can anyone help me please, running a rb750 UP in the configurations as following, with an aircard 790s providing internet through LTE.
I can ping google.com through winbox, but can not ping the router from my computer or vice versa.
any information greatly appreciated
thank you!!
if any further information is required please ask!
[admin@MikroTik] > /ip address print detail
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; defconf
address=192.168.1.20/24 network=192.168.1.0 interface=ether1 actual-interface=bridge3
1 D address=192.168.0.4/24 network=192.168.0.0 interface=lte1 actual-interface=lte1
[admin@MikroTik] > /ip route print detail
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
0 ADS dst-address=0.0.0.0/0 gateway=192.168.0.1 gateway-status=192.168.0.1 reachable via lte1 distance=0 scope=30 target-scope=10 vrf-interface=lte1
1 ADC dst-address=192.168.0.0/24 pref-src=192.168.0.4 gateway=lte1 gateway-status=lte1 reachable distance=0 scope=10
2 ADC dst-address=192.168.1.0/24 pref-src=192.168.1.20 gateway=bridge3 gateway-status=bridge3 reachable distance=0 scope=10
[admin@MikroTik] > /interface print
Flags: D - dynamic, X - disabled, R - running, S - slave
NAME TYPE ACTUAL-MTU L2MTU MAX-L2MTU MAC-ADDRESS
0 S ether1 ether 1500 1600 4076 4C:5E:0C:70:2A:C6
1 RS ether2-master ether 1500 1598 2028 4C:5E:0C:70:2A:C7
2 RS ether3 ether 1500 1598 2028 4C:5E:0C:70:2A:C8
3 S ether4 ether 1500 1598 2028 4C:5E:0C:70:2A:C9
4 S ether5 ether 1500 1598 2028 4C:5E:0C:70:2A:CA
5 R bridge3 bridge 1500 1598 4C:5E:0C:70:2A:C6
6 R lte1 lte 1500 08:BD:43:2F:79:51
[admin@MikroTik] > /ip firewall export
jun/04/2016 21:00:53 by RouterOS 6.35.2
software id = WV30-XA7P
/ip firewall filter
add chain=forward dst-address=0.0.0.0 in-interface=bridge3 out-interface=lte1 src-address=192.168.1.0
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add chain=forward comment="defconf: accept established,related" connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
in/out-interface matcher not possible when interface (ether1) is slave - use master instead (bridge3)
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface=ether1
add chain=input protocol=icmp
add chain=input connection-state=established
add chain=input connection-state=related
add action=drop chain=input in-interface=lte1
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=lte1
/ip firewall service-port
set sip disabled=yes
[admin@MikroTik] > /ip service print
Flags: X - disabled, I - invalid
NAME PORT ADDRESS CERTIFICATE
0 telnet 23
1 ftp 21
2 www 80 192.168.0.1/32
3 ssh 22 191.168.0.1/32
4 XI www-ssl 443 none
5 api 8728
6 winbox 8291
7 api-ssl 8729 none
[admin@MikroTik] >