Hi all,
I’ve got a CCR2004-16G-2S with RouterOS v7.8.
When I configure an IP address 192.168.10.1/24 on port Ether4 and an address 192.168.77.1/24 on port Ether15 the routing list shows routes for 192.168.10.0/24 (gateway Ether4) and 192.168.77.0/24 (gateway Ether15).
Clients attached to those ports (with ip addresses 192.168.10.2 and 192.168.77.2) can ping the router’s interfaces and the other client.
When I try to ping 192.168.77.1 from Ether4 (that has address 192.18.10.1) the ping fails. Pinging from Ether15 to Ether4 doesn’t work either.
Can anyone explain to me why pings between port addresses don’t work?
PS: to be sure I added accept rules for icmp to the firewall for forward, input and output. The only drop rules are for invalid packages on input or forward, so I don’t see how this could be a firewall problem.
How do you “ping 192.168.77.1 from Ether4”? If you’re setting interface on ping command, then you’re actually overriding egress port (instead of letting router to select it according to routing information it’s got) …
Hi mkx,
I’m using Winbox, Tools/Ping. Yes, I’m specifying the interface. If I don’t specify the interface I get a reply but I assume that’s a ping from the port that has that same address (in my case: a ping to 192.168.10.1 succeeds when I don’t specify an interface but it also succeeds when I specify Ether4 (i.e. the interface that has 192.168.10.1 as an address)).
It seems to me that this means that I cannot verify routing between two ports on the router, is that correct?
Correct. You can only verify routing with external source and destination, you can not simulate traffic between two routed ports internally within ROS device.