remote-address=idf-pool use-compression=no use-encryption=yes use-upnp=no
/interface bridge filter
add action=accept chain=forward comment="limit Broadcasts" limit=100000,200000 out-interface-list=IDFs packet-type=broadcast
add action=accept chain=forward comment="Multicasts" limit=100000,200000 out-interface-list=IDFs packet-type=multicast
add action=drop chain=output comment="rstp out" dst-mac-address=01:80:C2:00:00:00/FF:FF:FF:FF:FF:FF out-interface-list=phys-prod
add action=drop chain=input comment="rstp in" dst-mac-address=01:80:C2:00:00:00/FF:FF:FF:FF:FF:FF in-interface-list=phys-prod
add action=drop chain=forward comment="rstp fwd" dst-mac-address=01:80:C2:00:00:00/FF:FF:FF:FF:FF:FF out-interface-list=phys-prod
/interface bridge port
add bridge=bri-transport interface=ether2-trans-ccw
add bridge=bri-transport interface=ether3-trans-cw
add bridge=bri-prod edge=yes external-fdb=no interface=ether1-production
/interface list member
add interface=IDF-01 list=IDFs
add interface=IDF-02 list=IDFs
add interface=ether1-production list=phys-prod
/interface pppoe-server server
add authentication=mschap2 default-profile=IDF-transport disabled=no interface=bri-transport max-mru=1996 max-mtu=1996 mrru=2000 service-name=IDFtransport
/ip address
add address=10.250.0.110/16 interface=bri-prod network=10.250.0.0
/ppp secret
add name=IDF01 password=password profile=IDF-transport
add name=IDF02 password=password profile=IDF-transport
Client config:
/interface bridge
add fast-forward=no name=bri-prod
add fast-forward=no name=bri-transport
/interface ethernet
set [ find default-name=ether1 ] name=ether1-production
set [ find default-name=ether2 ] l2mtu=2026 mtu=1930 name=ether2-trans-a
set [ find default-name=ether3 ] l2mtu=2026 mtu=1930 name=ether3-trans-b
/interface list
add name=MDF
add name=phys-prod
/ppp profile
add bridge=bri-prod change-tcp-mss=yes name=IDF-transport use-compression=no use-encryption=yes use-upnp=no
/interface pppoe-client
add allow=mschap2 interface=bri-transport max-mru=1996 max-mtu=1996 mrru=2000 name=MDF-bck password=password profile=IDF-transport service-name=IDFtransport user=IDF02
add allow=mschap2 interface=bri-transport max-mru=1996 max-mtu=1996 mrru=2000 name=MDF-main password=password profile=IDF-transport service-name=IDFtransport user=IDF01
/interface bridge filter
add action=accept chain=forward comment="limit Broadcasts" limit=100000,200000 out-interface-list=MDF packet-type=broadcast
add action=accept chain=forward comment="limit Multicasts" limit=100000,200000 out-interface-list=MDF packet-type=multicast
add action=drop chain=output comment="rstp out" dst-mac-address=01:80:C2:00:00:00/FF:FF:FF:FF:FF:FF out-interface-list=phys-prod
add action=drop chain=input comment="rstp in" dst-mac-address=01:80:C2:00:00:00/FF:FF:FF:FF:FF:FF in-interface-list=phys-prod
add action=drop chain=forward comment="rstp fwd" dst-mac-address=01:80:C2:00:00:00/FF:FF:FF:FF:FF:FF out-interface-list=phys-prod
/interface bridge port
add bridge=bri-transport interface=ether2-trans-a
add bridge=bri-transport interface=ether3-trans-b
add bridge=bri-prod edge=yes interface=ether1-production
/interface list member
add interface=ether1-production list=phys-prod
add interface=MDF-main list=MDF
add interface=MDF-bck list=MDF
/ip address
add address=10.250.0.120/16 interface=bri-prod network=10.250.0.0
Thank you,
-Chris