Hi,
I have an RB750 that I’m trying to set up as a router for one of my public class c networks but can’t seem to get it to work at all. I will paste the entire configuration below but here is what I’m trying to do:
My ether1 interface has the IP address 85.24.231.79/24 and is connected to my ISP:s router (85.24.231.1/24). So far so good. My router is accessible over the internet just fine.
I have configured my ether2 interface with the IP 79.136.0.1/24 (which, off course, is the class c network I’m trying to get online) and set up static routing as such:
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 85.24.231.1 1
1 ADC 79.136.0.0/24 79.136.0.1 ether2 0
2 ADC 85.24.231.0/24 85.24.231.79 ether1 0
I have three firewall rules allowing all traffic on the chains input, output and forward. This is just to see the data/packets on my chains, I realize they are not necessary.
My ISP has routed all traffic to the 79.136.0.0/24 network to my router 85.24.231.79.
Now, I would think that this should work just fine but it does not.
From computers in my 79.136.0.0/24 network I can ping the ether1 as well as ether0 interfaces of my RB750. I cannot, however, ping my gateway/the ISPs router at 85.24.231.1/24 from my 79.136.0.0/24 network or the ether2 interface of my RB750. I can ping it just fine from the ether1 interface though.
I have verified that my ISP doesn’t do anything weird witch VLAN tagging.
Any ideas on what could be wrong here? Or at least steps I can take to further investigate?
If I look at the connections using /ip firewall connection print I see a lot of syn-sent but never any ack:s from or to my 79.136.0.0/24 network.
Flags: S - seen reply, A - assured
PROTOCOL SRC-ADDRESS DST-ADDRESS TCP-STATE TIMEOUT
0 tcp 85.24.231.79:80 213.89.198.159:55410 established 14h25m32s
1 igmp 10.2.20.4 224.0.0.1 9m39s
2 SA tcp 85.24.202.105:56456 85.24.231.79:23 established 23h54m9s
3 tcp 85.24.231.79:80 213.89.198.159:53988 established 23h20m11s
4 SA tcp 85.24.202.105:57351 85.24.231.79:8291 established 4m45s
5 udp 79.136.0.254:137 79.136.0.255:137 0s
6 udp 80.64.50.38:11687 79.136.0.0:33438 2s
7 udp 81.108.6.90:28237 79.136.0.153:34954 2s
8 udp 80.212.147.131:49150 79.136.0.148:49150 3s
9 tcp 79.136.0.254:3920 88.80.16.170:80 syn-sent 2s
10 tcp 79.136.0.254:3921 72.20.32.10:80 syn-sent 1s
11 udp 69.88.193.185:16311 79.136.0.207:40152 4s
12 tcp 79.136.71.172:64162 79.136.0.253:445 syn-sent 1s
13 tcp 79.255.43.17:1770 79.136.0.187:135 syn-sent 1s
14 udp 87.206.202.26:58628 79.136.0.202:46179 9s
15 tcp 79.23.163.171:19054 79.136.0.69:445 syn-sent 5s
Here is my configuration:
nov/25/2009 21:15:07 by RouterOS 4.2
software id = J300-Y4Z6
/ip hotspot profile
set default dns-name=“” hotspot-address=0.0.0.0 html-directory=hotspot
http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap
name=default rate-limit=“” smtp-server=0.0.0.0 split-user-domain=no
use-radius=no
/ip hotspot user profile
set default idle-timeout=none keepalive-timeout=2m name=default shared-users=
1 status-autorefresh=1m transparent-proxy=no
/ip ipsec proposal
set default auth-algorithms=sha1 disabled=no enc-algorithms=3des lifetime=30m
name=default pfs-group=modp1024
/ip pool
add name=bahnhof-pool ranges=79.136.0.240-79.136.0.254
/ip dhcp-server
add address-pool=bahnhof-pool authoritative=after-2sec-delay bootp-support=
static disabled=no interface=ether2 lease-time=3d name=bahnhof-dhcp
/ip accounting
set account-local-traffic=no enabled=no threshold=256
/ip accounting web-access
set accessible-via-web=no address=0.0.0.0/0
/ip address
add address=85.24.231.79/24 broadcast=85.24.231.255 comment=“” disabled=no
interface=ether1 network=85.24.231.0
add address=79.136.0.1/24 broadcast=79.136.0.255 comment=“” disabled=no
interface=ether2 network=79.136.0.0
/ip dhcp-server config
set store-leases-disk=5m
/ip dhcp-server network
add address=79.136.0.0/24 comment=“” dns-server=79.136.0.1 gateway=79.136.0.1
netmask=24
/ip dns
set allow-remote-requests=yes cache-max-ttl=1w cache-size=2048KiB
max-udp-packet-size=512 primary-dns=213.80.98.2 secondary-dns=
213.80.101.3
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s
tcp-close-wait-timeout=10s tcp-established-timeout=1d
tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s
tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no
tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall filter
add action=accept chain=input comment=“” disabled=no
add action=accept chain=output comment=“” disabled=no
add action=accept chain=forward comment=“” disabled=no
add action=drop chain=forward comment=“drop everything else” disabled=no
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no
/ip hotspot service-port
set ftp disabled=no ports=21
/ip neighbor discovery
set ether1 discover=yes
set ether2 discover=yes
set ether3 discover=yes
set ether4 discover=yes
set ether5 discover=yes
/ip proxy
set always-from-cache=no cache-administrator=webmaster cache-hit-dscp=4
cache-on-disk=no enabled=no max-cache-size=none max-client-connections=
600 max-fresh-time=3d max-server-connections=600 parent-proxy=0.0.0.0
parent-proxy-port=0 port=8080 serialize-connections=no src-address=
0.0.0.0
/ip route
add comment=“” disabled=no distance=1 dst-address=0.0.0.0/0 gateway=
85.24.231.1 scope=30 target-scope=10
/ip route rule
add action=lookup comment=“” disabled=no dst-address=0.0.0.0/0 src-address=
0.0.0.0/0 table=main
/ip service
set telnet address=0.0.0.0/0 disabled=no port=23
set ftp address=0.0.0.0/0 disabled=no port=21
set www address=0.0.0.0/0 disabled=no port=80
set ssh address=0.0.0.0/0 disabled=no port=22
set www-ssl address=0.0.0.0/0 certificate=none disabled=yes port=443
set api address=0.0.0.0/0 disabled=yes port=8728
set winbox address=0.0.0.0/0 disabled=no port=8291
/ip socks
set connection-idle-timeout=2m enabled=no max-connections=200 port=1080
/ip traffic-flow
set active-flow-timeout=30m cache-entries=4k enabled=no
inactive-flow-timeout=15s interfaces=all
/ip upnp
set allow-disable-external-interface=yes enabled=no show-dummy-rule=yesnov/25/2009 21:15:15 by RouterOS 4.2
software id = J300-Y4Z6
/system logging action
set memory memory-lines=100 memory-stop-on-full=no name=memory target=memory
set disk disk-file-count=2 disk-file-name=log disk-lines-per-file=100
disk-stop-on-full=no name=disk target=disk
set echo name=echo remember=yes target=echo
set remote bsd-syslog=no name=remote remote=0.0.0.0:514 src-address=0.0.0.0
syslog-facility=daemon syslog-severity=auto target=remote
/system routerboard settings
set boot-device=nand-if-fail-then-ethernet boot-protocol=bootp cpu-frequency=
400MHz force-backup-booter=no
set boot-device=nand-if-fail-then-ethernet boot-protocol=bootp cpu-frequency=
400MHz force-backup-booter=no
/system clock
set time-zone-name=Europe/Stockholm
/system clock manual
set dst-delta=+00:00 dst-end=“jan/01/1970 00:00:00” dst-start=
“jan/01/1970 00:00:00” time-zone=+00:00
/system console
add disabled=no term=vt102
/system health
set
/system identity
set name=MikroTik
/system logging
add action=memory disabled=no prefix=“” topics=info
add action=memory disabled=no prefix=“” topics=error
add action=memory disabled=no prefix=“” topics=warning
add action=echo disabled=no prefix=“” topics=critical
/system note
set note=“” show-at-login=yes
/system ntp client
set enabled=yes mode=unicast primary-ntp=88.80.16.174 secondary-ntp=
192.121.13.5
/system upgrade mirror
set check-interval=1d enabled=no primary-server=0.0.0.0 secondary-server=
0.0.0.0 user=“”
/system watchdog
set auto-send-supout=no automatic-supout=yes no-ping-delay=5m watch-address=
none watchdog-timer=yes
