Multiple Mikrotik devices, routing problems (edited)?

RouterOS Forwarding Protocols
1

I'm having a few problems with connecting 2 mikrotik devices (it will be 3) to the internet.
I'm testing my config with GNS3 while the devices don't arrive until next week. Maybe this a GNS3 problem, or I'll have issues to config this next week....

I'm adding a picture to explain. GW and DC2 are Mikrotik devices.

GW is the gateway, connecting to 2 diferent ISP's with 2 default gateways with different distances. Networks 192.168.1.0/24 and 192.168.2.0/24.

This is the config that I have:
[admin@GW] > ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit

DST-ADDRESS PREF-SRC GATEWAY DISTANCE

0 A S 0.0.0.0/0 192.168.1.254 1
1 S 0.0.0.0/0 192.168.2.254 10
2 ADC 192.168.1.0/24 192.168.1.1 ether1 0
3 ADC 192.168.2.0/24 192.168.2.1 ether2 0
4 ADC 192.168.6.0/24 192.168.6.254 BridgeLAN 0

[admin@GW] > ip address print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK INTERFACE

0 192.168.2.1/24 192.168.2.0 ether2
1 192.168.1.1/24 192.168.1.0 ether1
2 192.168.6.254/24 192.168.6.0 BridgeLAN

[admin@GW] > routing ospf route print

DST-ADDRESS STATE COST GATEWAY INTERFACE

0 0.0.0.0/0 imported-ext-1 1
1 192.168.1.0/24 intra-area 10 0.0.0.0 ether1
2 192.168.2.0/24 intra-area 10 0.0.0.0 ether2
3 192.168.6.0/24 intra-area 10 0.0.0.0 BridgeLAN
[admin@DC2] > ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit

DST-ADDRESS PREF-SRC GATEWAY DISTANCE

0 ADo 0.0.0.0/0 192.168.6.254 110
1 ADo 192.168.1.0/24 192.168.6.254 110
2 ADo 192.168.2.0/24 192.168.6.254 110
3 ADC 192.168.6.0/24 192.168.6.253 Bridge-DC2-GW 0
[admin@DC2] > ip address print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK INTERFACE

0 192.168.6.253/24 192.168.6.0 Bridge-DC2-GW
[admin@DC2] > routing ospf route print

DST-ADDRESS STATE COST GATEWAY INTERFACE

0 0.0.0.0/0 ext-1 11 192.168.6.254 Bridge-DC2-GW
1 192.168.1.0/24 intra-area 20 192.168.6.254 Bridge-DC2-GW
2 192.168.2.0/24 intra-area 20 192.168.6.254 Bridge-DC2-GW
3 192.168.6.0/24 intra-area 10 0.0.0.0 Bridge-DC2-GW
GW works without problems.
DC2 is able to ping the outter address of GW (192.168.1.1 and 192.168.2.1) connected to the ISP's. but it fails to reach the ISP 192.168.1.254 or 8.8.8.8 for example....

I've tryed to setup OSPF in order to make DC2 to be able to connect to the internet without sucess, but it seams OSPF is working because I can see the GW routes on DC2.

I think because DC it's because DC uses the same network has GW, and the DC2 Bridge address is onthe same network has GW, 192.168.6.254 (GW) and 192.168.6.253 (DC2).

Any advice to fix this?

Untitled.png
Untitled.png800×663 59.5 KB

2

What traceroute says you?

3

Well sometimes the explantion is the simpliest thing...

On DC2,no pings or traceroute:
[admin@DC2] > tool traceroute 8.8.8.8

ADDRESS LOSS SENT LAST AVG BEST WORST STD-DEV STATUS

1 192.168.6.254 0% 11 1.5ms 2.4 0.6 9.3 2.3
2 100% 11 timeout
3 100% 11 timeout
4 100% 11 timeout
5 100% 11 timeout
6 100% 10 timeout

[admin@DC2] > ping 8.8.8.8
SEQ HOST SIZE TTL TIME STATUS
0 8.8.8.8 timeout
1 8.8.8.8 timeout
sent=2 received=0 packet-loss=100%
Something was missing... So I remember to try to match with the info on GW. And then I remember that I've clear the config on GW and remember to check nat rules, and were empty...
A simple on GW:
[admin@GW] > /ip firewall nat
[admin@GW] /ip firewall nat> add action=masquerade chain=srcnat
[admin@GW] > ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade
Now on DC2 everything works correctly :slight_smile:[admin@DC2] > tool traceroute 8.8.8.8

ADDRESS LOSS SENT LAST AVG BEST WORST STD-DEV STATUS

1 192.168.6.254 0% 1 0.7ms 0.7 0.7 0.7 0
2 192.168.1.254 0% 1 13.1ms 13.1 13.1 13.1 0
3 192.168.18.2 0% 1 1.7ms 1.7 1.7 1.7 0
4 100% 1 timeout
5 100% 1 timeout
6 0% 1 0ms

[admin@DC2] > ping 8.8.8.8
SEQ HOST SIZE TTL TIME STATUS
0 8.8.8.8 56 126 38ms
1 8.8.8.8 56 126 40ms
2 8.8.8.8 56 126 39ms
sent=3 received=3 packet-loss=0% min-rtt=38ms avg-rtt=39ms max-rtt=40ms

4

Congratulations! =)