Fixed IP local client

RouterOS Beginner Basics
1

Hello I am new to Mikrotik but so far I really like it! I have a question that I do not seem to be able to search up the correct answer.

I have a new RB750 and I set up a VPN successfully. I will have two devices I need to reach. The first device I configured for DCHP and I setup a lease in the RB750. I can reach this device with no problems and the connections and routes are reported by the RouterOS.

My second device is the problem. It will only allow me to enter a fixed IP, netmask, and gateway. I will report what I have tried but so far I am only able to ping it and nothing else. I am able to place it on my home network which uses another router brand and do all I need, but I am trying to set this up for a system that will use the Mikrotik in many places if I succeed.

I would like to use an address on the internal network for example the device that does work I setup the lease for 192.168.88.11. I am trying to use 192.168.88.10 for the device I can not reach except for ICMP. I tried setting up a lease for the device but since internally it is already fixed I do no think this helps.
The device does show up in the arp list. I have tried fire wall rules and routes to try to get to the unit with TCP and port 80.

I tried to set it up like a gateway applying the address 192.168.88.9 to the ether5-local-slave and routing it to 192.168.88.10 and the route shows up and says it is reachable but I don’t reach it :slight_smile:

What should I try?
Thanks is advance
Bruce

2

And as a newbie I am using webfig to set and look at everything. I seem to be able to find most items listed in the scripting language. I will need to learn how to create a script, save it, and set it to my router, but I was trying to keep everyone else running on the rb750 while I learn. Ok, back to reading the forums for me.

3

Please post the output of “/ip address print detail”, “/ip route print detail”, “/interface print detail”, “/ip firewall export”, and an accurate network diagram.

4

Ok - I’ll get back what might be a basic setup and try to post those things tomorrow - Thanks

5

I have tried with the device gateway set to 192.168.88.1 and 192.168.88.9 also.

[admin@AquaTik] > /ip address print detail
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; default configuration
address=192.168.88.1/24 network=192.168.88.0
interface=ether2-local-master actual-interface=ether2-local-master

1 D address=192.168.11.6/24 network=192.168.11.0 interface=ether1-gateway
actual-interface=ether1-gateway

2 D address=192.168.88.21/32 network=192.168.88.20 interface=
actual-interface=

3 address=192.168.88.9/32 network=192.168.88.9 interface=ether5-local-slave
actual-interface=ether2-local-master
[admin@AquaTik] >> /ip route print detail
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 ADS dst-address=0.0.0.0/0 gateway=192.168.11.1
gateway-status=192.168.11.1 reachable ether1-gateway distance=1
scope=30 target-scope=10 vrf-interface=ether1-gateway

1 ADC dst-address=192.168.11.0/24 pref-src=192.168.11.6
gateway=ether1-gateway gateway-status=ether1-gateway reachable
distance=0 scope=10

2 ADC dst-address=192.168.88.0/24 pref-src=192.168.88.1
gateway=ether2-local-master
gateway-status=ether2-local-master reachable distance=0 scope=10

3 ADC dst-address=192.168.88.9/32 pref-src=192.168.88.9
gateway=ether2-local-master
gateway-status=ether2-local-master reachable distance=0 scope=10

4 A S dst-address=192.168.88.10/32 gateway=192.168.88.9
gateway-status=192.168.88.9 reachable ether2-local-master distance=1
scope=30 target-scope=10

5 ADC dst-address=192.168.88.20/32 pref-src=192.168.88.21
gateway= gateway-status= reachable
distance=0 scope=10
[admin@AquaTik] >> /interface print detail
Flags: D - dynamic, X - disabled, R - running, S - slave
0 R name=“ether1-gateway” type=“ether” mtu=1500 l2mtu=1526

1 R name=“ether2-local-master” type=“ether” mtu=1500 l2mtu=1524

2 R name=“ether3-local-slave” type=“ether” mtu=1500 l2mtu=1524

3 name=“ether4-local-slave” type=“ether” mtu=1500 l2mtu=1524

4 R name=“ether5-local-slave” type=“ether” mtu=1500 l2mtu=1524

5 DR name=“” type=“pptp-in” mtu=1400
[admin@AquaTik] >>

6

You are using overlapping IP space. You cannot do that, TCP/IP doesn’t work that way.

7

Ok(I was trying to make the route similar to the VPN but this is wrong?).

I suppose to make the above work I could put it on it’s own network like 192.168.87.10 and put 192.168.88.10 on the ether5-slave and route all things to it?


I only went this way because the device does not respond (except to ping) when it gets a fixed address with in the local network - in this case I want to use 192.168.88.10 and the gateway as 192.168.88.1

I do not have any good guess’s to why it does not respond on the Mikrotik but it does respond when configured similarly on another brand router.

8

Are the ether3 - ether5 interfaces actually slaved to ether2? You can verify by issuing “/interface ethernet print detail” and checking what the master-port is set to. If it is set to ether2 instead of ‘none’ you don’t need ANY IP addresses on ether3-5. You just plug whatever device you’re trying to connect in with a static IP of 192.168.88.10 and a gateway of .1. With a master-port set those ports are all switched on layer 2.

9

That is what I thought and after failing for a while I verified that it works that way on my other brand router. I do not know why it does not seem to work on the RB750. This evening I will try another port (i have only used number 5) I should have already tried it in port other than ether5 but I have not. (I can be stubborn that way:-) you know it should work etc. I believe that ether5 is a slave to ether2, but I will plug it right into ether2 next. What other information gets passed to units that DHCP an address, mask, and gateway of course, anything else?
I am determined to use Mikrotik, I’ve ordered 2 more :slight_smile:

10

All you need is an IP address, netmask, and gateway. DHCP can pass all other kinds of parameters but only those three are required for straight IP connectivity.

11

I can see now I made things overly complicated by trying to add the route, but I am still chasing a problem that is elusive. I may start a new thread if I think of a way to eliminate a few variables. One of my problems turned out to be my device configuration an Idec Display and it still may be so I have to go back and verify it with other equipment. I am seeing that my browser tried to open connections but they go unanswered for some reason unknown to me.

I do appreciate your signature that requests specific information for specific answers, if I only knew what questions to ask :frowning: Thanks for your help, I will get there eventually.

12

Number one - read the directions - whoops

I had not set the proxy-arp

It works great now!.