unable to ping internet via isp router

RouterOS Beginner Basics
1

hi, I have ny ips router 192.168.26.1 conencted to port 23. I have a lan client plugged into port 2 and it gets and ip from the mikrotik dhcp_pool1

From the lan client i can ping 192.168.26.1 i.e isp router but i cannot ping the internet i.e 8.8.8.8 any ideas where i’ve gone wrong?

# jan/02/1970 01:21:51 by RouterOS 6.45.9
# software id = 9E4S-CKUW
#
# model = CRS326-24G-2S+
# serial number = 
/interface bridge
add admin-mac= auto-mac=no comment=defconf name=bridge
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool1 ranges=10.10.10.2-10.10.10.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=ether2 lease-time=1d name=\
    dhcp1
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf disabled=yes interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=ether9
add bridge=bridge comment=defconf interface=ether10
add bridge=bridge comment=defconf interface=ether11
add bridge=bridge comment=defconf interface=ether12
add bridge=bridge comment=defconf interface=ether13
add bridge=bridge comment=defconf interface=ether14
add bridge=bridge comment=defconf interface=ether15
add bridge=bridge comment=defconf interface=ether16
add bridge=bridge comment=defconf interface=ether17
add bridge=bridge comment=defconf interface=ether18
add bridge=bridge comment=defconf interface=ether19
add bridge=bridge comment=defconf interface=ether20
add bridge=bridge comment=defconf interface=ether21
add bridge=bridge comment=defconf interface=ether22
add bridge=bridge comment=defconf disabled=yes interface=ether23
add bridge=bridge comment=defconf interface=ether24
add bridge=bridge comment=defconf interface=sfp-sfpplus1
add bridge=bridge comment=defconf interface=sfp-sfpplus2
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
    192.168.88.0
add address=192.168.26.254/24 interface=ether23 network=192.168.26.0
add address=10.10.10.1/24 interface=ether2 network=10.10.10.0
/ip dhcp-server network
add address=10.10.10.0/24 dns-server=1.1.1.1 gateway=10.10.10.1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether23 src-address=\
    10.10.10.0/24
/ip route
add distance=1 gateway=192.168.26.1
/system routerboard settings
set boot-os=router-os
wlan broke after upgrade, and I cant see why
2

Post the output of:

/ip route print

It is unusual to have ports added to bridge but disabled, I would rather remove them from bridge (it may or it may not be related).

3 
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 A S  0.0.0.0/0                          192.168.26.1              1
 1 ADC  10.10.10.0/24      10.10.10.1      ether2                    0
 2 ADC  192.168.26.0/24    192.168.26.254  ether23                   0
 3 ADC  192.168.88.0/24    192.168.88.1    bridge                    0

I removed ports 2 & 23 from bridge completely but no difference.

4

The routes seem fine.
Try “widening” the masquerade rule, from:

/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether23 src-address=10.10.10.0/24

to:

/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether23

If you run a traceroute towards 8.8.8.8, the 192.168.26.1 appears like first hop and then nothng?

Are you sure that the ISP router is working (if you connect directly to it a PC with address 192.168.26.2 and gateway 192.168.26.1 there is internet connection)?

5

ping worked form mikrotik terminal ok but not form lan client. I re-checked isp connectivity and all ok. Rebooted the mikrotik and all worked! very strange. Thanks for your help. Now onto next phase of setup…

force subnet through specific gateway
6

Sometimes strange things remain “sticky” so rebooting is generally advised if something has been changed and it doesn’t work, even if it should.
By rebooting you are effectively resettting anything that is created dynamically (when the router was booted with a different configuration) and that may not be updated by the configuration change.
The issue is that most changes actually work immediately and you never really know which changes actually need a reboot to take effect properly.
I think I will add this piece of info to the GP & CSA thread:
http://forum.mikrotik.com/t/gp-csa-for-mikrotik-devices/182176/1