Firewall NAT problem to share internet - Slow internet

RouterOS Beginner Basics
1

Hello,

I have a CRS125-24G-1S-RM.

I want to do the following :

  • ether1 = WAN (modem cable)
  • ether2 = LAN (external Gbit switch)
  • ether24 = MGNT port (connect to laptop directly)

The ether1 have a DHCP client set and is working.
The ether2 have a DHCP Server set and is working. (PC connected to external switch get ip, gateway and dns)

I have set all ports master-port to none.

A NAT rule for ether1 is set to masquerade.

Here is my config

/ip pool
add name=dhcp_pool1 ranges=192.168.1.2-192.168.1.99
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=ether2 name=dhcp1
/port
set 0 name=serial0
/system logging action
set 2 remember=yes
/ip address
add address=192.168.1.100/24 interface=ether24 network=192.168.1.0
add address=192.168.1.1/24 interface=ether2 network=192.168.1.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.1.0/24 gateway=192.168.1.1
/ip dns
set allow-remote-requests=yes
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public
/system clock
set time-zone-name=America/Montreal
/system ntp client
set enabled=yes primary-ntp=162.219.6.68 secondary-ntp=206.108.0.131

I don’t have routes configuration, but i can provide it later.

I can ping google.com, dns is resolved. I can have google.com in a browser … but it take very very very long time !!

What i do wrong ? Route problem ? Firewall/NAT problem ?

I tried to set ether2 master-port to ether1, but same problem.

I don’t want to use bridge if possible. Maybe I misunderstood something.

Thank you.

iharobike

2

Did you set your dhcp client to use peer dns?

/ip dhcp-client
set 0 use-peer-dns=yes

You might also try setting a static dns server in “/ip dhcp-server network”.

3

Thank you for the answer.

I’ll try when I’ll be at home.

So to you it’s a DNS issue ?

The master-port and NAT configuration are OK ?


Thanks again.

iharobike

4

Hello,

I solved the problem by using a bridge between ether1 (WAN) and ether2 (LAN - DHCP Server).

I have a couple of question to understand this.

  • Bridge are always do in software ? or some hardware can handle this ? if so, mine does this ?
  • Why I can’t set ether2 master-port to ether1 instead of a bridge ?
  • Is there a way to have the same result (have internet on ether2 without a bridge ?

Thanks.

iharobike