RBUE Feature of Nokia 5g compatibility with Mikrotik
HI,
Could you elaborate more on configuration? Getting the most out of this forum
What is conffigured on Mikrotik?
Interface eth 1 has the IP 2.2.2.1/29 and acts as the gateway for host which has IP 2.2.2.2. Then there is WAN IP i.e of sim card 1.1.1.1. Other then this , we have APN credentials configured. It picks default route to reach Data Center servers , lets say 10.0.0.1. What we are finally testing is RDP from 10.0.0.1 to 2.2.2.2
Still do not understand, especially if you use public addresses 1.1.1.1 as examples. Forgive the old man 
Do these addresses really are public, which ones ar local?
What model of mikrotik do you use? Does it have LTE interface? Where are APN credentials configured.
Where the RDP NAT from "the world" to LAN side is defined?
Hahah...MY bad, IP addresses I used are not real ones. I just used for example. We have private IP addresses. In APN credentials we used CHAP, then username and password. Mikrotik model is Ltap LR8 LTE6kit with 5g modem from SIMCOM. It has LTE interface which has SIM card IP address. From the DC , there are static routes toward 5g infrastructure and then routed towards CPE(Mikrotik) from 5g . We are not using NAting. we are trying to use pure routing of subnets to reach them. Hope it explains and sorry for the confusion
Did you confirm with the provider or test on another environment that this indeed can work?
It would not surprise me when only outgoing connections are allowed, and all incoming connections are (at least by default) blocked by a firewall at the provider.
Its the private 5g. As I mentioned - It works, as soon as i change the CPE from other vendor
Ok I replied to an earlier message. Please post the /export from your config as already asked above.
It could be a firewall setting.
There is no rule in FW setting of Mikrotik, Its all open. And also when i do ''tnc x.x.x.x -p 3389 on powershell from laptop to dc server or vice versa'' that gives me a successful result . When i will do the real RDP or SSH, it will fail. In wireshark on laptop i see return handshake does not happen from laptop to mikrotik. However, if i now change Mikrotik to other brand CPE, it immediately starts working. Have tried with several mikrotiks to eliminate the possibility of one mikrotik hw issue. I think its beyond configuration issue
So what mikrotik is for as it seems that it is used as a simple switch.
Please remeber that "typical consumer" devices are mostly preconfigured for some "typical" services to be forwarded.
Do not know what type of CPE you use, what is the configuration, how "tnc" command works in your netwerk = where packets go ...
Just draw a diagram of a netwoprk / share config of MIkrotik.
It's hard and will take a long time to find a solution if you answer half words.
It's like:
- Doctor, I'm ill.
- What is the problem?
- I have a cough.
- How often do you cough?
- Quite often
- Twice a day?
- Yes
- Twice an hour?
- Yes
- Twice a minute?
- Yes
- Is it "deep" or "light" one?
- Quite "deep"
- How "deep"
- Really "deep"
- Dry or wet?
- Quite wet
.....
vs:
- Doctor, I'm ill. I have a cough. I have been coughing every minute spitting out "something wet" for 2 days.
- I will send you immediately to the hospital for additional test.
Done
I guess I'm not sure what "5G" (e.g. 3GPP spec) feature OP is talking about that does route distribution. For a private APN, typically the carrier has some IPSec(+BGP) tunnel to some core router on your network, and carrier transports traffic from CPE to your network.
But CPEs (e.g. a MikroTik router) that connect to carrier using private APN will still just get a default gateway for IPv4, and for IPv6 it supports standard IPv6 route discovery just like normal - since a "private" APN is not special to CPE, it's just an APN that when connected uses information provided by LTE/5G network. If you're talking about a private LTE/5G network, like CBRS in US, it's still same story, except without IPSec tunnel since it's presumed you're providing the network to the EPC/small cells. Client gets a default gateway for IPv4, and routing happens past that.
To @BartoszP point, Googling "RBUE" does not turn up some feature that should be in LTE modems so it's very unclear as to topology. So some clarity on your setup is needed.
For example, it loosely appears it connecting but since local subnet works, but different subnets don't, the MikroTik may not be getting a default gateway. If you know your default gateway at the other end of the APN, you can try manually adding a static route for 0.0.0.0 on MikroTik to the far-end/DC router with the network that APN is connecting. But this is just guessing... more specifics lead to better advice.
It think OP for RBUE means Routing Behind User Equipment, which is somewhere used term for Framed Routing as part of 3GPP TS. Not sure why is Nokia mentioned, maybe they first proposed that spec…
Some ref. about it: https://futuredon.medium.com/5g-frame-routing-6e34d8587123
Mentioned also on this forum https://forum.mikrotik.com/t/framed-route-on-chateau-5g/165749.
Necroposting that do not add nothing. Really nothing.