Internet works on the lan side but not on the router itself.

RouterOS Beginner Basics
1

Hi,

I have configured the internet on the mikrotik router. It works fine on the lan side, but there is no internet on the router itself (no ping to the internet ex. 8.8.8.8 ) . When I try to ping from terminal I get timeout. When I try to ping from winbox → tools → ping with specified src. address (10.1.7.1 - router’s local address) on advenced tab then it works. How can I fix it?

Configuration data from ISP:

Network: 172.16.1.10/30
Mask: 255.255.255.252
Gate ISP: 172.16.1.9
Addresses to use: 185.xxx.xxx.188-190

.
Nat:

# dec/15/2018 21:52: 5 by RouterOS 6.43.7
# software id = CW5R-EXZ4
#
Flags: X - disabled, I - invalid, D - dynamic 
 0    ;;; MT_OUT
      chain=dstnat action=dst-nat to-addresses=10.1.7.1 to-ports=8291 
      protocol=tcp dst-address=185.xxx.xxx.188 dst-port=8291 log=no 
      log-prefix="" 

 1    ;;; VPN
      chain=srcnat action=netmap to-addresses=185.xxx.xxx.188 
      src-address=10.1.7.0/24 out-interface=ether1 log=no log-prefix="" 

 2    chain=srcnat action=masquerade src-address=10.1.7.0/24 
      dst-address=192.168.7.0/24 log=no log-prefix="" 

 3    chain=srcnat action=masquerade out-interface=ether1

.
Addresses:

# dec/15/2018 21:54:22 by RouterOS 6.43.7
# software id = CW5R-EXZ4
#
Flags: X - disabled, I - invalid, D - dynamic 
 #   ADDRESS            NETWORK         INTERFACE                              
 0   ;;; defconf
     10.1.7.1/24        10.1.7.0        ether2                                 
 1   172.16.1.10/30     172.16.1.8      ether1                                 
 2   ;;; DMZ_Network
     172.16.13.1/24     172.16.13.0     vlan13_DMZ                             
 3   ;;; MANAGMENT_NETWORK
     192.168.7.1/24     192.168.7.0     vlan7_MGMT

Routes:

# dec/15/2018 21:36:35 by RouterOS 6.43.7
# software id = CW5R-EXZ4
#
Flags: X - disabled, A - active, D - dynamic, 
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, 
B - blackhole, U - unreachable, P - prohibit 
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 A S  0.0.0.0/0                          172.16.1.9                1
 1 ADC  10.1.7.0/24        10.1.7.1        bridge1                   0
 2 ADC  172.16.1.8/30      172.16.1.10     ether1                    0
 3  DC  172.16.13.0/24     172.16.13.1     vlan13_DMZ              255
 4  DC  192.168.7.0/24     192.168.7.1     vlan7_MGMT              255
2

Not sure about network schema, bu try this:
Example:

/ip address
add address=172.16.1.10/30 comment=“ISP Private IP” interface=ether1 network=172.16.1.8

Solution 1 -

/ip firewall nat
add action=src-nat chain=srcnat comment=“NAT Private to Public” src-address=172.16.1.10 to-addresses=185.xxx.xxx.188

Solution 2 - Add the pubblic address to IP address on the ether1

/ip address
add address=185.xxx.xxx.188/30 comment=“ISP Public IP” interface=ether1 network=185.xxx.xxx.188

3

Thank you, first solution works!