Hello
We have some networks(subnets) that connected to each other with sxt or sextant ptp link.
Our network is same bellow picture:
all IP’s Subnet: 24 (255.255.255.0)
The 1,2,3,4,5,6,7 are pc or server(windows server.)
A,B,C,D are Mikrotik SXT 5HnD
Befor now, all IPs is in one range and all sxt’s ports was in bridge1 so all clients see other. For example: client 1 see client 7.
But now I want every network has different IP range.
I need your help to configure RIP so that client 1 can get client 7’s ping or client 4 can get client 7’s ping.
How I do configure RIP for this scenario??
petrn
March 1, 2013, 7:33pm
2
Hi
router B ether1 should be 192.168.1.2 (typo?), networks on wlan segments overlap, i think RIP will be confused.Use:
router A wlan1=192.168.10.1/255.255.255.252
router C wlan1=192.168.10.2/255.255.255.252
router B wlan1=192.168.10.5/255.255.255.252
router D wlan1=192.168.10.6/255.255.255.252
and RIP v2
petrn:
Hi
router B ether1 should be 192.168.1.2 (typo?), networks on wlan segments overlap, i think RIP will be confused.Use:
router A wlan1=192.168.10.1/255.255.255.252
router C wlan1=192.168.10.2/255.255.255.252
router B wlan1=192.168.10.5/255.255.255.252
router D wlan1=192.168.10.6/255.255.255.252
and RIP v2
very thank for your help.
yes. it’s typo.
Ok. i will use them.
but i don’t know how configure rip.
if possible tell me how i do this.
for example tell me :“roater A: routing>rip>networks> add >address:192.168.1.0/24>ok,add> Address:192.168.10.0/24”
or “router A: routing>RIP>Interface>Add>Interface: all,Recive: v1-2, send: v2>ok”
Problem Solved
in one sxt ARP of wlan1 was disabled.
solution: interface>wlan1>general tab>ARP: enabled !!!
problem not solved completly
now clinet 1 have ping of router C > ether1(192.168.2.1) but can’t ping of Client 4(request timed out)
petrn
March 3, 2013, 2:38pm
6
You have to post some configurations and outputs from your routers.
Here are my testbed configurations (all are almost bare minimum, there is way to get rid of 3 lines):
# mar/03/2013 13:53:33 by RouterOS 5.24
# software id = B9EB-8XWG
#
/system identity set name=routerA
/ip address add address=192.168.1.1/24 interface=ether1
/ip address add address=192.168.10.1/30 interface=wlan1
/routing rip network add network=192.168.10.0/24
/routing rip network add network=192.168.1.0/24
# mar/03/2013 13:54:02 by RouterOS 5.24
# software id = 85F0-Y53F
#
/system identity set name=routerB
/ip address add address=192.168.1.2/24 interface=ether1
/ip address add address=192.168.10.5/30 interface=wlan1
/routing rip network add network=192.168.1.0/24
/routing rip network add network=192.168.10.0/24
# mar/03/2013 13:53:16 by RouterOS 5.24
# software id = VDSN-8H03
#
/system identity set name=routerC
/ip address add address=192.168.2.1/24 interface=ether1
/ip address add address=192.168.10.2/30 interface=wlan1
/ip route add distance=1 gateway=192.168.2.2
/routing rip set distribute-default=always redistribute-connected=yes
/routing rip network add network=192.168.10.0/24
# mar/03/2013 13:53:48 by RouterOS 5.24
# software id = RJNF-SSM3
#
/system identity set name=routerD
/ip address add address=192.168.10.6/30 interface=wlan1
/ip address add address=192.168.3.1/24 interface=ether1
/routing rip set redistribute-connected=yes
/routing rip network add network=192.168.10.0/24
Default gateway, if necessary on routerC. Whoa i haven’t configured RIP for years, surprisingly it still works…
petrn
March 3, 2013, 3:00pm
7
BTW, i found bug:
normal export works fine
/export
/routing rip network
add disabled=no network=0.0.0.0/0compact export strips "network=0.0.0.0/0"
/export compact
/routing rip network
addand here is attempt to use compact export:
[admin@routerA] /routing rip network> add
network:
interrupted
value of network must contain '/'
[admin@routerA] /routing rip network>
see this picture:
and mikrotik sxt’s configuration:
[admin@RouterA] > export
# jan/02/1970 00:55:36 by RouterOS 6.0rc5
# software id = 3VSY-KATS
#
/interface wireless
set 0 allow-sharedkey=yes band=5ghz-onlyn country=india disabled=no frequency=\
5220 frequency-mode=superchannel ht-rxchains=0,1 ht-txchains=0,1 l2mtu=2290 \
mode=station-bridge nv2-preshared-key=********* nv2-security=enabled \
scan-list=5150-5250 ssid=Test wmm-support=enabled
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods=passthrough \
mode=dynamic-keys supplicant-identity=M
*********
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none
/ip pool
add name=pool1 ranges=192.168.1.10-192.168.1.254
/ip dhcp-server
add add-arp=yes address-pool=pool1 disabled=no interface=ether1 lease-time=1d \
name=server1
/ip address
add address=192.168.10.1/24 comment=WLAN1 i
nterface=wlan1 network=192.168.10.0
add address=192.168.1.1/24 comment=ether1 i
nterface=ether1 network=192.168.1.0
/ip dhcp-server network
add address=192.168.1.0/24 gateway=192.168.1.1 netmask=24
/routing rip
set distribute-default=always redistribute-
connected=yes redistribute-ospf=yes \
redistribute-static=yes
/routing rip interface
add interface=wlan1 receive=v2
add interface=ether1 receive=v2
/routing rip network
add network=192.168.1.0/24
add network=192.168.10.0/24
/system identity
set name=RouterA
/system leds
set 0 interface=wlan1
set 1 interface=ether1
[admin@RouterA] >
[admin@RouterB] > export
# jan/02/1970 00:57:13 by RouterOS 6.0rc5
# software id = 2KPE-5XZI
#
/interface wireless
set 0 band=5ghz-onlyn disabled=no frequency=5220 frequency-mode=superchannel \
ht-rxchains=0,1 ht-txchains=0,1 l2mtu=2290 mode=bridge nv2-preshared-key=\
********* nv2-security=enabled scan-list=5300-5400 ssid=Test \
wireless-protocol=nv2
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods=\
passthrough mode=dynamic-keys supplicant-identity=MikroTik \
wpa2-pre-shared-key="**********"
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
/ip pool
add name=pool1 ranges=192.168.2.10-192.168.2.254
/ip dhcp-server
add add-arp=yes address-pool=pool1 disabled=no interface=ether1 lease-time=1d \
name=server1
/ip address
add address=192.168.10.2/24 comment=WLAN1 interface=wlan1 network=\
192.168.10.0
add address=192.168.2.1/24 comment=ether1 interface=ether1 network=\
192.168.2.0
/ip dhcp-server network
add address=192.168.2.0/24 gateway=192.168.2.1 netmask=24
/routing rip
set distribute-default=always redistribute-connected=yes redistribute-ospf=\
yes redistribute-static=yes
/routing rip interface
add interface=ether1 receive=v2
add interface=wlan1 receive=v2
/routing rip network
add network=192.168.10.0/24
add network=192.168.2.0/24
/system identity
set name=RouterB
/system leds
set 0 interface=wlan1
set 1 interface=ether1
[admin@RouterB] >
now clientA could ping 192.168.1.1 & 192.168.10.1 & 192.168.10.2 & 192.168.2.1
but could not ping 192.168.2.254 (request timed out)
why??
petrn
March 4, 2013, 5:29am
10
Well, troubleshooting 101:
Can RouterB ping 192.168.2.254? Perhaps firewall in ClientB is blocking ICMP …
in tools>ping:
no, but when “interface=ether1” and “ARP ping=checked” ping is ok.
in routerA there is also this problem.
routerB can’t ping 192.168.2.254 but clientB can ping 192.168.10.2
routerA can’t ping 192.168.1.254 but clientA can ping 192.168.10.1
thank you very very much
When i disable eset smart security firewall and i set windows firewall to off ping will be ok.
But when firewalls is off or disabled, maybe will happen security problems.
thank you again.
petrn
March 4, 2013, 10:23am
14
I guess that ping is not a main function of clientB, and BTW you enable ping in firewall settings and have firewall on.
ping is not problem.
problem is: clientB is a server. in this server we have some website and ISA server. when firewall is on website and internet or … is unreachable.