Mikrotik in a Cisco Network

gmidia · September 17, 2013, 4:00pm

ISP has given me a Private IP for PTP(/30) and a Public IP /32 and VLAN ID. I have created a VLAN on the WAN interface and given it the Private PTP IP on the Mikrotik router. The Gateway is the ISP’s Cisco Router

where should i put the /32 Public IP. on a cisco router this would have been a put on a loopback interface what of mikrotik
i am not able to ping the Gateway for the PTP /30 but it shows reachable on the routes list
what could be the issue
Cisco routers work well in the network and i know that mikrotik can do what cisco can, more the reason we want to start implementing Mikrotik on the Network

CelticComms · September 17, 2013, 7:38pm

You could do much the same thing - i.e. put the /32 IP on a bridge interface and use SRC NAT on the traffic towards the ISP to use the /32 address as the source IP.

gmidia · September 17, 2013, 8:29pm

who can give reason for ping not being able to get through despite the route list showing Gateway for the private ip reachable.

Which ports should be put on the bridge interface?

CelticComms · September 17, 2013, 9:24pm

You don’t need any ports on the bridge for that type of use.

Do you see an ARP entry for the gateway IP address?

gmidia · September 17, 2013, 11:03pm

after activating the link my other link went down and the new route was preferred as opposed to the previous working route and shows gateway reachable.
will not show arp as the network is through and E1 link. is there a reason it would show reachable thru the VLAN Interface onto which the Private IP is configured while not able to ping.
my config for the Public IP was as below if any error confirm
chain:srcnat src address:(LAN IP Range) action:src-nat to-addresses:62.24.108.XXX out interface:VLAN
hope this is correct

CelticComms · September 18, 2013, 1:16am

It would be easier to comment if you could upload the config - output from /export compact.

gmidia · September 19, 2013, 5:27am

[admin@XTRANET_PASTOR-THUKU] > export compact

jan/02/1970 10:20:11 by RouterOS 6.4

software id = BLI4-7KQQ

/interface bridge
add name=loopback
/interface ethernet
set 0 name="Orange Wan"
set 1 name=OrangeLan
set 2 name=ether1-gateway
set 3 name=ether2-local-master
set 4 master-port=ether2-local-master name=ether3-local-slave
/interface pptp-client
add connect-to=196.207.28.XXX disabled=no max-mru=1460 max-mtu=1460 name=
pptp-out1 password=abcde user=abcde
/ip neighbor discovery
set ether1-gateway discover=no
set "Orange Wan.vlan437" discover=no
set pptp-out1 discover=no
/interface vlan
add interface="Orange Wan" l2mtu=1520 mtu=1504 name="Orange Wan.vlan437"
vlan-id=437
/ip hotspot profile
add hotspot-address=192.168.88.1 login-by=cookie,http-chap,https name=hsprof1
rate-limit=1M/1M
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
mac-cookie-timeout=3d
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool1 ranges=192.168.1.1
/ip dhcp-server
add address-pool=default-dhcp bootp-support=dynamic disabled=no interface=
ether2-local-master name=server1
add address-pool=dhcp_pool1 disabled=no interface=ether1-gateway name=dhcp1
/ip hotspot
add address-pool=default-dhcp disabled=no interface=ether2-local-master name=
hotspot1 profile=hsprof1
/queue simple
add disabled=yes max-limit=64k/64k name=queue1 target=192.168.88.79/32
add max-limit=1M/1M name=smwangi target=192.168.88.12/32
add limit-at=1M/1M max-limit=1M/1M name=hs- target=192.168.88.1/32
add max-limit=768k/768k name=ustadh target=192.168.88.23/32
add max-limit=512k/512k name=5 target=192.168.88.128/32
add max-limit=1M/1M name=1 target=192.168.88.122/32
/system logging action
set 0 memory-lines=100
set 1 disk-lines-per-file=100
set 3 remote=0.0.0.0
/ip address
add address=192.168.88.1/24 interface=ether2-local-master network=
192.168.88.0
add address=192.168.88.2/30 disabled=yes interface=ether1-gateway network=
192.168.88.0
add address=41.84.158.174/30 disabled=yes interface=ether1-gateway network=
41.84.158.172
add address=192.168.1.254/24 interface=OrangeLan network=192.168.1.0
add address=10.5.1.2/30 interface=ether1-gateway network=10.5.1.0
add address=10.2.22.73/30 comment="Orange Gateway" interface=
"Orange Wan.vlan437" network=10.2.22.72
add address=62.24.108.185/32 comment=LoopbackIP interface=loopback network=
62.24.108.185
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no
interface=ether1-gateway
/ip dhcp-server network
add address=192.168.1.0/30 gateway=192.168.1.2
add address=192.168.88.0/24 comment="default configuration" gateway=
192.168.88.1
/ip dns
set allow-remote-requests=yes max-udp-packet-size=512 servers=8.8.8.8,8.4.4.4
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=
"place hotspot rules here" disabled=yes
add chain=input comment="default configuration" disabled=yes protocol=icmp
add chain=input comment="default configuration" connection-state=established
disabled=yes in-interface=ether1-gateway
add chain=input comment="default configuration" connection-state=related
disabled=yes in-interface=ether1-gateway
add action=drop chain=input comment="default configuration" disabled=yes
in-interface=ether1-gateway
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=
"place hotspot rules here" disabled=yes to-addresses=0.0.0.0
add action=masquerade chain=srcnat comment="default configuration" disabled=
yes out-interface=ether1-gateway
add action=masquerade chain=srcnat comment="masquerade hotspot network"
src-address=192.168.88.0/24 to-addresses=0.0.0.0
add action=src-nat chain=srcnat disabled=yes out-interface=
"Orange Wan.vlan437" src-address=192.168.1.0/24 to-addresses=
62.24.108.185
/ip hotspot ip-binding
add address=192.168.88.33 disabled=yes mac-address=EC:55:F9:01:DE:A7 server=
hotspot1 to-address=192.168.88.33
add address=192.168.88.39 mac-address=00:19:DB:54:2C:DD to-address=
192.168.88.39 type=bypassed
/ip hotspot user
add name=sifalamu
add name=shuhuri password=shuhuri
add name=fareed password=mahrus
add name=5
add name=ustadh password=khalid
add name=mohamed password=mohamed
add disabled=yes name=4
add name=elsa password=dari2000
add disabled=yes name=3
add name=smwangi password=studio
add name=2
add comment="from 17/09/2013" name=fabienne password=france
add name=1
add comment="thur 1.00" name=rachel
add name=admin
/ip proxy
set max-cache-size=none parent-proxy=0.0.0.0
/ip route
add distance=1 gateway=10.5.1.1
add disabled=yes distance=1 gateway=10.2.22.74
/ip service
set api disabled=yes
/queue interface
set ether1-gateway queue=ethernet-default
set ether2-local-master queue=ethernet-default
set ether3-local-slave queue=ethernet-default
set "Orange Wan" queue=ethernet-default
set OrangeLan queue=ethernet-default
/radius incoming
set accept=yes
/system identity
set name=XTRANET_PASTOR-THUKU
/tool graphing interface
add
/tool graphing queue
add
/tool graphing resource
add
/tool mac-server
add interface=ether2-local-master
add interface=ether3-local-slave
add interface="Orange Wan"
add interface=OrangeLan
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-local-master
add interface=ether3-local-slave
add interface="Orange Wan"
add interface=OrangeLan

vik1988 · September 19, 2013, 6:01am

r u really sure that ISP end ip is 10.2.22.74. u can try by interchanging IPs

gmidia · September 19, 2013, 6:34am

that is what the ISP indicated and i had doubted that i had even interchanged but no result
config from a running cisco router looked like below

interface FastEthernet4.495
description UUNET Link WAN interface
encapsulation dot1Q 495
ip address 10.2.24.5 255.255.255.252
ip nat outside
ip virtual-reassembly
!
interface Vlan1
LAN Interface
ip address 192.168.1.1 255.255.255.0
ip nbar protocol-discovery
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1430
!
ip forward-protocol nd
ip http server
no ip http secure-server
!
ip nat inside source list 103 interface loopback1090 overload
ip route 0.0.0.0 0.0.0.0 10.2.24.6

which would mean the .74 as gateway is correct
as here u see the ip on router is .5 and gateway(iso) .6

gmidia · September 19, 2013, 9:34am

it is sorted it was an issue on the isp side

jgcadev · September 24, 2013, 8:08pm

I use the same scenario for mikrotik nat loopback IPv4, the IP / Public 32 is used for NAT.

You must route the public ip over the network “/ 30” then you must make a src-nat.

This public IP / 32 you must create a bridge interface is called the IP loopback and asigar bridge.

gmidia · September 24, 2013, 8:40pm

Hi
Can you post the routing part and the src-nat part for comparison purposes, looks like it is taking a toll on the CPU of the RB750
i would really appreciate