Due to unstable internet connection, my ISP just switch the old router to the new one (ZTE F670).
The problem is my Mikrotik RBD52G-5HacD2HnD Firmware version 6.49.6 can’t ping the new router (ZTE) [Timed out].
I have browsed some thread both mikrotik forum and other like reddit etc, and I can make sure the ISP don’t lock the MAC address because I can ping to the ZTE from my laptop if I connect to it directly (without Mikrotik).
Any suggestion how to troubleshoot this issue?
I have tried reset configuration the routerboard and can ping to the ZTE, but after restored back to the main config, the routerboard can’t ping ZTE again.
If you need some data, let me know and I will share it.
From the steps you already took, it looks indeed like something in your config is blocking that communication.
From terminal:
/export hide-sensitive file=anynameyouwish
Review file for additional private ino (public IP, passwords, secret keys, … don’t forget to obfuscate serial number)
Then post between [__code] quotes.
Please provide as well small drawing with how those devices are connected going to outside ISP, which device has which IP and possible other devices on the same network.
A good start for troubleshooting are the firewall rules.
When you ping, check which drop rule has the counter increasing at the same rate as the ping. Might already give you a good indication where the problem is.
Sorry for the messy image and a little bit complex just in case need the whole network topology.
I marked the focused area with yellow box.
If need more information or need me to simplify it, can just ask.
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 ;;; defconf
172.17.1.1/24 172.17.1.0 bridge
1 10.10.0.1/24 10.10.0.0 ether4
2 I ;;; Meeting
192.168.2.1/24 192.168.2.0 wlan3
3 172.18.0.2/24 172.18.0.0 ether2
4 X ;;; defconf
172.17.0.1/24 172.17.0.0 ether5
5 192.168.1.254/24 192.168.1.0 ether1
---------------- Route Print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S ;;; ISP 1
0.0.0.0/0 8.8.8.8 1
1 S ;;; To 17B, if down will automatically switch to ISP 2
0.0.0.0/0 172.18.0.1 2
2 S ;;; If ping to google fail, automatically run ISP 2
8.8.8.8/32 192.168.1.1 1
3 ADC 10.10.0.0/24 10.10.0.1 ether4 0
4 A S 58.XX.XXX.0/32 172.18.0.1 1
5 ADC 172.17.1.0/24 172.17.1.1 bridge 0
6 ADC 172.18.0.0/24 172.18.0.2 ether2 0
7 A S 192.168.0.0/24 172.18.0.1 1
8 ADC 192.168.1.0/32 192.168.1.254 ether1 0
9 X S ;;; ISP 1
192.168.1.0/32 192.168.1.1 1
For additional information, I tried some possible solution by enable and disable some config, I remember I always revert it back but I don’t know why after I tried to disable DHCP Client and change it to manual (Add IP at Address menu), it can ping and back to normal. Since I thought I’ve found the solution, so I restore my configuration back and tried to change the IP (assumed there’s IP conflict).
But the issue still there. So my IP setup (Mikrotik to ZTE) might different between this post and earlier post (between input manual and using DHCP Client)
Hi guys,
If you followed this topic from the start, now I’d like to announce that I have found the solution.
It looks like the Routerboard somehow “lock” the ether1 ARP but the status still dynamic.
After troubleshooting by resetting the RB and reconfig one by one using rsc, I have found that the ARP table caused this problem. Then after I remove ARP for ether1, it can ping and have reply, and whole system back to normal.
If you need further information or have similar issue, can contact me through this forum.
I appreciate your time and effort to review my complicate network topology and the setup also I believe take time.
Once again, thank you for the support.
