Router doesn't route :(

RouterOS Beginner Basics
1

Haai,
How CAN i route traffic through my mikrotik, i spend the day getting it to work, but was unsuc6full.

I got myself the mikrotik for vmware, installed it
Kan ping to the inside LAN, can (could) ping to the outside world
Buildup a GRE tunnel, Tunnel is up and running cause i CAN ping the other side og the tunnel.

I don't have to do NAT cause i got myself an extra /29 which is on the LAN side
can anybody help me and tell what i'm doing wrong here???

[rotor@MikroTik] /ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit

DST-ADDRESS PREF-SRC GATEWAY DISTANCE

0 A S 0.0.0.0/0 ExtraIP 1
1 A S 90.148.192.10/32 109.127.106.57 1
2 ADC 109.127.106.56/29 109.127.106.60 ether3 0
3 ADC 135.40.93.216/29 135.40.93.217 ether2 0
4 ADC 192.168.146.0/22 192.168.146.244 ether1 0




[rotor@MikroTik] /ip route> export

mar/30/2017 17:22:53 by RouterOS 6.38.5

software id =

/ip route
add distance=1 gateway=ExtraIP
add distance=1 dst-address=90.148.192.10/32 gateway=109.127.106.57


[rotor@MikroTik] /interface> print
Flags: D - dynamic, X - disabled, R - running, S - slave

NAME TYPE ACTUAL-MTU L2MTU

0 R ether1 ether 1500
1 R ether2 ether 1500
2 R ether3 ether 1500
3 R ether4 ether 1500
4 R ether5 ether 1500
5 R ether6 ether 1500
6 R NiceIP gre-tunnel 1476 65535

[rotor@MikroTik] /interface> export

mar/30/2017 17:26:55 by RouterOS 6.38.5

software id =

/interface gre
add !keepalive local-address=109.127.106.60 name=NiceIP remote-address=
90.148.192.10

[rotor@MikroTik] > ping 37.148.192.10
SEQ HOST SIZE TTL TIME STATUS
0 90.148.192.10 56 57 7ms
1 90.148.192.10 56 57 7ms
2 90.148.192.10 56 57 7ms
3 90.148.192.10 56 57 7ms
sent=4 received=4 packet-loss=0% min-rtt=7ms avg-rtt=7ms max-rtt=7ms

[rotor@MikroTik] > ping 8.8.8.8
SEQ HOST SIZE TTL TIME STATUS
0 8.8.8.8 timeout
1 8.8.8.8 timeout
2 8.8.8.8 timeout
3 8.8.8.8 timeout
sent=4 received=0 packet-loss=100%

[rotor@MikroTik] >

Kind Regards
Rotor

new install CHR and/or RtrOS
2

Did you apply any IP addresses to the GRE tunnel?

/ip address add interface=NiceIP address=x.x.x.x/30

You can then point a route for the far network to use a gateway of x.x.x.y/30 where y is the other end of the GRE of tunnel using the remaining IP in the /30.

Side-note. Do you have a copy paste error in your test ping? You are pinging 37.148.192.10 and the reply is coming from 90.148.192.10. Was the ping statement meant to read: ping 90.148.192.10?

3

whoeps about the ping, from a security point of view i changed digit’s in the octed of the ipadresses…

do you mean i have the give the inside of the gre tunnel the ipadress of the extra /29 subnet i want to use for my servers ??

2 ADC 109.127.106.56/29 109.127.106.60 ether3 0 this the ipadress of my router which i need to be able to connect the GRE tunnel
3 ADC 135.40.93.216/29 135.40.93.217 ether2 0 this is the /29 i got from my provider
4 ADC 192.168.146.0/22 192.168.146.244 ether1 0 this the RFC subnet i use for my local users (they go to the internet via another gateway which is natted)

Kind Regards
Gerard

4

I’d need to see a topology drawing showing what your desired end state looks like to answer that question best. It may be helpful to watch this short video on GRE tunnels. It shows Cisco routers but GRE works the same on MikroTik.

https://www.youtube.com/watch?v=ZAFl4etjXs4
^^ only 6 minutes

Basically the local and remote address part of the GRE tunnel configuration is to tell it how to form the tunnel. The tunnel needs to be addressed with some kind of addresses (typically a /30 for a point to point tunnel) to be used. You can then use routing, either static or dynamic, to send traffic through to the tunnel to the far side.