Hello to all,
I am stack over a strange problem.
I have a mikrotik routerboard 500 series that takes INTERNET from eth1 and distributes it to eth2 on a switch.
On the switch there are several access points coneected.
Everything works great and users login to the user manager, they have internet…etc.
When I am logged in on the network from my pc I ping all the routers. I can also manage them.
When I login to the web interface of mikrotik and try to ping from the eth2 the routers…all the packets are lost.
Only eth1 can ping the main modem witch provides INTERNET.
Can anyone explain this to me? Thank you.
maybe firewall is dropping ICMP protocol packets.
How can I figure that out?
Run /export … post the output here. Inside of ROS tags (click on select syntax in the post a reply menu)
OK, thank you here is the output
export # jan/03/2014 20:57:43 by RouterOS 6.5 # software id = PGUP-8RVA # /ip pool add name=dhcp_pool1 ranges=192.168.88.20-192.168.88.254 /ip dhcp-server add address-pool=dhcp_pool1 disabled=no interface=ether2 lease-time=1d name=\ dhcp1 /ip hotspot interface=ether2 keepalive-timeout=1m name=server1ed=no idle-timeout=2m \ /ip hotspot user profile set [ find default=yes ] address-pool=dhcp_pool1 idle-timeout=none \ keepalive-timeout=2m mac-cookie-timeout=3d add address-pool=dhcp_pool1 idle-timeout=none keepalive-timeout=2m \ mac-cookie-timeout=1d name=trialuser rate-limit=128K/1M \ transparent-proxy=yes /ip hotspot profile set [ find default=yes ] hotspot-address=192.168.88.1 http-cookie-lifetime=6d \ login-by=cookie,http-chap,trial,mac-cookie nas-port-type=ethernet \ trial-user-profile=trialuser use-radius=yes /port set 0 name=serial0 /tool user-manager customer add backup-allowed=yes disabled=no login=admin password=******* \ paypal-accept-pending=no paypal-allowed=no paypal-secure-response=no \ permissions=owner signup-allowed=no time-zone=-00:00 add backup-allowed=no disabled=no login=LYKOS parent=admin password=123456Aa \ paypal-accept-pending=no paypal-allowed=no paypal-secure-response=no \ permissions=read-write signup-allowed=no time-zone=+02:00 add backup-allowed=no disabled=no login=Ktistakis_E parent=admin password=\ 123456Aa paypal-accept-pending=no paypal-allowed=no \ paypal-secure-response=no permissions=read-only signup-allowed=no \ time-zone=-00:00 /tool user-manager profile add name=10HoursProfile name-for-users=user10h override-shared-users=1 owner=\ admin price=0 starts-at=logon validity=4w /tool user-manager profile limitation add address-list=“” download-limit=0B group-name=“” ip-pool=“” name=\ normalLimit rate-limit-burst-rx=163840B rate-limit-burst-time-rx=16s \ rate-limit-burst-time-tx=16s rate-limit-burst-treshold-rx=65536B \ rate-limit-burst-treshold-tx=393216B rate-limit-burst-tx=2097152B \ rate-limit-min-rx=65536B rate-limit-min-tx=393216B rate-limit-rx=131072B \ rate-limit-tx=1548288B transfer-limit=0B upload-limit=0B uptime-limit=10h /ip address add address=192.168.88.1/24 interface=ether2 network=192.168.88.0 /ip dhcp-client add default-route-distance=0 dhcp-options=hostname,clientid disabled=no \ interface=ether1 /ip dhcp-server network add address=192.168.88.0/24 gateway=192.168.88.1 /ip dns set allow-remote-requests=yes /ip dns static add address=192.168.88.1 name=router add address=8.8.8.8 name=google1 add address=8.8.4.4 name=google2 /ip firewall filter add action=passthrough chain=unused-hs-chain comment=\ “place hotspot rules here” disabled=yes /ip firewall nat add action=passthrough chain=unused-hs-chain comment=\ “place hotspot rules here” disabled=yes add action=src-nat chain=srcnat src-address=192.168.88.0/24 to-addresses=\ 192.168.1.2 add action=dst-nat chain=dstnat dst-address=192.168.1.2 to-addresses=\ 192.168.88.0/24 /ip hotspot ip-binding add address=192.168.88.6 mac-address=00:15:6D:FB:D6:B7 add address=192.168.88.7 mac-address=00:15:6D:F0:1F:22 add address=192.168.88.2 mac-address=A0:F3:C1:E5:E1:82 add address=192.168.88.3 mac-address=00:1D:7E:A0:B3:CF /ip hotspot user add name=test password=##22678# /ip service set www port=81 /ppp aaa set use-radius=yes /radius add address=127.0.0.1 secret=****** service=ppp,hotspot timeout=2s /system clock set time-zone-name=Europe/Athens /system ntp client set enabled=yes primary-ntp=79.107.99.220 secondary-ntp=88.198.230.201 /system ntp server set enabled=yes multicast=yes /system routerboard settings set cpu-frequency=264MHz /system watchdog set automatic-supout=no /tool e-mail set from=“” last-status=failed /tool user-manager profile profile-limitation add from-time=0s limitation=normalLimit profile=10HoursProfile till-time=\ 23h59m59s weekdays=\ sunday,monday,tuesday,wednesday,thursday,friday,saturday /tool user-manager router add coa-port=1700 customer=admin disabled=no ip-address=127.0.0.1 log=\ auth-ok,auth-fail,acct-ok,acct-fail name=radiusrouter shared-secret=\ ****** use-coa=no /tool user-manager user …
Your missing a some… and you have no new-lines… what happened to it.
-Eric
Missing the users part of usermanager and the lines is because i got the results from webfig!
http://forum.mikrotik.com/t/how-do-i-enable-unauthenticated-users-to-ping-the-gateway/10726/1
Here is the answer.
Thank you for your help.