can't ping mikrotik IP

RouterOS General
1

hi everyone. please help on this.
i have set two non-public static IPs one on a cisco router and the other one on a mikrotik router with default configuration. the routers are directly connected to each other. now i can ping cisco from inside mikrotik but the vice versa fails. seems to be something in mikrotik default configuration. here is the mikrotik config:

# jan/02/1970 00:34:44 by RouterOS 6.44.5
# software id = 0G7Y-54W3
#
# model = 951Ui-2HnD
# serial number = B8570BE4F3C7
/interface bridge
add admin-mac=C4:AD:34:82:55:8B auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
    distance=indoors frequency=auto installation=indoor mode=ap-bridge ssid=\
    MikroTik-82558F wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.90.2/30 interface=ether1 network=192.168.90.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=\
    ether1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked disabled=yes
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid disabled=yes
add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \
    protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    disabled=yes in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    disabled=yes ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    disabled=yes ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related disabled=yes
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked disabled=yes
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid disabled=yes
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new disabled=yes in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" disabled=yes \
    ipsec-policy=out,none out-interface-list=WAN
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN

by the way, i have disabled all NAT and firewall/masquerade rules.
kind regards.

2

It’s here:


add action=accept chain=input comment=“defconf: accept ICMP” disabled=yes protocol=icmp

Re-enable that.

3

thank you dear tangent, but re-enabling that rule didn’t help. still pinging mikrotik from cisco fails.

4

You have a static IP and DHCP on ether1, which isn’t a member of the bridge. Unless the Cisco box is on that port, there’s no IP to ping.

Why are you mixing static and dynamic addressing anyway?

5

yes you’re right. meanwhile i was correcting exactly the same thing. now dhcp server and the associated default ip pool are omitted. but again same result.

6

i’m really frustrated on this. can someone help me here?? right now, the mikrotik router is reset with no default configuration and a static non-public /30 IP is set on ether1. on cisco side, another IPs of the same /30 range is set; say, 192.168.90.1/30 for cisco and 192.168.90.2/30 for mikrotik. i can ping cisco from inside mikrotik but pinging mikrotik from cisco fails.
i am really wondering why yhis happens? what am i missing in my routerboard?? please help!
regards.

7

this issue is over. i had mistakenly connected the patch cord to cisco isr management port which cannot forward traffic.
this topic is closed.
thanks.