PPPoE problems #2

RouterOS Beginner Basics
1

Hi all!

I’ve got some troubles with the PPPoE too.
Today, a new ISP has been connected to the flat, so it was time to make my RB450G take the task of distribute the net to 3 PC-s.

My problem is, when connected directly to a PC, the internet works. When connected to the RB450G, connections is established, I can ping WAN side ip-s (8.8.8.8 for example), but only from within winbox. It seems to be, LAN side can’t access the WAN / PPPoE at all, so for me it seems like a route problem. But dynamic routes are active when pppoe active too.

Also, I’ve found some topic with this issue, but my problem still exits.
Here is some output. I hope, you can help me.

(In a topic, somebody said this firewall rules will help. Didn’t worked.)

Flags: X - disabled, I - invalid, D - dynamic 
 0   ;;; Accept established connections
     chain=input action=accept connection-state=established 
 1   ;;; Accept releated connections
     chain=input action=accept connection-state=related 
 2   ;;; Drop invalid connections
     chain=input action=drop connection-state=invalid 
 3   ;;; UDP
     chain=input action=accept protocol=udp 
 4   ;;; TCP
     chain=input action=accept protocol=tcp 
 5   ;;; Allow limited pings
     chain=input action=accept protocol=icmp limit=50/5s,2 
 6   ;;; Drop excess pings
     chain=input action=drop protocol=icmp 
 7   ;;; Accept from LAN
     chain=input action=accept src-address=192.168.1.0/24 in-interface=LAN1 
 8 X ;;; Log everything else
     chain=input action=log log-prefix="DROP INPUT" 
 9 X ;;; Drop everything else
     chain=input action=drop




[admin@RB450G] /interface> ethernet print detail 
Flags: X - disabled, R - running, S - slave 
 0 R  name="WAN" mtu=1500 l2mtu=1526 mac-address=00:0C:42:52:AE:7D arp=enabled auto-negotiation=yes full-duplex=yes 
      speed=100Mbps 

 1 R  name="LAN1" mtu=1500 l2mtu=1524 mac-address=00:0C:42:52:AE:7E arp=proxy-arp auto-negotiation=yes full-duplex=yes 
      speed=100Mbps master-port=none bandwidth=unlimited/unlimited switch=switch1 

 2  S name="LAN2" mtu=1500 l2mtu=1524 mac-address=00:0C:42:52:AE:7F arp=enabled auto-negotiation=yes full-duplex=yes 
      speed=100Mbps master-port=LAN1 bandwidth=unlimited/unlimited switch=switch1 

 3  S name="LAN3" mtu=1500 l2mtu=1524 mac-address=00:0C:42:52:AE:80 arp=enabled auto-negotiation=yes full-duplex=yes 
      speed=100Mbps master-port=LAN1 bandwidth=unlimited/unlimited switch=switch1 

 4  S name="LAN4" mtu=1500 l2mtu=1524 mac-address=00:0C:42:52:AE:81 arp=enabled auto-negotiation=yes full-duplex=yes 
      speed=100Mbps master-port=LAN1 bandwidth=unlimited/unlimited switch=switch1




[admin@RB450G] /interface> pppoe-client monitor      
numbers: DIGI           
        status: connected
        uptime: 16s
     idle-time: 16s
  active-links: 1
  service-name: 
       ac-name: ar01.xviii
        ac-mac: 00:18:82:01:15:2D
           mtu: 1492
           mru: 1492




[admin@RB450G] /ip> dhcp-server print detail 
Flags: X - disabled, I - invalid 
 0   name="DHCP-server" interface=LAN1 lease-time=3d address-pool=ip-pool bootp-support=static 
     authoritative=after-2sec-delay always-broadcast=yes




[admin@RB450G] /ip> route print detail 
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, 
B - blackhole, U - unreachable, P - prohibit 
 0 ADS  dst-address=0.0.0.0/0 gateway=188.143.56.1 gateway-status=188.143.56.1 reachable DIGI distance=1 scope=30 
        target-scope=10 

 1 ADC  dst-address=188.143.56.1/32 pref-src=188.143.58.35 gateway=DIGI gateway-status=DIGI reachable distance=0 scope=10 

 2 ADC  dst-address=192.168.1.0/24 pref-src=192.168.1.2 gateway=LAN1 gateway-status=LAN1 reachable distance=0 scope=10




[admin@RB450G] > ip firewall nat print detail 
Flags: X - disabled, I - invalid, D - dynamic 
 0 X chain=dstnat action=accept in-interface=DIGI 

 1 X chain=srcnat action=accept out-interface=LAN1 

 2   chain=srcnat action=masquerade src-address=192.168.1.0/24 out-interface=LAN1
2

Change the out-interface in NAT rule 2 (the enabled source NAT rule) to DIGI instead of LAN1.

3

Thank you for the reply!

In the meanwhile, I’ve managed to solve the problem.
Yes, what you mentioned was one of the mistakes. Another one, that I’ve changed the LAN1 address from 192.168.1.3 to 192.168.1.2, but I forgot to change within dhcp server the gateway.

Lame mistake, I know :laughing: