SXT LTE - Forwarding Issues

Hi,

I have a freshly installed SXT LTE.

It receives an IP via LTE, which works fine.

But as soon as I use my PI Network Addresses and forward packets they are not received on the other end (Provider).

Is there some option to enable different Source Addresses for the LTE Interface?

If I understand you correctly you are using LTE with provider independent addressing. Traffic is leaving your network via the LTE interface with a source address within your provider independent space.

If this is the case you are likely being blocked rightfully by the LTE provider’s BCP38 posturing. The provider may also have other LTE specific reasons that I’m unaware of. Either way the provider needs to know that you want to be able to send traffic from your provider independent space. They could then adjust their BCP38 filter to allow it or tell you your use case is simply not allowed.

To avoid all the belly aching with the ISP you could always tunnel, encyrpted if you like, your traffic through the LTE network to a facility you control. You’ll manage the tunnel and can therefore allow traffic sourced from your provider independent address space to traverse it. The data center or facility could be a cloud provider like AWS, a peering exchange point or anything in-between. Just keep in mind the other head-aches that will likely come with emitting your provider independent traffic and ensure you have availability that doesn’t all of the sudden prefer the LTE tunnel only.

Hi,

the PI Network is announced to the ISP and they are aware of the incoming IPs.

They are unable to packet trace any packets on their tunnel endpoint, also the LTE provider is unable to trace any packets (at the tower, or wherever they do it) …

Could it be that the mikrotik modem throws away packets based on a PPP allowed IP rule?

The ISP will now try to test the setup with one of their Cisco Routers.

Just received the test results!

With a Cisco LTE Router the forwarding works without issues.

Suggestions?

This is a hardware limitation of the SXT LTE. You can only source traffic from the LTE WAN IP,. e.g. NAT

I had a similar fault and worked with support on it, only to find out it is a chipset limitation.


You are best to use a wAP LTE or Huawei me909s-120 which will work with PI routing.

You mean this one: https://mikrotik.com/product/wap_lte_kit ?

And you are 100% sure we can work with the PI IPs there?