Remove router behind Mikrotik

RouterOS Beginner Basics
1

Hello,
I need some help to remove the router which is behind my Mikrotik router. I’m getting the internet by a guy in my village. He configured the router that in the first ethernet interface is the wifi antenna connected. The wifi antenna works like a simple bridge. The the rest of the ethernet interfaces are connected to an virtual “wan_pppoe” interface. Because of this, I had to place a second router (FritzBox) in the second ethernet interface. The FritzBox router works like a simple IP client. It uses the client configuration which I got by the guy in my village. I configured a DHCP server in the FritzBox router to use that router for my home network.

Now, I want to remove the FritzBox router and use the Mikrotik as the main router but I have problems in configuration of this router. I’m a software developer and I didn’t work with a professional router like this yet.

In Mikrotik I have several interfaces:

  • eth1 till eth5
  • wan_pppoe
  • pppoe-out2
  • local

And they are connected together like this:
eth2 / FritzBox router → wan_pppoe → pppoe-out2 → local / eth1 (wifi antenna in bridge mode)

FritzBox router configuration
IP: 157.25.129.62
Gateway: 157.25.129.57
Subnetmask: 255.255.0.0
DNS: 8.8.8.8 and 8.8.4.4

I already tried to assign the 157.xxx.129.62 ip address of the FritzBox to the wan_pppoe interface. Then, I put the gateway in “Routes” for 0.0.0.0/0. DNS servers are also set. In NAT I used “srcnat” as a chain and “masquerade” as action for the wan_pppoe interface (out). Now, then I try to send a ping out of the wan_pppoe interface, I don’t get an answer. I can ping the gateway, only.
I assume that I forget something simple. It would be great if someone could let me know in few steps what I have to configure to get a ping out of the wan_pppoe interface. The rest, the configuration of the DHCP server and to connect the eth2 - eth5 interfaces together as a switch, shouldn’t be a problem for me.

I played back the backup to the Mikrotik with the original configuration of the guy in my village and made a screenshot of it. For the help, the next beer will be payed by me! :slight_smile:
Thank you.
Best regards
mikrotik.PNG

2

Maybe it’s just me, but I’m a little lost in your description. Instead of screenshot, select New Terminal on left, run “/export hide-sensitive”, post the output and you may have better luck with that.

3

Thank you for your answer.
Here is the export with the hide-sensitive option:

/export hide-sensitive
# jan/02/1970 06:28:59 by RouterOS 6.29.1
# software id = VY65-FL6A
#
/interface bridge
add arp=proxy-arp name=local
add name=wan_pppoe
/interface wireless
set [ find default-name=wlan1 ] l2mtu=2290 mode=ap-bridge ssid=IT-Multimedia
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ppp profile
set [ find name=default ] bridge=local name=default
add bridge=wan_pppoe change-tcp-mss=yes name=dsl_profile
set [ find name=default-encryption ] bridge=local name=default-encryption
/interface pppoe-client
add add-default-route=yes disabled=no interface=local max-mru=1480 max-mtu=1480 \
    mrru=1600 name=pppoe-out2 profile=dsl_profile service-name=dsl_pppoe user=\
    ppp2
/interface bridge port
add bridge=local interface=ether1
add bridge=wan_pppoe interface=ether2
add bridge=wan_pppoe interface=ether3
add bridge=wan_pppoe interface=ether4
add bridge=wan_pppoe interface=ether5
/interface bridge settings
set use-ip-firewall=yes
/ip address
add address=192.168.50.20/24 comment="added by setup" interface=local network=\
    192.168.50.0
/ip dhcp-server network
add address=192.168.0.0/24 dns-server=8.8.8.8 gateway=192.168.0.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip route
add comment="added by setup" distance=1 gateway=192.168.2.1
add comment="added by setup" distance=1 gateway=192.168.50.1
/system clock
set time-zone-name=Europe/Warsaw
/system identity
set name=customer
/system leds
set 0 interface=wlan1
/system routerboard settings
set protected-routerboot=disabled
/tool romon port
add disabled=no
4

Try this:

  1. Add 157.25.129.62/16 to wan_pppoe. The mask looks wrong to me, but lets believe it’s correct. Worst case, it will block your access to 157.25.x.x.
  2. Remove (or disable for start) current routes from /ip route
  3. Try if these get you somewhere:
/ping address=8.8.8.8 src-address=157.25.129.62
/tool traceroute address=8.8.8.8 src-address=157.25.129.62