Cant connect to internet with pppoe client

RouterOS Beginner Basics
1

I have the following problem.
I have set up my router with an pppoe client as wan.
This works up to the point that it connects and I get an ipadres and a gateway.
I’ve added the gateway to my default route.
I’ve setup masquerading on the pppoe interface.
But I cant use it to connect to the internet with any connected pc.
When I do a traceroute the only hop I see is to the gateway of the interface like 192.168.10.1
When I ping from the router over the pppoe interface everything is just fine.
The internal networks are configured fine, Ive been using this setup before but without the pppoe as wan.

What am I missing?

2

Hello,

You do not need to add a static route as it is added automaticaly.

3

Make sure that your masquerad rule is on the top, that firewall is not blocking the traffic (you can export firewall and mangle rules here), try to ping some internet ip address but with src address of the mikrotik lan ip address

4

I will post my firewall rules tonight. It might be something in the firewall.
The firewall rules have not been changed since I it was working on dhcp as wan.
Accept changing the wan interface in my rules to the pppoe interface.

5

From the FAQ, you’ll need to watch the MTU:
/ ip firewall mangle
add chain=forward protocol=tcp tcp-flags=syn action=change-mss tcp-mss=!0-1448 new-mss=1448

6

I’ve cleaned up my firewall rules see post below for current ones

interfaces
0 sfp1-gateway ether 1500 1598 4074
1 ether1-trunk ether 1500 1598 4074
2 ether2 bedrijf ether 1500 1598 4074
3 ether3 ether 1500 1598 4074
4 ether4 ether 1500 1598 4074
5 R ether5 ether 1500 1598 4074
6 ether6-wan ether 1500 1598 2028
7 ether7-externe-router ether 1500 1598 2028
8 ether8 ether 1500 1598 2028
9 ether9 ether 1500 1598 2028
10 ether10-wan-pppoe ether 1500 1598 2028
11 wlan1 wlan 1500 2290
12 R bridge-local bridge 1500 65535
13 R bridge-zakelijk bridge 1500 2290
14 R wlan zakelijk wlan 1500 2290
15 wlan prive wlan 1500 2290
16 vlan-prive-20 vlan 1500 1594
17 vlan-zakelijk-10 vlan 1500 1594
18 R bridge-prive bridge 1500 65535
19 vlan-gast-30 vlan 1500 1594
20 R bridge-gast bridge 1500 65535
21 R vlan-management-10 vlan 1500 2286
22 X pppoe-kpn

Im not connected to my isp with pppoe I know, but that part works.

Could it be a problem that the ip address my isp assigns is in a different range than that of the gate way.
My wan ip is 188.x.x.x my gateway is 192.x.x.x

Thanx again

7

I’m still learning this stuff myself, so excuse me if this is useless info. I setup a mikrotik with pppoe last night. I connected the pppoe and set the masquerading and the computers still wouldn’t get internet.

But I notice that I could ping 8.8.8.8 from the computers, but couldn’t ping www.google.com. That meant it was a dns issues. I set my isp’s dns settings hard in the router and everything started working great. I still need to look into why it wasn’t automatically getting the dns, but that solved my issue for now… So from my limited knowledge, you might want to check dns issues.

8

can you show the config


/interface pppoe-client export
*hide the user and password
/ip firewall nat
/ip firewall mangle

9

As you requested

Firewall
0 ;;; Drop Invalid connections
chain=input action=drop connection-state=invalid

1 ;;; Allow Established connections
chain=input action=accept connection-state=established

2 ;;; Allow ICMP
chain=input action=accept protocol=icmp

3 ;;; laat alleen verkeer van zakelijk netwerk naar router toe
chain=input action=accept src-address=192.168.10.0/24 in-interface=!pppoe-kpn

4 ;;; drop invalid connections
chain=forward action=drop connection-state=invalid protocol=tcp

5 ;;; Allow established
chain=forward action=accept connection-state=established

6 ;;; allow related connections
chain=forward action=accept connection-state=related

7 ;;; blokkeer onderling verkeer->pinholes moeten hierboven
chain=forward action=drop

nat
0 ;;; default configuration
chain=srcnat action=masquerade to-addresses=0.0.0.0 out-interface=pppoe-kpn

mangle
I have no rules here

route

DST-ADDRESS PREF-SRC GATEWAY DISTANCE

0 ADS 0.0.0.0/0 195.190.242.24 1
1 ADC 192.168.10.0/24 192.168.10.1 bridge-zakelijk 0
2 ADC 192.168.20.0/24 192.168.20.1 bridge-prive 0
3 ADC 192.168.30.0/24 192.168.30.1 bridge-gast 0
4 ADC 192.168.88.0/24 192.168.88.1 bridge-local 0
5 ADC 195.190.242.24/32 188.203.xxx.xxx pppoe-kpn 0

/interface pppoe-client
add ac-name="" add-default-route=yes allow=pap,chap,mschap1,mschap2 dial-on-demand=no disabled=no interface=ether10-wan-pppoe max-mru=1480 max-mtu=1480 mrru=disabled name=
pppoe-kpn password=xxxxx profile=default-encryption service-name="" use-peer-dns=yes user=xxxxx


I hoped that with cleaning up my firewall rules it would be fixed but it didn't help.

As for the pppoe client I have my old firewall running with an mtu of 1492 but changing it didn't help. But I think its better to put it on 1492 is that so and what do I need to put the mrru on?

Thanx again.

10

have the pppoe-client connected to your isp? you can see in /log

try to ping the internet such as google.com from interface pppoe-kpn
then try to ping the internet again from all the lan interface one by one, bridge-zakelijk, bridge-prive, and so on.


then tell your result.

11

Yes i can ping the internet when i do it from my router over the pppoe interface.
I cannot ping the internet when I do it from a computer. Its no dns problem pinging an ipmadres does not make any difference

12

Nobody knows whats wrong?

13

It’s weird…
have you disabled all of your firewall filter then pinged to 8.8.8.8 or www.google.com from the client or router?

maybe it’s the dns..

14

Ok this is really weird it just works now.
Ive changed nothing, ive just connected everything again and it now works.
Probably the reboots of modem and router did it.

So the lesson learned here is if pppoe is not working when your sure it should reboot everything and try again.

15

I’m facing the same problem with my sdsl and mikrotik. After login to hotspot, can ping 8.8.8.8 but unable to load www.google.com. already try restart everything, but still no luck. If I manually setting public proxy on client PC, everything works. Anybody know the solution?

16

just change the port from 2 to others, then ping from cmd of your PC works.