Help with new ISP and RB2011

Hi Guys,

Working on setting up a new ISP with my RB2011 and am having some trouble. I am not clear on what the issue is, although this is the first time we have used a cable modem. My issue is that I can ping to a public address (I've been using 4.2.2.2 as a test) from the bridge, but I cannot ping from the internal IP Source 10.4.49.0 subnet (or any others that I have tried). Our previous ISP worked perfectly with a similar configuration, so was hoping someone could point out what I am doing wrong.

We have a static public IP from the provider of 173.8.46.73, with a gateway of 173.8.46.78. I simply put .73 on eth2, and added a static route for all traffic to .78. I have both eth2 and eth7 on the bridge, and can ping them both as expected from the bridge. According to the provider, they have placed the modem in "Gateway Mode, Virtual".

I am able to get internet to a PC with a static of 10.4.49.2 (with 10.4.49.1 as a gateway) plugged into eth7, but it would ONLY access the web via IPV6 addresses, meaning I could pretty much only hit google and facebook. That's about the time I decided to ask for help :slight_smile:.

Thanks in advance for any help!!

Here's my config:

/IP Address Print Detail

address=10.4.49.1/32 network=10.4.49.0 interface=ether7 actual-interface=bridge-local 1 address=173.8.46.73/25 network=173.8.46.0 interface=ether2 actual-interface=bridge-local

/IP Route Print Detail
0 A S dst-address=0.0.0.0/0 gateway=173.8.46.78 gateway-status=173.8.46.78 reachable via bridge-local distance=1 scope=30 target-scope=10 1 ADC dst-address=10.4.49.0/32 pref-src=10.4.49.1 gateway=bridge-local gateway-status=bridge-local reachable distance=0 scope=10 2 ADC dst-address=173.8.46.0/25 pref-src=173.8.46.73 gateway=bridge-local gateway-status=bridge-local reachable distance=0 scope=10

/Interface Print Detail
0 name="ether1-gateway" default-name="ether1" type="ether" mtu=1500 actual-mtu=1500 l2mtu=1598 max-l2mtu=4074 mac-address=00:0C:42:AE:80:A2 fast-path=yes link-downs=0 1 RS name="ether2" default-name="ether2" type="ether" mtu=1500 actual-mtu=1500 l2mtu=1598 max-l2mtu=4074 mac-address=00:0C:42:AE:80:A3 fast-path=yes last-link-up-time=jan/02/1970 00:00:42 link-downs=0 2 RS name="ether3" default-name="ether3" type="ether" mtu=1500 actual-mtu=1500 l2mtu=1598 max-l2mtu=4074 mac-address=00:0C:42:AE:80:A4 fast-path=yes last-link-up-time=jan/02/1970 00:00:41 link-downs=0 3 RS name="ether4" default-name="ether4" type="ether" mtu=1500 actual-mtu=1500 l2mtu=1598 max-l2mtu=4074 mac-address=00:0C:42:AE:80:A5 fast-path=yes last-link-up-time=jan/02/1970 00:00:41 link-downs=0 4 S name="ether5" default-name="ether5" type="ether" mtu=1500 actual-mtu=1500 l2mtu=1598 max-l2mtu=4074 mac-address=00:0C:42:AE:80:A6 fast-path=yes link-downs=0

/IP Firewall Export

jan/02/1970 00:13:49 by RouterOS 6.24 # software id = JFGH-VPPY # /ip firewall filter add chain=input comment="default configuration" protocol=icmp add chain=input comment="default configuration" connection-state=established add chain=input comment="default configuration" connection-state=related add action=drop chain=input comment="default configuration" in-interface=\ sfp1-gateway add action=drop chain=input comment="default configuration" in-interface=\ ether1-gateway add chain=forward comment="default configuration" connection-state=\ established add chain=forward comment="default configuration" connection-state=related add action=drop chain=forward comment="default configuration" \ connection-state=invalid /ip firewall nat add action=masquerade chain=srcnat comment="default configuration" \ out-interface=sfp1-gateway add action=masquerade chain=srcnat comment="default configuration" \ out-interface=ether1-gateway

Before anyone spends time on this, I resolved it the next day. I had to change the two default masquerade rules in the firewall settings to “bridge local” and then it worked fine.


Does anyone see any issue with doing it that way? CPU usage seems low, and it’s seems to be performing fine.

Thanks again.