Hi:
I’ve just acquired a RB750 because I need to control the bandwidth of several clients across my network.
I’ve followed this tutorial:http://wiki.mikrotik.com/wiki/How_to_Connect_your_Home_Network_to_xDSL_Line
It seems to be working, I can visit web pages and everything.
My network topology is the following:
I have the ADSL modem connected to Ether1 interface(called Internet Interface in my config) and the switch to ETHER2 interface.
However, Even if I set no queues for bandwidth control everything seems to be working too slow, webpages take ages to load, even google is not loading, youtube won’t load.
Nevertheless, If I connect the adsl directly to the switch, set up my PC default gateway to 192.168.1.1 everything works fine, So it seems the problems is in the RB750.
This is my config:
IP ADDRESS:
admin@MikroTik] > ip address print detail
Flags: X - disabled, I - invalid, D - dynamic
0 address=192.168.1.2/24 network=192.168.1.0 interface=ether1 actual-interface=ether1
1 D address=192.168.1.3/24 network=192.168.1.0 interface=Internet actual-interface=Internet
DNS:
ip dns print
servers: 192.168.1.1
allow-remote-requests: yes
max-udp-packet-size: 512
cache-size: 2048KiB
cache-max-ttl: 1w
cache-used: 10KiB
Interface:
[admin@MikroTik] >> /interface print
Flags: D - dynamic, X - disabled, R - running, S - slave
# NAME TYPE MTU L2MTU
0 R ether1 ether 1500 1526
1 Internet ether 1500 1524
2 Server ether 1500 1524
3 ether4 ether 1500 1524
4 ether5 ether 1500 1524
5 X eoip-tunnel1 eoip-tunnel 1500
6 X bridge1 bridge 1500
7 X ipip1
Routes:
[admin@MikroTik] >> /ip route print detail
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 ADS dst-address=0.0.0.0/0 gateway=192.168.1.1
gateway-status=192.168.1.1 reachable Internet distance=1 scope=30 target-scope=10
vrf-interface=Internet
1 ADC dst-address=192.168.1.0/24 pref-src=192.168.1.2 gateway=ether1,Internet
gateway-status=ether1 reachable,Internet unreachable distance=0 scope=10
Firewall:
[admin@MikroTik] >> /ip firewall export
# apr/10/2011 21:55:45 by RouterOS 5.0
# software id = 6EHJ-2MCH
#
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \
tcp-close-wait-timeout=10s tcp-established-timeout=1d tcp-fin-wait-timeout=10s \
tcp-last-ack-timeout=10s tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s \
tcp-syncookie=no tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall filter
add action=accept chain=input comment="Accept established connections" connection-state=\
established disabled=no
add action=accept chain=input comment="Accept related connections" connection-state=related \
disabled=no
add action=drop chain=input comment="Drop invalid connections" connection-state=invalid \
disabled=no
add action=accept chain=input comment=UDP disabled=no protocol=udp
add action=accept chain=input comment="Allow limited pings" disabled=no limit=50/5s,2 \
protocol=icmp
add action=drop chain=input comment="Drop excess pings" disabled=no protocol=icmp
add action=drop chain=input comment="Drop excess pings" disabled=no protocol=icmp
add action=accept chain=input comment="From our LAN" disabled=no in-interface=Internet \
src-address=192.168.1.0/24
add action=log chain=input comment="Log everything else" disabled=no log-prefix=\
"DROP INPUT"
add action=drop chain=input comment="Drop everything else" disabled=yes
add action=accept chain=input comment="Accept established connections" connection-state=\
established disabled=yes
add action=accept chain=input comment="Accept related connections" connection-state=related \
disabled=yes
add action=drop chain=input comment="Drop invalid connections" connection-state=invalid \
disabled=yes
add action=accept chain=input comment=UDP disabled=yes protocol=udp
add action=accept chain=input comment="Allow limited pings" disabled=yes limit=50/5s,2 \
protocol=icmp
add action=drop chain=input comment="Drop excess pings" disabled=yes protocol=icmp
add action=drop chain=input comment="Bloqueo de Proxy Externo" disabled=yes dst-port=8080 \
in-interface=Internet protocol=tcp
/ip firewall mangle
add action=mark-connection chain=prerouting connection-state=new disabled=no in-interface=\
Internet new-connection-mark=SALIDA_INTERNET passthrough=yes
add action=mark-routing chain=prerouting connection-mark=SALIDA_INTERNET disabled=no \
in-interface=ether1 new-routing-mark=MARCA_SALIDA_INTERNET passthrough=yes
add action=mark-connection chain=output content="X-Cache: HIT" disabled=yes \
new-connection-mark=Cache-Connection passthrough=yes protocol=tcp src-port=8080
add action=mark-packet chain=output connection-mark=Cache-Connection disabled=yes \
new-packet-mark=Cache-Packet passthrough=yes
add action=accept chain=prerouting comment="icmp lan" disabled=no
add action=mark-packet chain=prerouting comment="icmp lan" disabled=no in-interface=ether1 \
new-packet-mark="icmp in" passthrough=no protocol=icmp
add action=mark-packet chain=postrouting disabled=yes new-packet-mark="icmp out" \
out-interface=ether1 passthrough=no protocol=icmp
/ip firewall nat
add action=masquerade chain=srcnat disabled=no src-address=192.168.1.0/24
add action=masquerade chain=srcnat disabled=yes src-address=0.0.0.0
add action=masquerade chain=srcnat disabled=yes src-address=192.168.1.0/24
add action=masquerade chain=srcnat disabled=yes src-address=192.168.1.0/24
add action=redirect chain=dstnat disabled=yes dst-port=80 in-interface=Internet protocol=\
tcp to-ports=8080
add action=redirect chain=dstnat disabled=yes in-interface=ether1 protocol=tcp to-ports=\
8080
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no
DHCP:
[admin@MikroTik] >> /ip dhcp-client print detail
Flags: X - disabled, I - invalid
0 interface=Internet add-default-route=yes default-route-distance=1 use-peer-dns=yes
use-peer-ntp=yes status=bound address=192.168.1.3/24 gateway=192.168.1.1
dhcp-server=192.168.1.1 primary-dns=192.168.1.1 expires-after=21h59m46s
The Internet Interface (Ether2) gets an ip address from the ADSL modem, in this example it gets the address 192.168.1.3/24 and it show the dns for this to be 192.168.1.1… which seems odd to me, shouldn’t it be 200.105.128.40?
I tried the other way, setting a static IP for Internet Interface without DHCP and it won’t work.
Also I can’t ping the default gateway from my PC .
Ip: 192.168.1.4
mask: 255.255.255.0
Default Gateway: 192.168.1.2
DNS: 200.105.128.40
I’m new to mikrotik, but I have general knowledge about networks and Router.
It would be great if anyone could help me.
Best Regards
Freddy
