EOIP Tunnel

codec47 · April 11, 2017, 8:29am

Hi forum member..

Any one can help me what is my EOIP tunnel problem im pretty sure my EOIP Tunnel configuration is correct but some how i cant ICMP/ping my computer client at Office-2… also no firewall at all both router.

This my sample ICMP from offce-1 “192.168.10.8” is my local server and “192.168.10.58” is my client Computer

192.168.10.8 is my local Server at office-2 ICPM from office-1

[root@Office-1] > ping 192.168.10.8
HOST                                     SIZE TTL TIME  ST
192.168.10.8                               56  63 5ms  
192.168.10.8                               56  63 4ms  
192.168.10.8                               56  63 9ms  
192.168.10.8                               56  63 3ms  
192.168.10.8                               56  63 3ms  
192.168.10.8                               56  63 4ms  
    sent=6 received=6 packet-loss=0% min-rtt=3ms avg-rtt=4

192.168.10.58 my user computer at office-2 and this computer is active at the time when we do the ICMP

[root@Office-1] > ping 192.168.10.58
HOST                                     SIZE TTL TIME  STATUS                                                                                                               
192.168.10.58                                           timeout                                                                                                              
192.168.10.58                                           timeout                                                                                                              
192.168.10.58                                           timeout                                                                                                              
192.168.10.58                                           timeout                                                                                                              
192.168.10.58                                           timeout                                                                                                              
192.168.10.58                                           timeout

and from office-2 ICMP/ping to all active user at office-1 its working fine.

im sorry for my bad english thank you…

evince · April 11, 2017, 1:33pm

Hello, you should post your config if you need help.

codec47 · April 11, 2017, 2:32pm

i will sir

Office 1
address

 #   ADDRESS            NETWORK         INTERFACE                                       
 0   XXX.XXX.XXX.XXX/29   XXX.XXX.XXX.XXX  ether1-wan-1                               
 1   XXX.XXX.XXX.XXX/29   XXX.XXX.XXX.XXX   ether2-wan-2                                   
 2   192.168.10.254/24  192.168.10.0    ether3-LAN                                                                   
 3   20.20.20.1/30      20.20.20.0      eoip-tunnel-senior

EoIP Tunnel

 2  R name="eoip-tunnel-senior" mtu=auto actual-mtu=1458 l2mtu=65535 
      mac-address=02:F2:D4:5A:28:6D arp=enabled local-address=0.0.0.0 
      remote-address=XXX.XXX.XXX.XXX tunnel-id=2222 dscp=inherit 
      clamp-tcp-mss=yes dont-fragment=no allow-fast-path=yes

routes

 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 A S  0.0.0.0/0                          XXX.XXX.XXX.XXX             2
 1   S  0.0.0.0/0                          XXX.XXX.XXX.XXX            3
 2 ADC  20.20.20.0/30      20.20.20.1      eoip-tunnel-senior        0
 3 ADC  XXX.XXX.XXX.XXX/29   XXX.XXX.XXX.XXX   ether2-wan-1            0
 4 ADC  XXX.XXX.XXX.XXX/29   XXX.XXX.XXX.XXX    ether1-wan-2            0
 5 ADC  192.168.10.0/24    192.168.10.254  ether3-LAN                0
 6 A S  192.168.20.0/24                    20.20.20.2                1

office 2
ip addresses

 #   ADDRESS            NETWORK         INTERFACE                                                                                                                            
 0   ZZZ.ZZZ.ZZZ.ZZZ/29  ZZZ.ZZZ.ZZZ.ZZZ  ether2-wan1                                                                                                                
 1   192.168.20.254/24  192.168.20.0    ether3-LAN                                                                                                                           
 2   ZZZ.ZZZ.ZZZ.ZZZ/28  ZZZ.ZZZ.ZZZ.ZZZ  ether4-wan2                                                                                                          
 3   20.20.20.2/30      20.20.20.0      eoip-tunnel-junior

EoIP Tunnel

0  R name="eoip-tunnel-junior" mtu=1500 l2mtu=65535 mac-address=02:F0:21:45:FB:21 arp=enabled local-address=0.0.0.0 remote-address=ZZZ.ZZZ.ZZZ.ZZZ tunnel-id=2222

 0 A S  ;;; wan1
        0.0.0.0/0                          ZZZ.ZZZ.ZZZ.ZZZ          2
 1   S  ;;; wan2
        0.0.0.0/0                          ZZZ.ZZZ.ZZZ.ZZZ          10
 2 ADC  20.20.20.0/30      20.20.20.2      eoip-tunnel-junior        0
 3 ADC  ZZZ.ZZZ.ZZZ.ZZZ/29  ZZZ.ZZZ.ZZZ.ZZZ ether2-Biznet             0
 4 A S  192.168.10.0/24                    20.20.20.1                1
 5 ADC  192.168.20.0/24    192.168.20.254  ether3-LAN                0
 6 ADC  ZZZ.ZZZ.ZZZ.ZZZ/28  ZZZ.ZZZ.ZZZ.ZZZ  ether4-Lintas             0

like i said sir normal configuration no firewall etc only NAT masquerade…

idlemind · April 11, 2017, 2:36pm

So your LAN at each location are in different networks. EoIP is used to stretch layer 2 between locations. Your initial post suggested this is what you were trying to do with 192.168.10.8 and 192.168.10.58.

If this is the desired functionality, create a bridge on each offices MikroTik. Add the EoIP tunnel as a bridge port on each MikroTik. Add the Ethernet interface used for your LAN as a bridge port. Move the IP from the Ethernet interface to the bridge interface. Change Office 2’s IP to 192.168.10.253 to avoid a duplicate.

You may find this post interesting as I demo EoIP stretched between 3 offices here:

http://forum.mikrotik.com/t/eoip-problem/107859/1