Configuration Problem

hai…
i’m 22 yrs old from borneo island…need help to configure this routeros. i’m very new to this. so please help me guys! :slight_smile:

anyway, my problem is i already configure my IP address as well as my IP route but still cannot get through the internet. i have 2 interface. 1 is for my LAN and the other 1 is for my WAN. this is how i configure my IP address:

0 x.x.x.x/x x.x.x.x x.x.x.x LAN
1 y.y.y.y/y y.y.y.y y.y.y.y WAN1

and my ip route is:

0 S 0.0.0.0/0 y.y.y.y 1 WAN1
1 DC y.y.y.y/y 0.0.0.0 0 WAN1
2 DC x.x.x.x/x 0.0.0.0 0 LAN

I’ve also allow DNS remote requests (don know whether this is necessary or not)

and i’m using PPPoA instead of PPPoE. i’ve gone through the manual but unfortunately it cannot help. any soultions?

have you configured masquerading (src-nat)? what RouterOS version do you use?

hai normis! thanks for the reply. :slight_smile:

i’ve done the masquerading just now by doing this:

/ip firewall src-nat add out-interface=WAN action=masquerade

the masquerading was ok but then my license just allow me to use 1 src-nat only. currently im running on MikroTik RouterOS v2.8 with license level1.

i’ve also try to configure my ip dhcp-client. when i try to lease print, the status is :searching… (is it a good sign or bad? :confused: )

i still cannot access the internet…

another question is…how can i configure my gateway? each time i add the IP address, the router will automatically configure the dynamic route for me.
for instance:
DC x.x.x.x/x 0.0.0.0 x.x.x.x 0 LAN

how can i make the route static so that i can change the gateway? currently the gateway is 0.0.0.0

thank you for ur help

/ip route add gateway=1.2.3.4

thanks normis! but the gateway u’r given me doesn’t help as well…i’ve tried to ask the mikrotik support but they can’t help either. so if anyone have a book of mikrotik for dummies, i need one! i’ve tried following the manual. i donno what i’ve done wrong…is it because i use a demo license that it didn’t work? what if i buy the license, will the connection works?

beejan, you said:

===========================
1 60.51.128.182/30 60.51.128.180 60.51.128.183 WAN1

and my ip route is:

0 S 0.0.0.0/0 60.51.128.182 1 WAN1
1 DC 60.51.128.180/30 0.0.0.0 0 WAN1
2 DC 10.100.0.0/24 0.0.0.0 0 LAN



and then:

===========================
/ip route add gateway=1.2.3.4
thanks normis! but the gateway u’r given me doesn’t help as well…

so, let’s clarify things. Did you use 1.2.3.4 numbers EXACTLY as normis has said? That’s bad, it cannot work of course.

In the first example, you have correctly defined external IP address from your provider to 60.51.128.182 with 30bit mask (/30). Your next output with /ip route shows me that YOU HAD WRONG GATEWAY TO YOUR ISP:

0 S 0.0.0.0/0 60.51.128.182 1 WAN1

see? Let’s explain meaning of this line:
0 = first line in list
S = static route, manually entered with /ip route add gateway=
0.0.0.0/0 = default gateway. If the router doesn’t know how to find destination network, it will simply send that traffic here
60.51.128.182 = gateway IP address. HERE IS THE PROBLEM.
1 = distance, cost, priority, there are more names for it :slight_smile:
WAN1 = interface where to go.


The problem I see here: IP ADDRESS OF YOUR GATEWAY. You entered 60.51.128.182, but you should enter 60.51.128.181 (!! 181 !! at the end). Why?

your ISP assigned you address 60.51.128.182 and his router (=for you, HIS GATEWAY WHERE YOU SHOULD SEND YOUR TRAFFIC) should be 60.51.128.181. This is because of the definition of assigned “network” to you, 60.51.128.180/30 - there are four “numbers”:

60.51.128.180 (address of network alone, this address is NOT USABLE for computer/router/whatever)
60.51.128.181 usable IP address - this should be gateway on providers side
60.51.128.182 usable IP address - this should be your IP address according to your output
60.51.128.183 (broadcast address, again NOT USABLE for computer/router/whatever)


leave masquerading as you have it, change only default route:

/ip route
print
remove [number of line where 0.0.0.0/0 is, so you should enter remove 0]
print
{check that there is no 0.0.0.0/0 output, right now it should look like:
1 DC 60.51.128.180/30 0.0.0.0 0 WAN1
2 DC 10.100.0.0/24 0.0.0.0 0 LAN
and nothing more
add gateway=60.51.128.181


then, your internet should be working.

bye, mp3turbo.

hai mp3turbo2! thanks for the reply! i really appreciate it. actually, i did configure my gateway correctly, i wrongly typed it inside this forum. sorry my mistake! :blush:

anyway, what i did wrong was i disabled my masquerade. when i enable it, then my internet works! :smiley: thanks mp3turbo2!

to normis, i’m really sorry i misunderstood what u said…i thought just type in 1.2.3.4 hehe stupid me. but thanks for helping me! :smiley:

thanks guys!

just a question, is that you in the picture :slight_smile: ?

yup..that’s me! :smiley: why u asking? have we met before? :slight_smile:

Hey beejan, mind if those of us who never seem to get answers pass them on to you to post? With a face like yours you will always get a response, it’s a guy thing about helping out pretty girls.

Jay

I’d say she knows more about networking and more importantly gives better details than most on the forum.

Posting “My XYZ doesn’t work?!!?! HELP?!?! Very Urgent!!” and a follow-up 5 minutes later “I run Mikrotik v2.7.STONEAGE” deserves nothing more than a reply full of insults about the posters genitalia and intellect. But that would waste more time. :imp:

I noticed a lot of attention here… :wink:

i really appreciate all your comments guys…im really interested to learn more about mikrotik. i wouldn’t mind sharing my experience using mikrotik with other new users like me. :smiley:

Thats the spirit !!
Good luck..

Craig

hai guys!!!

so far…my mikrotik is working fine..however, the problem comes when i add another WAN line and try to do the load balancing. i want the load balancing to be per-packets.

so this is what i did..in Nth property in firewall manual, i use it to put 1 routing mark on the first of each two packets and another routing mark on the second of them. then i use the policy routing to route these packets to different gateways. (this solution i obtained from this forum :slight_smile: )

unfortunately…i doesnt seem to work…i cannot access the internet.

this is how it looks like when i print the ip firewall mangle:

 0   chain=prerouting src-address=60.51.128.180 nth=2,0,0 action=mark-routing new-routing-mark=net1 

 1   chain=prerouting src-address=60.51.128.168 nth=2,0,0 action=mark-routing new-routing-mark=net2

hmm..i think i did wrong somewhere..? any suggestions guys? :slight_smile:

how about posting a more complete configuration?

hello craig! thanks for replying me. :slight_smile: sorry didn’t mention it before…i have upgrade my MT to version 2.9.

ok. this is my configuration:
ether1 is LAN
ether2 is WAN1
ether3 is WAN2

 #   ADDRESS            NETWORK         BROADCAST       INTERFACE
 0   x.x.x.x/x       x.x.x.x      x.x.x.x    ether1   
 1   y.y.y.y/y       y.y.y.y      y.y.y.y    ether3   
 2   y.y.y.y/y       y.y.y.y      y.y.y.y    ether2

this is the IP route
ether2 is net1
ether3 is net2

 #     DST-ADDRESS        PREFSRC         G GATEWAY         DISTANCE INTERFACE
 0 ADC x.x.x.x/x        x.x.x.x                             ether1   
 1 ADC y.y.y.y/y        y.y.y.y                             ether3   
 2 ADC y.y.y.y/y        y.y.y.y                             ether2   
 3 A S 0.0.0.0/0                        r y.y.y.y            ether2   
 4 A S 0.0.0.0/0                        r y.y.y.y            ether3

this is the IP firewall mangle:

0   chain=prerouting src-address=y.y.y.y action=mark-routing new-routing-mark=net1 

 1   chain=prerouting src-address=y.y.y.y action=mark-routing new-routing-mark=net2

i’ve also enable the masquerade

 0   chain=srcnat out-interface=ether3 connection-type="" action=masquerade

hmm..i’ve also read somewhere saying that if i use policy-routing, then do not use source nat. is it true? it seems that i’ve follow the manual but still cant access the internet. maybe my masquerading is wrong? any suggestions? :slight_smile:

thanks for helping me!

by the way, does MikroTik support Dlink DFE 580TX 4-port? in the manual it says not recommended…however i want to use it. is it possible?

Yes, but on your own risk. Better use via-based 4-port cards, like RB series.