@erlinden, the Xbox says that I’m not connected to internet. No IP given. Nothing.
Here’s the result from prompt:
1 2 ms 2 ms 51 ms 192.168.0.1
2 3 ms 3 ms 3 ms 10.5.0.1
3 5 ms 3 ms 3 ms 192.168.3.1
4 5 ms 5 ms 4 ms gateway-myauth.persisinternet.com.br [xx.xx.109.1]
5 8 ms 24 ms 12 ms core06-cus-apu-to-vl-410.persistelecom.com.br [xx.xx.62.254]
6 8 ms 9 ms 23 ms core02-ara-at-re1-407.persisinternet.com.br [xx.xx.56.89]
7 8 ms 5 ms 6 ms acesso-56-85.persisinternet.com.br [xx.xx.56.85]
8 9 ms 7 ms 11 ms core02-ara-at-re1-406.persisinternet.com.br [xx.xx.56.81]
9 11 ms 12 ms 28 ms border02-ldb-dc-vl-536.persistelecom.com.br [xx.xx.63.185]
10 * * * Esgotado o tempo limite do pedido.
11 31 ms 20 ms 21 ms ae24-190g.scr4.gru1.gblx.net [xx.xx.100.1]
12 * * * Esgotado o tempo limite do pedido.
13 126 ms 124 ms 123 ms ae1-300g.ar5.mia1.gblx.net [xx.xx.94.249]
14 * * * Esgotado o tempo limite do pedido.
15 245 ms 246 ms 245 ms ae-125-3515.bar1.helsinki1.level3.net [xx.xx.203.26]
16 724 ms 402 ms * xx.xx.123.22
17 407 ms 371 ms 397 ms xx.xx.223.130
18 * * * Esgotado o tempo limite do pedido.
19 * * * Esgotado o tempo limite do pedido.
20 * * * Esgotado o tempo limite do pedido.
21 385 ms 371 ms 370 ms xx.xx.147.205
** insert the “xx” ok
@sob I know what is a public/private IP, I don’t know HOW to see that on mikrotik, sorry.
On IP/addresses I got:
ether 1 192.168.1.100/24 and 192.168.1.0
ether 2 192.168.2.100/24 and 192.168.2.0
ether 3 192.168.4.100/24 and 192.168.4.0
ether 4 192.168.3.101/24 and 192.168.3.0
Sorry, I sometimes put some topics aside, to have a better look when I have more time, but sometimes it happens that they get lost among other browser tabs.
I see two possible problems:
Too many NATs. You have at least three and no easy way to get rid of them. With some luck, the one at ISP may be NAT 1:1 (less bad), but it’s not guaranteed. You could get rid of one from where TP-Link is, but it may not be possible with TP-Link and PPPoE, because it’s simple home router and they usually have only few predefined modes and no advanced config is possible. Before you start playing with that, try to connect your gaming device directly to RB. Add another subnet to free port, enable DHCP server on it, connect the device there and test if works better.
PCC (load balancing). I don’t know how much these devices try to punch holes through NAT and make direct connections, but it they do, PCC can be a problem, because connections to different devices can use different uplinks. So start with this, because it’s easy to test. Add new rule:
where 10.5.0.X is your TP-Link’s WAN address, and move it before existing rules. It will make all connections from your network use only single uplink. And see if it helps.
One thing to consider has anyone on the forums actually stated they have a working LIVE XBOX or NINTENDO with MIKROTIK??? By that I mean interactive gaming. I use NINTENDO myself for games and there is another user of XBOX in the house. That person can also play games. These are purchased games with no live interaction - playing against others.
I have never tried interactive gaming with my NINTENDO but the XBOX user couldn’t get it to work when attempted. I tried separate VLANS and many other tricks and never got his XBOX to work in live gaming scenario. So unless someone here can prove they have successfully implemented XBOX or NINTENDO connectivity for interactive gaming, the OP may have a point which has nothing to do with TP link etc… but points to some NAT peculiarity with MT products… nothing surprises me anymore!
VLANs by themselves won’t help you, the problem is incoming traffic and NAT. In ideal world, each device would have own public address and they would be able to connect to each other directly. But there are not enough public IPv4 addresses for everyone, you need to hide multiple devices behind one common address, that’s what NAT does. But it ruins incoming connections, because each internal device is no longer directly addressable.
There are some ways how to get around that (search for “NAT punching”), but those are all hacks with no guarantees. The only reliable way is port forwarding, where ports are really open for anyone. I don’t know if any of those gaming devices support some kind of static config, I’d expect that most people would be too lazy to configure it. So your best chance is working UPnP where devices can open ports automatically. But for that to work, you need public address directly on your router, i.e. only one NAT. If you have double, triple, …, you’d need some UPnP proxy on each router, but it’s definitely not common thing.
Then there’s IPv6 with enough public addresses for everyone, it should be the best solution. But for some reason people seem to put much more effort into NAT traversal (which is dead end), instead of adopting real solution.
Can you post your settings for xbox as I cannot get my guest to play games against others over the internet
Also can you list which games specifically work?
Have nothing special in my FW rules that has not been mentioned / discussed here ad nauseam, but must come with a warning, I make use of UPnP.
My son has not yet had any issues with any of his games, i.e. Minecraft, Battle Field 4, Call of Duty, etc
So upnp is enabled on the router?? (wondering as you have no special fw rules for it)
Can you post your UPNP settings… there seems to be interfaces and type that are configurable.
Assuming on first page you select enabled vice show dummy rule
(how do you narrow it down and what is minimum required).
Not at laptop now, but the interfaces are just which is internal and which is external, i.e. In my case, PPPoE interface is external and bridge is internal
UPnP will dynamically create the relevant NAT rules, hence the warning, internal devices can open network access to the outside world
@RodrigoBrito: I’m affraid there’s no easy solution for you. It’s probably the “too many NATs” problem. For best chance for success, you’d have to change a lot. You’d need to convince ISP to deliver public addresses directly to your main router. Then you’d probably have to get rid of TP-Links and replace them by something else, because I doubt that you can configure them without NAT while still keeping PPPoE for authentication. Even if that was possible, or if you’d set authentication aside for the moment and configured TP-Links as simple ethernet routers (that could be supported), having user devices in different network would prevent them from using UPnP (which is the best chance to get things working), unless there would be some UPnP proxy on TP-Link (I don’t know how much common is that; RouterOS doesn’t have it). You could probably come up with some other way (instead of PPPoE) how to isolate users’ networks (again not so much likely with TP-Links), make some tunnels to main router and bridge them with users’ networks, so they would be directly connected subnets to main router and devices would be able to use UPnP and everything should work. Only it would be security disaster, because there’s no access control in MikroTik’s UPnP server (*), so anyone would be able to open ports to anyone else’s devices.
(*) Before @anav asks, it’s not problem if you have only your own LAN with trusted devices.
I have a old game, Age Of Mythology. I used to play this game with LAN in my collage days, but unfortunately this is not working. if anyone can help me please reply.
