We can see the public IP on the lte device interface and when connecting the device to a laptop we can ping the public IP and ipconfig shows the laptop has the recognised public IP as its address.
However, when we connect the device to a Cisco router, configured ip address dhcp, the router is given 192.168.88.254.
If we put the SIM in a different lte device example Cradelpoint and again connect to the router, the router interface shows the public IP, we can ping and establish a VPN connection.
Is there something different about attaching the MikroTik device to a Cisco router. We have also added the Cisco router interface MAC to the APN profile as the passthrough MAC but that did not alter the fact the router is given 192.168.88.254
first, disable dhcp-server at the same interface who will be using passthrough feature (who is the dhcp-server itself)!
You can use vlans to separate mgmt and passthrough .
Thanks and apologies for the long wait for my response.
What we now see is somewhat confusing.
We have the antenna connected to a Cisco 4321 router interface Gi0/0/0 and we can ping externally to the public IP on the LTE interface, BUT, when we look on the router with a sho ip int bri, we see the 192.168.88.253 address on Gi0/0/0. What we expected to see there thanks to Passthrough is the public IP address.
So does passthrough use NAT on these devcies to hide the public IP from the inside device?
If it did, it wouldn’t be a passthrough. Post the config of the Mikrotik. The modem has no reason to assign an address from 192.168.88.0/24, it must be the Mikrotik itself what is doing it.
The whole trick is that you set the passthrough interface to, say, ether1, and detach any IP configuration and DHCP server of the Mikrotik itself from that interface. This may actually mean to cancel the membership of ether1 in a bridge - there are many configurations you may start from, so show your current one so that we could fix it, rather than listing all possible things which might have gone wrong.
In order to provide any configuratiin data, this will mean resetting the device and starting the configuration process from scratch.
We have to do this everytime we want to try something new or different on the device config.
Not true.
Even if you enable passthrugh and not disable dhcp server then still with direct connection you can connect to RB via Mac layer.
If RouterBoard what you use is SXTR then you can use one port to mgmt and second for passthrough feature. M33G have more ethernet. With other’s with 1 Ethernet port you should use vlan 802.1q.
and telling me something is #Not True’ when we can see clearly that we we say is true is neither helpful nor productive for MikroTik, when resolution of this problem determines whether we place an order for 150 such devices or find another vendor.
If I’ve got @SiB’s suggestion properly, you can use Winbox via MAC address to get to the machine where the R11e-LTE is plugged in without need to reset the machine to defaults. If you cannot use Winbox for whatever reason, use another Mikrotik and mac-telnet from there. If you don’t have another Mikrotik, run a free instance of CHR on some virtualization platform.
haha, fun answer.
Be more serious. As technical person you should run WireShark to have proof of that you say and to verify yourself.
Passthrough feature not disable mac-telnet feature.
What device you use ?
Why you not configure vlan 802.1q to still manage RB when you use passthrough or use that feature at additional vlan to have always mgmt of RB.
As with many other posts online about MikroTik we have now concluded the product is not fit for purpose, We purchased a Cradlepoint device and have that up and running within 30 minurtes.
We are now discussing with our customers either replacing Mikrotik devices or withdrawing support.
This is your option at what vendor you works.
Remember that forum is not a support channel and support should be done first via your Distributor and next by support@mikrotik.com or https://help.mikrotik.com/servicedesk .
At forum we try help everyone as a we can if person give us that possibility.
