I have a RB411U board with a working 3G USB modem. I’ve also added NAT (srcnat on 3G connection with masquerade as the action).
I would like to plug the router to my Windows 7 PC but Windows says it is an unidentified network and won’t do anything. How would I get the internet working?
You have to set a network (with dhcp server on the router) on the LAN side and do the src-nat from this lan network (/24 or smaller).
DHCP server should hand out IP, gateway and dns server to dhcp-clients, which is your PC.
that should basically work.
Thanks for the reply.
I’ve added a DCHP server to ether1.
[] Address space: 192.168.88.0/24
[] Gateway: 192.168.88.1
[*] Addresses to give out: 192.168.88.2 - 192.168.88.254
I have no idea what to use for the DNS servers? Any ideas?
Look in the router what dns servers it was given by the ISP you are connected to. Use the same. Or go to www.opendns.com
But if your router is getting an IP address as dhcp-client (on the WAN side, the G3 chip) than it should have recieved the dns servers itself. In this case the dhcp-server wizard of ROS would automatically add these.
I signed up to OpenDNS and added the IPs it gave me to he DCHP server. I’ve added another NAT rule to ether1 (I still have another on my internet connection).
My Windows PC can now connect to the router and get an IP but it is still an unidentified network with no internet access.
Do I only have the NAT rule on the ether1 interface and not the internet one? Or both?
Post the output of “/ip pool print detail”, “/ip dhcp-server print detail”, “/ip dhcp-server network print detail”, “/ip dns export”, “/ip address print detail”, “/ip route print detail”, “/interface print”, “/ip firewall export”, and an accurate network diagram.
Here is the requested stuff you asked for.
[admin@Lamp Post] > /ip pool print detail
0 name="dhcp_pool1" ranges=192.168.88.3-192.168.88.254
[admin@Lamp Post] >> /ip dhcp-server print detail
Flags: X - disabled, I - invalid
0 name="dhcp1" interface=ether1 lease-time=3d address-pool=dhcp_pool1
bootp-support=static authoritative=after-2sec-delay
[admin@Lamp Post] >> /ip dhcp-server network print detail
0 address=192.168.88.0/24 gateway=192.168.88.1
dns-server=208.67.222.222,208.67.220.220
[admin@Lamp Post] >> /ip dns export
# jan/02/1970 10:02:44 by RouterOS 5.2
# software id = V9I9-BAQY
#
/ip dns
set allow-remote-requests=no cache-max-ttl=1w cache-size=2048KiB \
max-udp-packet-size=512 servers=208.67.222.222,208.67.222.220
[admin@Lamp Post] >> /ip address print detail
Flags: X - disabled, I - invalid, D - dynamic
0 address=192.168.0.1/32 network=192.168.0.1 interface=ether1
actual-interface=ether1
1 D address=58.165.11.141/32 network=10.112.112.125 interface=BigPon
actual-interface=BigPond
[admin@Lamp Post] >> /ip route print detail
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 ADS dst-address=0.0.0.0/0 gateway=10.112.112.125
gateway-status=10.112.112.125 reachable BigPond distance=1 scope=30
target-scope=10
1 ADC dst-address=10.112.112.125/32 pref-src=58.165.11.141 gateway=BigPond
gateway-status=BigPond reachable distance=0 scope=10
2 ADC dst-address=192.168.0.1/32 pref-src=192.168.0.1 gateway=ether1
gateway-status=ether1 reachable distance=0 scope=10
[admin@Lamp Post] >> /interface print
Flags: D - dynamic, X - disabled, R - running, S - slave
# NAME TYPE MTU
0 R ether1 ether 1500
1 R BigPond
[admin@Lamp Post] >> /ip firewall export
# jan/02/1970 10:04:59 by RouterOS 5.2
# software id = V9I9-BAQY
#
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \
tcp-close-wait-timeout=10s tcp-established-timeout=1d tcp-fin-wait-timeout
10s tcp-last-ack-timeout=10s tcp-syn-received-timeout=5s \
tcp-syn-sent-timeout=5s tcp-syncookie=no tcp-time-wait-timeout=10s \
udp-stream-timeout=3m udp-timeout=10s
/ip firewall nat
add action=masquerade chain=srcnat disabled=no out-interface=ether1
add action=masquerade chain=srcnat disabled=no out-interface=BigPond
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no
And here is my network map.
You’re handing out DHCP leases for 192.168.88.0/24 with a gateway of 192.168.88.1 on ether1. The IP address on ether1 is 192.168.0.1/32. That cannot possibly work. First of all, a /32 is a host address - only one host can exist on that subnet. That’s an impossible choice for a router interface that is supposed to act as a LAN gateway. Secondly you’re handing out IP space via DHCP your router doesn’t even implement.
Run the below:
/ip address
remove [find interface=ether1]
add address=192.168.88.1/24 interface=ether1
If you want different IP space on your LAN create a the correct address as per above, but also edit your IP pool and the DHCP server settings to match.
Things should work from there, but you only need one NAT rule. Remove the unnecessary one that has an out-interface of ether1.
You may want to read up on TCP/IP fundamentals so you understand how IP addresses and default gateways work.
Thanks Fewi - that did the trick!