Dear sindy,
thank you for your reply
i tried your method and the pc did not work after assigning a public ip to it
i can ping to the mikrotik address which is the gateway
here is my configuration
/interface bridge
add name=private-ip-lan protocol-mode=none
add name=public-ip-lan protocol-mode=none
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether1 name=pppoe-out1 \
password=****** use-peer-dns=yes user=******@ogeronet-2M.com
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge=private-ip-lan interface=ether2
add bridge=public-ip-lan interface=ether3
/ip address
add address=192.168.88.1/24 interface=private-ip-lan network=192.168.88.0
add address=77.42.xx.xx/29 interface=public-ip-lan network=77.42.xx.xx
/ip firewall filter
add action=accept chain=input connection-state=established,related
add action=drop chain=input connection-state=invalid
add action=accept chain=input protocol=icmp
add action=accept chain=input comment=\
"permit any access from LAN with public IPs if really sure you need it" \
in-interface=public-ip-lan
add action=accept chain=input comment=\
"permit any access from LAN with private IPs" in-interface=private-ip-lan
# pppoe-out1 not ready
add action=accept chain=input comment="permit incoming RIP packets" dst-port=\
520 in-interface=pppoe-out1 protocol=udp
add action=drop chain=input disabled=yes
add action=fasttrack-connection chain=forward connection-state=\
established,related
add action=accept chain=forward connection-state=\
established,related,untracked
add action=drop chain=forward connection-state=invalid
add action=accept chain=forward in-interface=public-ip-lan
add action=accept chain=forward in-interface=private-ip-lan
add action=drop chain=forward
/ip firewall nat
# pppoe-out1 not ready
add action=masquerade chain=srcnat out-interface=pppoe-out1 src-address=\
192.168.88.0/24
/routing rip interface
add interface=pppoe-out1 receive=v2
/routing rip network
add network=77.42.xx.xx/29
/system routerboard settings
set silent-boot=no
is my config correct ?
please help
thanks in advance
The description of RIP functionality in Mikrotik manual is precise but I didn’t believe it first. The /routing rip network items do not define networks that should be advertised but those in which RIP should run. I believed it is not that bad but I was wrong.
Now the problem is that you’ve said before that every time you get a new PPPoE connection established, the address at your end changes; is this the case also for the remote address or the remote address remains the same? Try several disconnections and reconnections and if the remote address you get is always the same, it will be a bit simpler, because it is the remote address of the PPPoE interface which must match the /routing rip network item. So if it is stable, remember it.
And it would be fine if both of you (@Najifares and @rabienz) could compare the results - if the address is stable, whether both of you get the same one.
So before I ask you for a Teamviewer ID and pin, try the following:
Now depending on whether the remote address on the PPPoE connection is stable or changes, choose one of the following:
if it is stable, use /routing rip network add network=the.remote.address/32
if it is changing, use /routing rip network add network=0.0.0.0/0 and we shall deal with some minor consequences later on.
In any of the two cases, at this moment your 'Tik should start talking with ISP’s network using RIP. So provide again the output of the four /routing rip … print commands, and also of /routing prefix-lists print.
Dear Sindy
i try it and it works
but now just ether3 works, ether2 and ether4 and 5 if i connect it to my pc dont work
is there any solution that ether 2, ether4 and ether5 work like ether2 ?
Thank you
Sure there is, it depends on you which ether ports you decide to make members of which bridge. So if you enable the firewall rule which I’ve recommeded you to keep disabled, so that you could configure your Mikrotik from a PC connected to the bridge where public IPs are used, you can assign ether2 to ether5 to bridge public-ip-bridge.
If you’ve used the /routing rip network add network=0.0.0.0/0 , the “minor consequences” are that the Mikrotik now attempts to run RIP on all your interfaces, i.e. including those looking towards the PCs. If you don’t care, I do neither. If you do, it would require some additional tricks to get rid of that, depending on how much the remote address of the PPPoE connection is changing.
Dear Sindy
i need that all ether word as ether3
and ip of my pppoe change every time i connect and disconnect
also i cant access my real ip outside of my network
Thank you
hope i can get ur reply
Yes, that’s what I’ve warned you about - you first have to think which services (i.e. tcp and udp ports) on these devices you want to make accessible to the world and set up corresponding permissive firewall rules in the Mikrotik. If you don’t want to use the Mikrotik to protect the devices, you may set the rules to permit everything.
Dear
i connect ether3 to my server that have on the wan one of my public ip
and the server manage my network and have kerio firewall on it
like the nvr take ip from server lan and kerio is making port forwarding
so from outside my network when i put the wan server ip with port i can access my nvr
Dear all
I have the same issue and i was able to configure mikrotik and real ip worked like a charm, and thanks to you guys
but i still have one issue, i need to open incoming http and https ports to the pc having the real ip
thank you