Google Home Mini / ICS-2000

JesNet · January 8, 2019, 9:42am

Problem
My Google Home Mini and my Trust Smart Cloud ICS2000 Control Station are not conected with the Google Services en Trust Services.

Situation
I’ve a FritzBox from my Internet Provider (XS4ALL). The FritsBox has al ports open tot he MikroTik and is ExposedHost tot he MikroTik. On the FriotzBox is uPnP Disabled.

Mikrotik
I’ve a working Internet conection. I’ve 4 EoIP tunnels perfect working. My MikroTik is also the DHCP Server, the DNS Server is the server address from the domain controller. On the MikroTik I’ve enabled uPnP.

Enyone know why the Google Home Mini and the ICS2000 Control Station isn’t connect?

bramwittendorp · January 8, 2019, 5:30pm

Hi,

I have a couple more questions in order to understand your problem better:

Are both devices actually connected (eg.: do they show up in the registration list of any WiFi-interfaces; is the ethernet-interface running)? Do they have an IP-address assigned for the servers?
Can you use torch to monitor the traffic from the device, where does the traffic flow stop?

Can you share a export of your router-config in order for us to examine it and watch for possible issues with the configuration?

You can use the following command, and may remove any IP-address that could identify you or your network:

/export hide-sensitive

I am also from Drenthe, so have a look in my profile for my contact details if you want on-site support from me

JesNet · January 9, 2019, 10:42am

Hey Bram,

Export:

[admin@MikroTik] > /export hide-sensitive

jan/09/2019 11:35:47 by RouterOS 6.42.7

software id = IKFQ-SKM6

model = 2011iL

serial number = 8E7A0931AEFE

/interface ethernet
set [ find default-name=ether1 ] name=ether1-WAN
set [ find default-name=ether2 ] name=ether2-LAN
set [ find default-name=ether4 ] name=ether4-Domotica
set [ find default-name=ether9 ] name=ether9-FritzBox
/interface eoip
add allow-fast-path=no clamp-tcp-mss=no ipsec-secret=YOLO1234! !keepalive
local-address=10.166.17.222 mac-address=02:14:4E:65:D7:CF name=
I-Beheer_Coevorden remote-address=92.70.5.5 tunnel-id=4
add allow-fast-path=no ipsec-secret=L1mWelcome2013. !keepalive local-address=
10.166.17.222 mac-address=02:FF:2D:18:3F:BF name=NLDC_KPN-Westpoort
remote-address=46.182.220.151 tunnel-id=33
add allow-fast-path=no clamp-tcp-mss=no ipsec-secret=acj80ew4vutjh3tj8
!keepalive local-address=10.166.17.222 mac-address=02:99:9D:25:B2:6B name=
TCN_Groningen remote-address=46.182.217.107 tunnel-id=13
/interface vlan
add interface=ether2-LAN name=VLAN2-Gast vlan-id=2
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip dhcp-server option
add code=6 name=GoogleDNS value=“‘8.8.8.8’”
/ip pool
add name=dhcp_pool0 ranges=10.166.14.100-10.166.14.200
add name=dhcp_pool1 ranges=10.166.14.100-10.166.14.200
add name=dhcp_pool2 ranges=192.168.22.100-192.168.22.200
add name=dhcp_pool3 ranges=192.168.22.1
add name=dhcp_pool4 ranges=172.16.16.100-172.16.16.200
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=ether2-LAN name=DHCP_Intranet
add address-pool=dhcp_pool3 disabled=no interface=ether4-Domotica name=
DHCP_Domotica
/ip address
add address=10.166.14.254/24 interface=ether2-LAN network=10.166.14.0
add address=10.166.17.222/24 interface=ether9-FritzBox network=10.166.17.0
add address=10.166.30.1/29 interface=TCN_Groningen network=10.166.30.0
add address=192.168.2.1/24 interface=ether2-LAN network=192.168.2.0
add address=10.166.33.1/29 interface=I-Beheer_Coevorden network=10.166.33.0
add address=192.168.22.254/24 interface=ether4-Domotica network=192.168.22.0
add address=10.166.34.1/29 interface=NLDC_KPN-Westpoort network=10.166.34.0
add address=192.168.254.254/24 interface=VLAN2-Gast network=192.168.254.0
add address=172.16.16.254/24 interface=ether2-LAN network=172.16.16.0
/ip dhcp-server lease
add address=10.166.14.104 dhcp-option=GoogleDNS mac-address=44:07:0B:5F:87:AD
server=DHCP_Intranet
/ip dhcp-server network
add address=10.166.14.0/24 dns-server=10.166.14.33,10.166.10.33,10.166.10.44
domain=Swadon.org gateway=10.166.14.254
add address=192.168.22.0/24 gateway=192.168.22.254
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip firewall filter
add action=accept chain=output comment=“Uitgaand Allow Any”
add action=accept chain=input comment=“IN - Datacenter Groningen” src-address=
46.182.217.107
add action=accept chain=input comment=“IN - Swadon PC Jesse - TCP 3333 > 3389”
dst-port=3333 protocol=tcp
add action=accept chain=input comment=“IN - Swadon Camera - TCP 88” dst-port=88
protocol=tcp
add action=accept chain=input comment=“IN - Allow - WAN IP CJ2” src-address=
94.124.94.83
add action=accept chain=input comment=“IN - Allow - IBeheer Coevorden”
src-address=92.70.5.5
add action=accept chain=input comment=“IN - Trust Smart Home (Domotica)”
src-address=37.97.133.116
add action=accept chain=input comment=“IN - Google Home Woonkamer” dst-address=
10.166.14.104
add action=accept chain=input comment=“IN - XS4ALL SIP Gateway” src-address=
194.109.16.16
add action=accept chain=input comment=“IN - CheapConnect SIP” src-address=
185.29.203.27
add action=accept chain=forward comment=“Forward - TCN Groningen” in-interface=
ether2-LAN out-interface=TCN_Groningen
add action=accept chain=forward in-interface=TCN_Groningen out-interface=
ether2-LAN
add action=accept chain=forward comment=“Forward - IBeheer Coevorden”
in-interface=ether2-LAN out-interface=I-Beheer_Coevorden
add action=accept chain=forward in-interface=I-Beheer_Coevorden out-interface=
ether2-LAN
add action=accept chain=input comment=ICMP protocol=icmp
add action=drop chain=input disabled=yes in-interface=ether9-FritzBox
/ip firewall nat
add action=masquerade chain=srcnat
add action=dst-nat chain=dstnat dst-address=10.166.17.222 dst-port=88 protocol=
tcp to-addresses=192.168.2.2 to-ports=88
add action=dst-nat chain=dstnat dst-address=10.166.17.222 dst-port=3333
protocol=tcp to-addresses=10.166.14.3 to-ports=3389
add action=dst-nat chain=dstnat dst-address=10.166.17.222 dst-port=80 protocol=
tcp to-addresses=10.166.14.33 to-ports=80
add action=accept chain=dstnat disabled=yes dst-address=10.166.17.222 dst-port=
5060 protocol=tcp
add action=accept chain=dstnat disabled=yes dst-address=10.166.17.222 dst-port=
5060 protocol=udp
add action=dst-nat chain=dstnat disabled=yes dst-address=192.168.22.1 dst-port=
2013 protocol=udp to-addresses=192.168.22.1 to-ports=2013
add action=dst-nat chain=dstnat disabled=yes dst-address=192.168.22.1 dst-port=
21 protocol=tcp to-addresses=192.168.22.1 to-ports=21
add action=dst-nat chain=dstnat disabled=yes dst-address=10.166.14.104
to-addresses=10.166.14.104
/ip route
add distance=1 gateway=10.166.17.254
add distance=1 dst-address=10.166.7.0/24 gateway=10.166.30.2
add distance=1 dst-address=10.166.10.0/24 gateway=10.166.30.2
add distance=1 dst-address=10.166.100.0/24 gateway=10.166.33.2
add distance=1 dst-address=10.166.200.0/24 gateway=10.166.34.2
/ip upnp
set enabled=yes
/system clock
set time-zone-name=Europe/Amsterdam
/system routerboard settings
set silent-boot=no

Device (Google Home) conected by a unmanaged Switch by a Unifi AP.
I see the device as active in the Unifi Controller
Also active in de DHCP Scope from the MikroTik
In de DHCP is this device static made with codus DHCP option for Google DNS and not AD DNS Server.

The ICS2000 is with a cable conected on one of the interfaces on the MikroTik directly.

bramwittendorp · January 9, 2019, 11:36am

Hi,

From your config, you have multiple IP-addresses assinged to ether2, which is your lan interface:

/ip address
add address=10.166.14.254/24 interface=ether2-LAN network=10.166.14.0
add address=192.168.2.1/24 interface=ether2-LAN network=192.168.2.0
add address=172.16.16.254/24 interface=ether2-LAN network=172.16.16.0

But what interests me the most, what port do you have the ICS2000 connected? It seems it has no IP-address configured that way, traffic wouldn’t flow, because it has no device responding on the other side.

What happens if you remove the GoogleDNS option for the Google Home Mini? Can it connect in that case?