PPPoE adsl problem

RouterOS General
1

Hi, I have one very strange problem with mtik:

When I use another mikrotik as default gateway, everything works fine. All clients in LAN can access internet and no problems there.

But, now I have to use KASDA Adsl modem for accessing Internet. I have set up pppoe client connection, and mikrotik connects fine to ISP, adds default route and DNS servers.

And yes, I removed old default route, and did MASQUERADING on my pppoe interface, and have set up MRU and MTU correctly.

/ ip firewall nat
add chain=srcnat out-interface=net protocol=tcp action=masquerade comment=“” disabled=no

So, masquerading is there, pppoe connection is up & running, but anyway, I can ping google.com ONLY FROM mikrotik. All other clients can’t access internet, they can reach only mikrotik. It seems like Mikrotik doesn’t forward any traffic from pppoe interface to ethernet interface.

All firewall rules are empty, nothing there. So, am I missing something obvius?

2

well ping is ICMP, you’re only masqing for TCP.

try:

/ ip firewall nat
add chain=srcnat out-interface=net action=masquerade

If that doesn’t work, drop the out-interface as well.

3

Tried to do both, but still nothing :frowning:

I also tried to add mangle rule:

/ ip firewall mangle
add chain=forward out-interface=internet protocol=tcp tcp-flags=syn action=change-mss new-mss=clamp-to-pmtu comment=“”
disabled=no

, but still doesn’t work. Strange thing is that ping FROM mikrotik to internet is excellent, and connection is stable. But still nothing gets forwarded to ethernet interface :frowning:

4

It really smells like a NAT problem. Savage’s rule should have worked:
/ ip firewall nat
add chain=srcnat out-interface=net action=masquerade

Now that is assuming that the “net” interface is truly the public interface on the router. Anyway, I’m actually using an ADSL connection right now with that NAT rule and the RB532 board actually doing the PPoE connection.


Eric

5

As I wrote in my first post. I already did masquerading on pppoe interface:

/ ip firewall nat
add chain=srcnat out-interface=internet action=masquerade comment=“” disabled=no

Doesn’t work neither with enabled or disabled rule