I’m using a routerboard as an office router with VPN and proxy arp turned on. Ether1 is the WAN and ether 2-5 is the LAN.
I am using DHCP in the LAN. But if I have ANY of my computers in the LAN try and set a static IP to ANY IP it comes back with an error “The static IP address that was just configured is already in use on the network. Please reconfigure a different IP Address”
But those addresses are defintiely not in use.
If I unplug from the router and change IP’s it works. But we need to change all day long so this is really annoying.
The fix is to add large subnets to the ip addresses list. If the subnet doesn’t exist it wont let you change to that IP. This is crap of course but I just had to add a whole bunch of large subnets that we use like 10.0.0.0/8 to allow us to change IP’s without problems.
BUT - this creates a huge problem for us because when we try and contact anything out in the 10.0.0.0/8 out in our network it won’t work because it thinks it exists inside the lan.
Perhaps you could provide your configuration - I don’t understand how what you’re saying can be happening and I think that RouterOS would be a laughing stock if you couldn’t assign a static IP to any device connected.
The only thing I can think of is if you’re trying to assign a static IP to a device when that address is a member of the pool of addresses RouterOS is DHCP serving.
Anyway, your configuration would help diagnose the problem.
Probably all settings would confuse the issue. To get started, just the output of the following would help:
/ip address print
/ip pool print
/ip dhcp-server print
and this (if it is not too long):
/ip dhcp-server lease print detail
Just so you know:
Any ip address you see in
/ip dhcp-server lease print detail
is being used, even though the computer that it is assigned to is not online, or even on.
Ether1 = wan
Ether2,3, is bridged
pptp is set up and working fine on ether1
Proxy arp is on all the interfaces to allow talk with devices inside the network.
There are 3 port forwards into devices.
When i try and change IP’s and I get the error message I watch the ARP table and it assigned the MAC of the router to the actual new IP I tried to statically enter. I thought that was odd.
Could this be something to do with the arp not timing out fast enough?
Right yeah I know leases don’t expire right away, sometimes days.
I’ll give you an example .. we are in the 192.168.20.1 network but if I change to 192.168.1.100 it will give an error. if I change to 10.10.10.10 it gives an error.. any ip at all..
when you change your computer’s address to 192.168.1.100, it sends an ARP request like ‘is there anybody with IP 192.168.1.100?’ RouterOS receives this request on the interface where proxy-arp is enabled, sees that this address is available on other interface (via default route, I believe), so ROS sends ARP response with his own MAC. that’s for what proxy-arp was developed. do you need it at all?
The reason why we turned on proxy arp was because when we VPN from home outside a different network with PPTP we need to be able to contact other users in the 192.168.20.0/24 network. We have several PC’s inside we wish to VNC or grab files etc.
When I turned on proxy arp it fixed that. Or do I need proxy arp only for the ether1 port (wan) ?
Actually PROXY ARP is the problem. I disabled it and I can change IP’s once more.
BUT that gives me the same problem now. When I VPN into the network I get assigned a 192.168.20.50-99 and I can’t talk to other people in the same subnet 192.168.20.x/24 at all.. but I have internet and everything works.
Is there another way around this with a static route or something? Maybe i’ll assign 172.x.x.x numebrs to pptp people and have some static route between those to the 192.168.20.x network.. ?
yes, since PPTP is Point to Point, no one else knows about them except the router. It is best to route them, so assign your VPN dialins a completely different subnet and route them. The only hard part is with clients dialing in, if the vpn server isnt the default gateway for all traffic then you need some static routes to get the traffic to where it needs to go.
you can use 10.10.10.x or 172… subnet. The static route is not necessary because PPTP gives you a static IP and creates another static to itself… as it has the 10.10.10.x and the 192… the pings and access works fine.