Hi All
I’d posted this in the wrong forum - Under Beginners Basics, just reposing to correct area.
This is my setup:
951Ui-2HnD running ros 6.41. I have an adsl modem connected to ether1 - thin would be the WAN. Wireless is set up, with the other ports on the switch all part of the Bridge/Lan
Having a battle with my network at the moment. I can ping from one device to another in the Bridge, but as soon as I try to run something, it says no route to host. I was testing with Netcat, listening on one device but getting the same issue, no route to host!
Herewith some configuration settings of the router:
[admin@MikroTik] > ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 10.0.0.2 1
1 ADC 10.0.0.0/24 10.0.0.101 ether1 0
2 ADC 192.168.88.0/24 192.168.88.1 bridge 0
[admin@MikroTik] > ip address print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 ;;; defconf
192.168.88.1/24 192.168.88.0 bridge
1 D 10.0.0.101/24 10.0.0.0 ether1
[admin@MikroTik] > ip firewall filter print
Flags: X - disabled, I - invalid, D - dynamic
0 D ;;; special dummy rule to show fasttrack counters
chain=forward action=passthrough
1 ;;; defconf: accept established,related,untracked
chain=input action=accept connection-state=established,related,untracked
2 ;;; defconf: drop invalid
chain=input action=drop connection-state=invalid
3 ;;; defconf: accept ICMP
chain=input action=accept protocol=icmp
4 ;;; defconf: drop all not coming from LAN
chain=input action=drop in-interface-list=!LAN
5 ;;; defconf: accept in ipsec policy
chain=forward action=accept ipsec-policy=in,ipsec
6 ;;; defconf: accept out ipsec policy
chain=forward action=accept ipsec-policy=out,ipsec
7 ;;; defconf: fasttrack
chain=forward action=fasttrack-connection connection-state=established,related
8 ;;; defconf: accept established,related, untracked
chain=forward action=accept connection-state=established,related,untracked
9 ;;; defconf: drop invalid
chain=forward action=drop connection-state=invalid
10 ;;; defconf: drop all from WAN not DSTNATed
chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface-list=WAN
[admin@MikroTik] > ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; defconf: masquerade
chain=srcnat action=masquerade out-interface-list=WAN ipsec-policy=out,none
[admin@MikroTik] > interface print
Flags: D - dynamic, X - disabled, R - running, S - slave
# NAME TYPE ACTUAL-MTU L2MTU MAX-L2MTU MAC-ADDRESS
0 R ether1 ether 1500 1598 2028 6C:3B:6B:A0:53:66
1 S ether2 ether 1500 1598 2028 6C:3B:6B:A0:53:67
2 S ether3 ether 1500 1598 2028 6C:3B:6B:A0:53:68
3 RS ether4 ether 1500 1598 2028 6C:3B:6B:A0:53:69
4 S ether5 ether 1500 1598 2028 6C:3B:6B:A0:53:6A
5 RS wlan1 wlan 1500 1600 2290 6C:3B:6B:A0:53:6B
6 R ;;; defconf
bridge bridge 1500 1598 6C:3B:6B:A0:53:67
This is a strange one, and although not that well versed with RouterOs, the networking seems ok to me, unless I’m missing something obvious. It seems that RouterOs is trying to route packets that are in the LAN, all on the same bridge. This should not be happening in my understanding, as all traffic in the LAN/Bridge should be open??
Anyway, if anyone can help, much appreciated. Have Google’d and searched forums etc, but no joy.
Thanks
Edit:
As a side note, I’m adding in my ping from one device to another. Surely this shouldn’t be s, high ms - as you can see the first two are really high in ms, and then seems to come down. Dunno if this is something on the router not going well?
ant@localhost ~/Downloads/Torrents % ping 192.168.88.253
PING 192.168.88.253 (192.168.88.253) 56(84) bytes of data.
64 bytes from 192.168.88.253: icmp_seq=1 ttl=64 time=2535 ms
64 bytes from 192.168.88.253: icmp_seq=2 ttl=64 time=1522 ms
64 bytes from 192.168.88.253: icmp_seq=3 ttl=64 time=498 ms
64 bytes from 192.168.88.253: icmp_seq=4 ttl=64 time=85.1 ms
64 bytes from 192.168.88.253: icmp_seq=5 ttl=64 time=309 ms
64 bytes from 192.168.88.253: icmp_seq=6 ttl=64 time=229 ms
64 bytes from 192.168.88.253: icmp_seq=7 ttl=64 time=4.20 ms
64 bytes from 192.168.88.253: icmp_seq=8 ttl=64 time=274 ms
64 bytes from 192.168.88.253: icmp_seq=9 ttl=64 time=297 ms
64 bytes from 192.168.88.253: icmp_seq=10 ttl=64 time=18.1 ms
64 bytes from 192.168.88.253: icmp_seq=11 ttl=64 time=42.3 ms
64 bytes from 192.168.88.253: icmp_seq=12 ttl=64 time=60.0 ms
64 bytes from 192.168.88.253: icmp_seq=13 ttl=64 time=228 ms
64 bytes from 192.168.88.253: icmp_seq=14 ttl=64 time=307 ms
